A Feeling of Peace with Home Security

Filed under:Miscellany, Secure Life, Technology Stuff — posted on February 15, 2010 @ 7:07 pm

Keeping your home safe is likely your top priority and doing so will require more than simply bolting your house’s windows and doors. A great family safety monitoring tool should give you an excellent deterrent against these dangers and call emergency response teams if anything does occur. You need to take care in choosing the right home alarm monitoring system for your needs.

There’s no special family protection monitoring tool which suits each and every individual family. Ascertaining what your household’s unique protection requirements are is vital in establishing which alarmed security tool you and your kin should buy.

Should your family rely on gas appliances, then be sure that you make minimizing the danger of carbon monoxide poisoning a priority by purchasing an alarm tool that can catch a problem should one happen. Alarm monitors with an emergency contact system will suit an older individual, or one who has bad health. A surveillance system would be better suited to families with small children as they are ideal for watching babysitters. Remember when you buy a home protection system that there are many layers of protection to consider. A higher level of security can be attained to by using a cloaked security camera tool, because nobody knows if it’s there in the first place. A security system that is nearly impregnable is viable provided you buy an industrial strength monitoring tool featuring retina or fingerprint identification panels.

Don’t just think that visual surveillance is the be all and end all of a first-class family protection monitoring tool. There are home alarm monitoring tools which utilize glass smash, motion, vibration and impact sensors to call the emergency services instantly the moment an unauthorized entry is attempted on your home.

Top-tier home alarm monitoring tools should be fitted with a panic switch, to keep your worries at bay. Just activating that switch sends an alarm to the security company if something threatening should happen. Depending on what you were given when you bought the family protection monitoring tool, the security company will then contact the authorities to send help, or they will contact you to check what the problem is. There are many great domestic protection web logs online for you to have a look at where you should also find more information and pointers. Although it does demand particular consideration, choosing the right home alarm monitoring tool shouldn’t be too much of a problem. Just a little work can provide you peace of mind that could last for a long time.

Registry for Windows 98

Filed under:Secure Life, Web Portal — posted on January 25, 2010 @ 9:50 am

Registry is the name of Windows hierarchical database, that Windows uses to store options and configurations for a Microsoft Operating System.

The Windows Registry provides information about the settings for low-level operating system and applications running on the platforms. The kernel, user interface, device drivers, services, SAM and third party applications are some platforms which use the Window Registry.

To boost computers performance, the registry also gives a method to use counters.

The Windows Registry was first launched in the market with Windows 3.1 to store important configuration information for COM-based components.

But the use of Windows Registry extended with the launch of Windows NT and Windows 95. It included a large number of per-program INI files wherein configuration settings for Windows had been stored.

Keys and values are the two basic components of the Windows registry.

Stored inside the keys are the pairs of name/data known as registry values.

The Windows API functions, querying and manipulating values of registry, get value names in a different way from the key path. They may also use handle which identify the parent key.

However, the terminology is misguiding to some extent, as values are identical to an associative array, where basic terminology would recognize the values name portion as a “key”.

These terms are an archive from 16-bit registry in Windows

The biggest advantage of Registry in Microsoft Windows is that it can be edited manually with the help of regedit.exe or regedt32.exe in the Windows directory.

This advantage could have serious consequences e.g. a slow Vista if Registry editing is done carelessly. Thus, Microsoft recommends that before editing the Registry, backups should be performed to avoid damages. In fact, many industry experts like editors and authors of leading trade magazines have recommended this.

A direct implementation of the current registry tool was seen in Windows 3.x, known as the “Registration Editor” or “Registration Info Editor”.

Typically, it was merely a database of applications that are used to edit OLE objects embedded in documents.

However, it should be remembered that both the editors have several differences.

An integrated program of these two distinct programs was firstly seen in Windows XP. The operating system embraced the REGEDIT.EXE interface and infused the REGEDT32.EXE functionality into it.

However, the distinctions do not occur with Windows XP as well as the newer versions REGEDIT.EXE being the improved editor and REGEDT32.EXE being purely a stub invoking REGEDIT.EXE.

Following functions can be performed using the Registry Editor:

  • Importing and exporting .REG files, exporting data in the binary hive format
  • Creating, manipulating, renaming and deleting registry keys, subkeys, values and value data
  • Setting permissions based on ACLs (Windows NT-based systems only)
  • Loading, manipulating and unloading registry hive format files (Windows NT-based systems only)
  • Remotely editing the registry on another networked computer

Linux platform too allows for editing the registry with the assistance of an open source tool called Offline NT Password & Registry Editor.

Selection of Mail and Internet Hosting Service Plays Major Role in Determining Online Success or Failure

Filed under:Secure Life, Tool Portal — posted on December 17, 2009 @ 10:32 am

Online success or failure often depends on your choise of hosting for email and web.

Publisher: Jonathan Peter Darwich

Selection of Internet hosting service plays key role in determining the success or failure of any business willing to go online. Internet hosting is the primary thing which each business entering into web domain has to confront. Whether it is posting promotional blogs, launching a website or other activity, Internet hosting service is certain. In today’s intensely competitive world where rivals sought for lucrative marketing strategies to, success of an online business depends on the selection of Internet hosting service. In fact, a customer centric website host draws a distinction line between a successful and failed online business.

Companies working to make their presence on the Internet will find a large number of hosting services. These services are primarily limited to the web such as web hosting service, reseller hosting service, shared web hosting service, dedicated web hosting service, virtual private server, managed hosting service, home servers, collocation web hosting service, etc.

It is a common conviction of some companies that simply establishing a webpage with custom log, contact details and a brief detail of services would be enough to solve their purpose. But the perception holds true in some cases, not all.

For instance, if a business has a wide range of products to sell, then merely a home page for online business will not do. In fact, custom webpages are required to be created here for every department under which the company is promoting its products. So, to meet this requirement, application hosting service should be the preferred choice.

Normally, people show concerns for other services such as e-mail hosting services, mail list management and DNS hosting services that are associated with web-based applications. Therefore, in order to garner lucrative results, complete and profound technical proficiency and support are required for the application hosting services.

Thus, businesses should hire a professional to run hosting services who not only understands their requirements but also provide appropriate solutions. Obviously, there are many other factors which a business may consider and that all depends on the type of website and the kind of presence that it wants to gain online. Lastly, a business should ensure that its investment in the Internet hosting service give complete value.

While the selection of Internet hosting service solely depends on business hiring it, security of that service need to be on the top priority list. Every online company should necessarily ensure that it has up-to-date mail spam filter, firewall and other security software for all its online activities to run safely. This will help the company a big deal to avoid various kinds of malicious threats. Rather, the company should be extremely attentive towards this in case financial transactions are taking place via its website. Ensuring the complete safety of the website will also help the company earn a good name among customers as they will feel their transactions safe on their website.

My Shiny New Home Alarm Systems

Filed under:Best Home Improvement, Internet Real Estate Resources, Secure Life — posted on June 5, 2009 @ 11:33 am

I have been surfing for a home security systems for 3 months now and I finally got one that seems to fit my hut, my wife and kids and our lifestyle.

We researched plenty of different alarm companies to check the lowest cost alternative as opposed to the most high-ticket selection. I must say, that I was bummed out with most of the internet sites we saw at but one stood out above all the others and that was Family Home Security. Their monitoring data was wonderful, eye opening and illuminating. I wish they were a company that established security systems themselves because I know it would be done meticulously and with much of tending to detail.

What made it a big experience? Well, we received a break-in 6 days ago that wasn’t very fun. As Luck Would Have It, we were out of town and they merely selected jewellery and coins. Now there are kids in the house and a lot more valued stuff like computers, electronics, and above all - family and family memories and pictures. We simply sought to find the best security system that we could all apply and feel stable with. It was by all odds time to receive one this day.

So, how did we determine the proper home security system? We started out by searching ‘home security systems’ on the search engines, then surfed through thorough of the internet sites on the first page. A mass of them were junk…and I was bitter about that. Everybody I love says Yahoo is the easiest…anyway, aft looking through those pages we couldn’t obtain what we were waiting for. We didn’t need a tough sales procedure and we didn’t want to guess a great deal about it. Near all of these websites were bothering sales pitches - I wanted selective information!

Several of the businesses we studied were ADT, Brinks, APX, Pinnacle, Monitronics and GE. Several of them look to utilize corresponding home security systems…and we lastly chose with a Pinnacle Security system after learning from the healthy info received at homesecurityguru and http://www.familyhomesecurity.com.

It’s fine to check some informative sites out there on the matter of alarm systems.

Go find that security system!

Is America Safe?

Filed under:Secure Life — posted on May 20, 2009 @ 10:43 pm

As the devastation and death toll from deadly Hurricane Katrina becomes more apparent, it is a grim reminder that we live in dangerous times.

Every year, millions of people around the world lose their lives or have them seriously disrupted because of floods, tsunamis, wildfires, earthquakes, blizzards and hurricanes.

In today’s troubled world, we face even greater threats from terrorism, civil unrest, explosions and the possibility of chemical, biological or even nuclear attack.

In the United States, the terrorist threat is not only from overseas groups; domestic terrorism has been with us for decades. Violence on the road and in our places of work and schools is another growing area of concern.

•In the last 25 years there has been more than 320 domestic terrorist incidents and suspected incidents - an average out of one every month over this period.

•Over a quarter of the U.S. population are children. In the last eight years more than 40 students, teachers and custodians have been shot dead at incidents in schools.

•More than 1.7 million people are the victims of violent crime while at work.

•There are 1,200 road rage related deaths every year with a further 40,000 people killed in traffic crashes and half a million hospitalized,
“The threat is real and it is growing,” warns Is America Safe.com, a new website dedicated to protecting Americans and the Homeland from natural disasters and terrorist attacks.

Every year about 1.7 million people are victims of violent crime while working or on duty. About 75% of these incidents - around 1.3 million - are simple assaults while an additional. However, over 800 workplace homicides occur every year - more than two every day somewhere in the country.

“Not only are many Americans not safe at work, many bosses are doing little to protect their workers in the event of an emergency - whether from natural causes or man-made such as violence and terrorism,” says Is America Safe.com spokesperson Don Philpott,

“It is a disturbing thought that more than half the businesses in the United States do not have a crisis management plan - what to do in the event of an emergency - and many that do, do not keep it up to date. Even fewer businesses and organizations have a physical security plan to protect their building and people who work in it,” he says.

“How many of these buildings are safe from terrorist attack or natural disaster. And what about the nation’s 110 million households? How many families would know what to do in the event of another Katrina or other emergency,” says Philpott.

“Terrorism is not a new challenge and it is not going to go away any time soon so we have a duty to our families, friends and loved ones to ensure that the places where we live, work, learn and play are secure and that the people using them are safe,” he says.

Is America Safe.com has launched a series of practical handbooks on how to plan for and survive a major emergency whether it is a natural disaster like a hurricane or flooding, or a man-made incident, such as a terrorist attack.

“Our aim is not to alarm people but to prepare and protect them so that they have the tools they needed to survive, get on with their lives and preserve the freedoms that we all hold so dear,” he adds.

Ends

For more information go to www.isamericasafe.com or contact Don Philpott at 407.862.5477

Don Philpott - EzineArticles Expert Author

Don Philpott has been writing, reporting and broadcasting about security, civil unrest and terrorism for almost 40 years. For 20 years he was a senior correspondent with Reuters-Press Association, the wire service, traveling the world reporting on major events and trouble spots including Northern Ireland, Lebanon, Israel, South Africa and the Far East. He is now senior correspondent with Homeland Defense Journal, the leading homeland security publication in the U.S. , and he writes for magazines and newspapers in the United States and Europe.

He is the author of more than 50 books and is a regularly contributor to radio and television programs on security issues. His latest book to be published this fall is The Building Security Handbook.

He has produced special reports on Protecting the Athens Olympics, The Threat from Dirty Bombs, Anti-Terrorism Measures in the UK, The National Guard , Nanotechnology and the U.S, Military and The Global Impact of the London Bombings, published in August, and which resulted in a number of radio interviews in the U.S. and UK

Eavesdropping and Counter-Measures: Technology and Techniques

Filed under:Secure Life — posted on April 23, 2009 @ 10:17 pm

You need to know how to protect yourself, since your security department or
any consultant may not be truly aware of these threats and therefore not
dependable. Since September 11th, a number of businesses entered the security field with little to no knowledge of the trade itself; only of its profit potential. Even outfits that have been around for some time and well-established have not been able to stay current with the latest innovations.

Realistically, viewing your threat level has to be considered since everyone
should expect some sort of impending privacy issue no matter how small. Thanks
largely to the Internet you can arm yourself with much of the knowledge and
equipment that the so-called experts use. If a respected agent of computer crimes
for the Secret Service in NYC had his T-Mobile Sidekick hacked, who knows what else
happens out there to others in any business.

Realistically, viewing your threat level has to be considered since everyone
should expect some sort of impending privacy issue no matter how small. Thanks
largely to the Internet you can arm yourself with much of the knowledge and
equipment that the so-called experts use. If a respected agent of computer crimes
for the Secret Service in NYC had his T-Mobile Sidekick hacked, who knows what
else happens out there to others in any business.

We’ll start acoustic ducting evaluation is the inspection of air ducts, baseboard
heaters, coffee rooms, lounges, bathrooms or any way the architecture of a building
can transfer sound. A simple example is to put your ear to a wall and listen.

Basically anything that requires the use of the naked ear is called an acoustic
bug. Softer surfaces can help muffle sounds but there are more efficient means out
there. So be aware that the way an office site is designed can act as a conduit for
conversations. Also, be aware of any changes can have adverse affects. Simply
playing music can do wonders for masking conversations.

Inspection of telephone equipment and wiring is called line analysis. This is
trickier than it seems since sometimes a possible weakness has an actual purpose to
the telecommunication system. Especially if it requires constant maintenance and
software upgrades.

All instruments should be opened and inspected. Ideally they should be
compared with a known safe phone or device. If you’re not sure, just remove that
piece of loose components and wiring and see if the phone still works. The wiring
can be modified in a switch within the handset that essentially turns it into a
microphone. If you bypass this hook switch, you can listen in from anywhere on the
landline. Technical
equipment won’t be able to detect this. Time Domain Reflectometry is the sending
of a pulse down a telephone line. If there is some sort of disruption; a wall outlet or
wiretap; a portion of the pulse will be
sent back to the device called a Time Domain Reflectometer (TDR). Then the time
difference between the reflection and the continuous run is measured. This helps in
determining the distance to the anomaly.

These devices can perform all sorts of diagnostics including mapping a wire
network. That can be useful in locating a hidden phone. Hidden phones have several
obvious uses such as making long distance phone calls to being placed in an office
across the street to receive betting requests by bookies; a practice called back
strapping. If you open up the modular jacks where you connect your phone, you’ll
usually see four wires. In most cases only two wires are connected; commonly
known as ring and tip. If you see all four connected, be aware that is not usually
consistent for most wiring situations, especially in homes. The other two wires
could be used for a bugging device.

For instance, the microphone you use in a voice recorder can be cut in half.
Connect the mike head to one set of unused wires anywhere on the phone wire.
Then, so long as there are no breaks in the wire, connect the other end to the jack
that connects to your recorder. Now place your recorder to be VOX (voice) activated
and now you have an extremely reliable bug. By the way, this should be manually
inspected for since using a specialized bug detector may see nothing wrong or
inconsistent. A bug such as this that connects to a wire is called a direct tap.

The other general type is called an inductive tap. This is when an instrument is
outside a wire but can still distinguish what’s transacting over a wire. They are
harder to detect since they don’t draw power from the line such a standard
telephone would. These are referred to as snuffle bugs. A simple probe used in
hunting wire signals has a speaker, which can display sounds. By
accident one day I was working on an apartment intercom system while using a
probe. I could hear conversations throughout the building quite clearly just
through the intercom boxes mounted on walls from the master unit in the
basement.

If you’re using wireless headsets or cordless phones, the radio signals can be
intercepted. A cordless phone acts like a radio, but depending on the frequency and
a few other factors, can make interception extremely difficult. With some
manufacturers, you can buy the same model as your neighbors or the office and
have it join their phone system. Double check Caller ID boxes to see if they also
record numbers dialed besides obviously those being received. If you’re using VOIP
(Voice Over IP), remember that calls can be recorded in a fashion identical to
intercepting data between two computers.

These packets of data can reassemble an audio file. Obviously electronic
devices possess semiconductor components such as diodes, resistors and such. The
method to hunt for these components is called Non-Linear Junction Detection
(NLJD). The NLJD unit emits a radio signal while listening for the return signal from
an electronic device. This becomes very useful when a bug is embedded in a picture
frame or wall. The eavesdropping device doesn’t have to be active for it to be
discovered. If a device is active and transmitting wirelessly (or even on a wire), you
can detect it with a Radio Frequency Spectrum Analyzer. Depending on the detection
device used, you can determine whether voice, data or video is being sent, and
possibly listen to the data. Try to use different size antennas or buy one that
collapses. Different frequencies can be detected more efficiently by using various
sizes. The use of filters with antennas can also help pinpoint devices on specific
frequencies.

Electronics such as computers, FAX machines and especially CRT monitors can
radiate electromagnetic signals or pulses that can be received by other equipment.
This is known TEMPEST. One way to complicate the surveillance of this is to use
certain fonts and line walls or equipment with different gauges of copper mesh wire.
You can further enhance this posture by using special paints, which block radio
transmissions.

Radio waves will look for a leak or break, so be careful of defensive
applications. One-way window tints can help in blocking signals. Since an
electronic device could generate some heat they can be detected in another way.
The use of a thermal imagery device can detect and actually see minute amounts of
heat radiated for your viewing. You can hide the heat signatures by using creams or
neoprene. Technology exists to collect information from blinking LEDs of modems,
routers, print servers and similar devices. You can only see some general blinking
but with the use of properly tuned optics, filters, oscilloscopes and good timing you
can discern much more. One of the LEDs on your keyboard can be altered to blink
while you are typing in a fashion similar to Morse Code. You can also use a tap in
the keyboard that sends out radio waves again similar to Morse Code and no anti-
virus software will ever be able to find it. Even when a CRT computer monitor is
facing a wall the light can be in a sense read by its flickering emanations from some
distance. A good defensive measure is to buy new LCD flat panel types.

Another approach to attacking FAX machines is to simply record the noises it
makes and play it back to another machine. I used to do this for a client so they
could keep a record of all the faxes they made and received. There are creative and
potentially illegal defenses against wiretappers and Peeping Toms. One is to
transmit an extremely high pitch down the wire, thereby rupturing the listener’s
eardrums. I knew someone who once sent a powerful electrical spike down his
phone wire thereby destroying his divorced wife’s recorder.

By the way, this leads to another topic-expect the device to be discovered
someday. Don’t leave your fingerprints on it. He found it and had it dusted, thereby
producing some prints. My friend used this as leverage against the Private
Investigator that planted it. Advice to Private Investigators, a word to the wise: if you
do this part-time, hire someone who does this full-time. This P.I. lost his license
and almost went to jail. The lawyer who recommended him got into a lot of trouble
as well. He received some unwanted attention from the Feds because of his
telephone dealings went across state lines and also happened to involve the Post
Office.

There is another budding field related to this topic called Protective
Intelligence. Currently there are only a few experts who do this kind of work.

A laser or an infrared beam can be used at a considerable distance from a
target building. Conversational sounds can vibrate unto solid objects such as
windows. The beam’s reflection varies in relation to the movement to the window,
which is received and converted back into something audible. To mask the sounds,
you could attach a vibrating device (basically an altered electric razor) to the
window.

Of course if the window is open, then a laser can target another object instead
of the window. A beam of light or laser can be directed to go through a window
onto a solid object thereby nullifying such defensive measures again. Generally you
really can’t detect such attacks unless the laser, infrared or light beam is being used
that moment. Certain materials can be used to detect IR emissions, as well as the
use of passive night vision gear. Certain fabrics or even a curtain may actually show
the spot where a beam of light or laser is being focused. Unless the room is dusty or
you have an artificial can smoke, you can follow the beam up to a point and
guesstimate it’s location. One type of optical bug is an infrared transmitter. When
placed in the area of interest for transmission of the conversation to an infrared
receiver which will then translate the conversation into an audible format.

Many of these same procedures used can be applied to locating hidden
cameras. A relatively new device uses a series of lasers to seek out optics. This was
originally intended to locate snipers by bodyguards.

I have listed the techniques, counter-measures and then the counter to the
counter-measures to prevent any false sense of security. Usually constant vigilance
is your best weapon besides knowing what to look for. Even if you find a “bug
sweeper” with good credentials, certifications and experience, ask them detailed
questions. Not just to test them but also for your own peace-of-mind. This makes
our job easier and we appreciate greatly when dealing with knowledgeable
customers.

Phishing: A Scary Way of Life

Filed under:Secure Life — posted on January 13, 2009 @ 7:16 pm

The Federal Bureau of Investigation has identified “phishing” as the “hottest and most troubling new scam on the Internet.”

What is Phishing?

Phishing is a scam initiated via e-mail. Messages are “fishing” for personal and financial information. Most often, e-mails appear to be from reputable companies (internet service providers, telephone companies, etc), banks, and other financial organizations. The e-mail message often gives a story of the bank needing to update its personal information database or a financial institution claiming your personal data had been lost.

Who Phishes?

Hackers and Scammers looking for personal and financial information use phishing as an effective method of gathering information. Phishers imitate legitimate companies in e-mails to entice people to share passwords or credit-card numbers. Recent victims include:

• Bank of America
• Best Buy
• America Online
• eBay
• PayPal
• Washington Mutual
• MSN (Microsoft Network)

History of Phishing

The term phishing comes from the fact that Internet scammers are using increasingly sophisticated lures as they “fish” for users’ financial information and password data. The most common ploy is to copy the Web page code from a major site such as AOL and use that code to set up a replica page that appears to be part of the company’s site. (This is why phishing is also called spoofing.) A fake e-mail is sent out with a link to this page, which solicits the user’s credit card data or password. When the form is submitted, it sends the data to the scammer while leaving the user on the company’s site so they don’t suspect a thing.

Avoid Phishing

Fortunately, common sense can save you from giving away your personal information. For example, be aware for the company requesting information. I have received e-mails from banks I have never had business with. Know that your bank or ISP will never ask for your information out of the blue. Banks do not update their databases and misplace information.

Tips To Avoid Phishing

• If you receive an unexpected e-mail saying your account will be shut down unless you confirm your billing information, do not reply or click any links in the e-mail body.

• Look for words misspelled or other grammatical mistakes.

• Before submitting financial information through a Web site, look for the “lock” icon on the browser’s status bar. It means your information is secure during transmission.

• If you are uncertain about the information, contact the company through an address or telephone number you know to be genuine.

• If you unknowingly supplied personal or financial information, contact your bank and credit card company immediately.

• Suspicious e-mail can be forwarded to uce@ftc.gov, and complaints should be filed with the state attorney general’s office or through the FTC at www.ftc.gov.

Jacob Madison is an internet marketing professional specializing in high-return growth and advanced marketing tactics. Find out more about him at http://www.jacobmadison.com

Home Security and Perimeter Defenses

Filed under:Secure Life — posted on December 18, 2008 @ 8:24 am

Perimeter defense is one of those buzzwords one hears in the home security industry. Perimeter defense simply means making it difficult for burglars to get close to your home. The most commonly seen perimeter defenses, of course, are high walls and fences. In many areas of the country, these walls and fences are the primary defense for the home, but it is important to consider their drawbacks as well as their benefits.

For instance, a high wall or sturdy fence may give the homeowner a false sense of security, and cause them to ignore other vital aspects of home protection, like proper lighting and a home alarm system. Often those who feel they have a strong perimeter defense system even become sloppy and forgetful about the most basic home security - keeping the doors and windows locked.

As you can see, perimeter defense is fine, but it is most effective when combined with other home security measures. If the fence or wall is the only means of home defense, once it is breached the burglar essentially has unfettered access to the home, its contents, and most importantly its occupants.

The most effective perimeter defenses are those that are difficult to penetrate, and those which are enhanced by the presence of cameras and motion detectors. These cameras and motion detectors will serve as advance warning that a burglar or other criminal is trying to breach the perimeter defenses, giving you time to react and notify the authorities.

Of course fences topped with razor wire or barbed wire will be much more difficult for burglars to climb over, but they can be ascetically displeasing as well. It is important to take the nature of the neighborhood, and the nature of the threat you face, into account when thinking about topping the security fence or wall with additional measures like barbed wire or razor wire. The better (and more attractive) solution, may be to use the security cameras and motion detectors we talked about earlier.

Of course these cameras and motion detectors only work if someone is monitoring them, so they work best in conjunction with a security monitoring system, or dedicated security staff. It is important to examine the need for perimeter defenses, and to combine those defenses with a strong alarm and monitoring system. Alarm companies may be able to offer some sort of monitoring service. If you plan to use security cameras atop your security fence, be sure to ask about monitoring options.

Brooke Sikula is a freelance writer based in Ventura, CA and writes on a wide range of topics from home improvement to credit repair and everything in between. She is a regular contributor to http://www.home-improvement4u.com and http://www.get-home-improvement.com For more information and advice on home security, check out http://www.home-security4u.com

Link Exchange Scam

Filed under:Secure Life — posted on October 14, 2008 @ 1:31 pm

There is a new little scam going on, and it relates to link exchange requests.

It goes like this:

You get a request from somebody to exchange a link with their site and they offer in return a link to your site. But the catch is that the link they offer is actually one of your old links they found on another site you’ve exchanged links some time ago! So basically they are offering you a “useless exchange” for nothing in back as your link has been posted before by the True owner of the site.

Let me give you an example: 2 days ago I got a submission to my Craft site to put a link to a poker software site! Although I Specifically state I only except links from Industry Related sites it didn’t deter this retarded person to submit his/her request - which raised the first flag right away. Then of course the person entered a total nonsense instead of the name on the submission form.

And when I checked the supposed link-back, I found out it is one of the links I’ve exchanged with the owner of that site long time ago. How do I know it was not a “new” link? The description of that link was long time not accurate as I have changed it since, even the number in it was not accurate as I increased the commission I offer my affiliates to 60% instead of the 40% like those years ago…

Then yesterday I got another submission to the same site again from the same scamster, again pointing to another of my old links on the site I also exchanged links some time ago. When I’ve contacted the owner of the supposed link exchange request he was very surprised as he never did that new submission.

But wait:

Today the same person was brazen enough to send me a request to another of my sites and as a “link back” even stated my own Article I wrote long time ago and has been posted in one of the article directories! Can you believe that nerve?

In case you are wondering all the submissions came from the domain name @zettwalls.com, so pay a close attention if you get a submission from this domain name.

However since I doubt I was the first one this shameless scamster tried to trick, and obviously it had to work for him/her before, I’d recommend check those Link Exchange
requests, and if you Do link exchanges check the site of the submitter and also the link-back they are offering.

Dagmar Rakos is the owner of Conopmark.com - Your Resources and Directory for internet business, internet marketing, affiliate marketing, small business online. Tips, tools, reviews, updates - get it all at: http://www.conopmark.com

Technology and Techniques Used in Industrial Espionage

Filed under:Secure Life — posted on October 13, 2008 @ 1:21 pm

Industrial Espionage. These methodologies are being used on a daily basis by competitors maybe even against you. I knew a Private Investigator who used to break into other firm’s voicemail boxes. He was suspected of erasing messages and stealing potential clients. I know you may be
thinking that is not right. Maybe so but if a Private Investigator cannot protect him/herself than what use are they to a client.

This happens all the time. If you think it is bad here in the United States try
overseas. It is pretty much
considered fair game and rarely enforced. Even the Concord was remembered for
being heavily bugged.

What you may find surprising is just how easy it is to do. You could even use
off the shelf items, although fully assembled models are readily available and
cheap.

The best way to learn is to do. A little bit of paranoia and a lot of imagination
goes a long way. Just look around your house and see what can be used. Baby
monitors can be remotely activated and used to listen in on you. Your cell phone
can be hacked through its Bluetooth Feature, so not only can all the data be copied,
but also settings could be changed. Your phone could be called and answered
without you knowing; thereby listening to your conversation. Your
phone can also be used to make a call to someone else without you touching a
button ideal for incrimination purposes. There was a technique originally developed
to remotely view what you watch on your television,
now adapted for computer screens. You can find the plans to build this on the
Internet from many sites. This is used in Europe, particularly the Balkans all the
time against ATMs. There is still the good old
fashion radio scanner to listen to cordless phone calls. Then you can say, “Well I use
a digital, spread spectrum model using 2.4 or 5.8 frequencies.”

True that is good protection, but given time the packets of data (digital remember)
can be reassembled and decoded. Thankfully that takes time, but you can buy a
digital scanner to listen to real time conversations. You can also buy software
overseas to work with scanners and laptops for listening to cell phone calls. An
interesting side note: Some of these same companies that provide such
equipment constantly steal from each other.

Outside your house or in the basement of your apartment building are boxes
where your land line phone service comes through. You just need a telephone/
linesman butt set or build one from a phone to listen in.

So you say, “What does this have to do with industrial security?” Well usually
certain people are targeted when looking for a means into an organization. Plus,
they can make a convenient scapegoat and distraction to investigators.

Believe it or not it is often I.T. and security personnel who are targeted.
Although they may be more aware of security they also have higher privileges than
most. Many times they use a popular and recognized remote access program when
telecommuting. If you can capture their username and password that may be all
that you need. Sometimes there may be more advanced authentication
procedures.

For instance, the server you will log into or firewall you wish to bypass may require
extra authentication. Sometimes it may request a MAC address. This is the
unique serial number burned into network cards. This can be copied and you can
change yours to that one with a software application. If you have the IP Address,
then you can switch your IP Address as well.

When you access the victim’s computer and place a remote access program of your own,
don’t use one with obvious hacker names like Back Orifice. Using one that they
already have, such as PC Anywhere or Remote Desktop would be ideal. Don’t worry
about tackling a wireless computer network. Even with security enabled that could
just be a speed bump to the dedicated. If probing a victim’s computer then I
recommend making it appear as spam. If they have a firewall, you can probe it and
see what version they are using. Afterwards look around for data on cracking that
firewall. Any firewall can be cracked and guess what? You can always break into
their home and place whatever it is that needs to be placed.

Alarm systems can be defeated rather easily if you know how. Many times
these burglar alarm systems were installed by poorly trained or overworked
employees who take short cuts to get the job done. Sometimes you will actually see
the keypads mounted outside the door to a home or easily viewable through a
window. What happens if they cut the phone line or cover the siren box? Locks can
also be bypassed by means other than just lock picking. You could install a high
security lock, but if all the hardware around it is weak than what good is it?

Dogs can be tricky and are usually the toughest obstacle to overcome. Believe
it or not, little dogs that are the worst. Big attack dogs can be overcome and
sedated or contained; even the well trained ones. But little dogs that run around
and make a racket are a menace. Once a dog starts barking, the rest
neighborhood’s dogs will join in. Even using a high frequency sound device to
annoy the dog on a property you wish to enter can alert other dogs.

If you do break in, check the bedroom and den first. Bedrooms are where the
most important items usually are. You are not there to steal but to place
bugs, software etc. and to copy anything of interest, such as a security card, hard
drive or key. Bring a digital camera and photograph the scene before moving
anything. If there is too much dust then leave it alone. Dust leaves a telltale sign,
which is very noticeable when moved. Most locks used to secure desks are easy to
pick so that’s not a big deal.

Bring a hard drive cloning devices and a Linux Boot Disk to copy entire hard
drives. This way even if they are password protected and encrypted you can crack
them later at your leisure. You can carry MP3 players and
iPods to act as a second portable hard drive.
That can be particularly handy when in a public environment. Someone thinks you
are fiddling with a MP3 player but you are actually downloading somebody’s
hard drive. Carry all the cables you may need since some machines may not have a
particular port like firewire. If they do have a faster transfer rate type port, then by
all means use it. You can do something else while it is busy copying data.
Remember to look under the keyboard for passwords and pay attention to Post-its.
Those little pieces of paper are gold mines. Also, and maybe more importantly,
copy data from cell phones and PDAs, if they are available. This can be done with
cables to your own PDA or laptop. There are portable dedicated units for this
purpose as well. The safe if they have one are usually in the bedroom. Use a metal
detector to find it. Place the metal detector wand on its lowest setting, so only a
significant metal object will trigger it. Sometimes a safe can contain something you
can use as blackmail.

There are devices which mount to a safe’s dial which automatically attempt
countless combinations; some are stand-alone, while others are connected via
laptop. You can also try the basic combinations for that make and model. Some
safe technicians use the default combination or may try to use some thing you can
remember like a child’s birthday. If all else fails try 36-24-36, it’s
very popular with certain bachelors. Placing bugs around the house is usually
useless. Most people have a tendency to put the television set or stereo on when
they are home. The only exception may be over the head of the bed and wait for
pillow talk. You may as well concentrate on telephones lines. They may use a cell
phone in the house but once again you may not be able to hear the conversation.
Even when using a laser mike which focuses a beam against a window and picks up
vibrations in a room may not work, especially if they have plush carpeting or heavy
drapes.

You can record a conversation on video you can always lip-read if audio is not
available. If you have the time and they have a garage, see if it opens automatically.
Go over to the garage door and make a copy of the remote for yourself. This works
even with the rolling code models. This is just a general outline of what you can do.
Make sure to check the soles of your shoes before and after a break in. I suggest
wearing a popular brand in case the police make a cast of your footprints. You can
also place a pair of hospital booties over your shoes to cover your tracks.

It is not a bad idea to wear a jogging suit as opposed to being dressed as a
ninja. If you have to run, you would not seem too suspicious. It is wise to take as
few chances as possible.

If you have more time, the best way to infiltrate an organization is to join it. If
not directly then as one of it’s support people such as food services or building
maintenance. Cleaning crews usually work after hours under little scrutiny. These
companies have such a high turnover that they are always hiring and do no
background checks. If you do show up for an interview or to do some sort of sales
pitch come mentally prepared. Hang around the places where the target
organization’s employees are and pretend to be a headhunter. Hand someone your
demo CD. Of course that CD should have more on it than they expect. Anti-virus
protection can be completely by-passed using this method. I will even guess that
you have done this countless times without a second thought.

If the job interview is for a technology-based position, they will tip their hand
by asking you what do you know about such and such. A good skill to pick
up will be the ability to read documents facing away from you on a desk. While you
are at it develop an excellent memory for detail, especially numbers.

Taking a few acting classes could help here, too. What I like about situations
like this is that these are the ideal times to place bugs. If you think it may be
discovered, then just dispose of something in their wastebasket. Blow your nose
while placing a micro-transmitter in it. I doubt any one will inspect the contents of
a used tissue. They will end up getting rid of it for you. There is a chance that
said item could be discovered by personnel who do paper shredding services. Most
companies do not use this service. This could also be a good idea to do some
dumpster diving later and see what they throw
out. You can carry a micro digital camera and record everything you see. Just
pretend to be listening to an iPod or something. Whatever you do, pretend that you
belong. If someone tries to stop you, start grooving to some imaginary tunes and
head for the elevator. Always have an excuse ready. You can also use something
known as video ham radio. This transmits video images via radio signals; more
commonly used by rescue crews. This is different from the more conventional covert
video systems used out there.

Video systems tend to use a lot of battery power so bring spares. Ideally it
would be nice to place cameras in the copy machine but usually a copy machine
technician best accomplishes this. Some operators have
gone as far as replace whole machines. The FAX machine is the best for
tapping. No one seems to ever suspect that is tapped but will scrutinize everything
else. You may think that that is an oversized DSL filter on it but maybe it is not. If
there is a damaged door with a lock still attached try to remove it. A good
locksmith can build master keys by analyzing the pin tumblers. With some practice
you can do this as well. Cut a key for both before and after removing spacers from
pins if they have them. This is what is called a
master keying system. What you would want to make is the grandmaster key. This
will allow you total access.

If you do start opening doors, be aware that there may be door contacts.
These are magnetic switches used in burglar alarm and access control systems. You
can use basic electronic tools to locate the magnet and use your own magnet to fool
the door.

There are different devices out there which can record and analyze security/
prox/access control cards Weigand output. The Weigand output is when a card
reader emits a radio wave, which energizes the card. The card then sends
out a unique identifier. This is what you want to catch. With another device you can
replicate this identifier, mostly using a PDA. Laptops are better but conspicuous
compared to a PDA. Smart cards and the magnetic strips from more conventional
credit card types can be duplicated on the spot. Just be aware that with most
modern access control software the face will show up on the computer screen that
accompanies the card being used so enter with a group. If there
is a numeric keypad you can use ultraviolet light to check for smudges and you can
guess from there. If you have access to a thermal imagery device, you can
see the heat signatures. These are so cheap now that they are popping up in the
most unlikely places. Hunters are using them for the slight advantage it
gives them. Usually the stronger trace is the most recent. That will be the last one
pressed. From there you can guess accordingly. Many systems have a
three strikes and you are out policy, so proceed with caution. Otherwise, if you are
in a mantrap the doors will stay locked and you are trapped and security will be
alerted.

Biometrics is growing in popularity but as you probably guessed by now, can
be defeated. It is rare for somebody to wipe their prints off. A lot of these devices
are fingerprint based so get copies of fingerprints. One way is to get them from the
biometric reader itself. Some crime scene photographers have special software or
film that accentuates photos of fingerprints. Some scanners that check for retinas
and such can occasionally be tricked by trying out a bunch of well-made fake
eyeballs and a flashlight. You can remotely access the security and camera system
either by the Internet or through a phone line (pre-paid cell phone included). You
can give yourself privileges on a blank access card and erase video files of your
activities.

Sometimes the video files may be also network storage based. Once again you
should access anything with any trace of your existence. You can also defeat the
cameras individually. Strong light devices can blur an image or anything that emits
strong electrical signals can cause static or snow. If the camera is too far you can
use a HERF (hi-energy radio frequency) gun. This can send a focused burst which
can either be disruptive or destructive. Think of using your cell phone next to a
clock radio for an analogy. These are not as hard to acquire as you might
think.

If you are this close you should monitor the security guards’ radio frequency.
You can use a radio that can communicate with theirs try not to talk to them for any
reason. Many sites are now recording radio transmissions for insurance
reasons.

Voice print recognition has come a long way. Be aware of their call signs and
any related lingo. If you have a crazy notion of knocking out a guard just be aware
that their radios have a tilt feature so if a guard goes down there is an alert. If you
are thinking about doing a late night sneak and peek consider the perimeter
defenses. The use of fiber optics in fencing is common and almost invisible to the
intruder. Break a branch onto it so that part of the fencing system is deactivated or
simply overlooked.

In and around can also be seismic intrusion detection, which basically is
sensitive to footsteps. This can be tricked with a device called a thumper. It is
basically a box that stamps its foot at whatever pace. Certain cameras may be
programmed to react to the disturbance. If you are looking for infrared sources use
a passive night vision scope/goggle. You are looking for IR emissions; you are trying
not to create your own which an active model could do. There are little badges you
can wear that can alert you if you are under IR observation. Do not wear divers
watches since the tritium will light you up like a ghost to any nocturnal observer
with night vision goggles. If the facility is using thermal imagery, than you will need
to really do your homework; chances are they are serious about protecting
whatever it is they are tasked with. One way to defeat that is by wearing different
types of neoprene suits. Everything must be covered not a very comfortable way to
spend an evening. Otherwise you will have to wait for a storm to hit before you
make a move.

Now you may not approve of the disclosure of such information. The truth is
such knowledge is freely available to anyone. Just buy a video game to get the latest
inventions and their use. Remember this: the most successful operations are the
kind that go undetected. Maybe a little bit of paranoia is
a good thing.

The author of this article is a freelance security consultant contracted by
competitive intelligence firms, such as
BHE Security, and private investigators.

There seems to be a decided lack of knowledge on the techniques and technology of
Industrial Espionage.


next page