Wednesday, February 7, 2007

Managing cookies and temporary internet files

Some of the following information applies to Windows 9X/ME versions but is very similar to XP. I included it because there are a ton of users still using the older OS's. If you would like me to answer a specific question or cover something for a specific OS please write.


Surf Anonymously

Whenever you go online through an ISP the computers on the 'net that you connect to can see your IP Address. If someone wanted information about you they could go to your ISP to obtain it, of course they would theoretically have to have a legal right to the information and a search warrent, but who wants to take chances? There are a few ways to defeat this.

1. Use a proxy server such as Anonymizer .

2. Use a free ISP such as NetZero. You could give them an alias instead of your real info.

3. Use a prepaid ISP like prepaid phone cards you can get these at places like Staples, I haven't tried these but the one I looked at said you didn't have to register it.

If you choose one of the latter two options I suggest you still you a proxy! Be twice as safe!

Clear History

Internet Explorers History feature not only keeps track of what websites you've visited but also what folders and files you have accessed from you machine.

Open Internet Explorer, click the Tools Menu, and select Internet Options. On the General tab of the resulting window look for the History section, here you can select how many days to keep files in your History folder, there is also a button to clear you any files that are currently in you history folder. Installing Tweak UI (below) will allow you to automatically remove any history files when you log off.

Clear typed URL history

Any time you type a command in the Run dialogue box from the Start Menu, type an URL in Internet Explorer, or open a document, Windows logs it and will display it in the appropriate dialogue box / text area, whenever someone types in any part of the previously typed information. This can really save you time by making it necessary to type only a partial command or Url, and making recently opened documents readily available from the Start Menu. The downside is that anyone can see what documents you've opened lately, even if you thought you had them buried deep inside some obscure folder. Also they could open I.E. and see what Urls you've recently typed. I'm not sure how you can manually overcome this problem but there is great news. if you have Windows 98 then you already have a free application that will clear these items every time you log off of / shut down your computer. It's called TweakUI and here's what you do to use it.

Put your Windows 98 setup disk in your CDROM drive. Wait for a window to pop up, select Browse this CD, and another window will pop up. In this window double click on the Tools folder, next double click the Reskit folder, do the same for the Powertoy folder. Now look for a file named tweakui.inf, right click this file and select Install from the pop up menu. You are now ready to use your new program, go to Start, Settings, Control Panel, and double click on TweakUI, now you have a lot of options for customizing your Windows experience. The one we're most interested in here is on the Paranoia tab, where you can select to have TweakUI dump your history files including your Internet History.

Clear Cache

Go to Start, Programs, Accessories, System Tools, and select Disc Cleanup. This will delete the files stored in your Cache folders, but not necesarilly your cookies, nor does it permanently remove the files. Frequently wype your hard drive to keep these files from being recovered.. You can get a program that will manage these for you or you can delete them manually.

The following instructions are for a typical Windows 98 installation, the location of your folders may vary, but this should get you close.

Open Start, Programs, Windows Explorer. In the left hand pane look for the Windows folder, click the plus sign (+) next to the folder to show it's contents. Now look for a folder called Temporary Internet Files, click the plus sign next to it. Inside this folder is one called Content.IE5 or something similar. Expand this folder and you will see several folders with random names such as 25ffssd6565w. Inside these randomly named folders are your cookies. Browse them and delete any files you don't want. Be careful though there mey be some cookies you want to keep.

Back to Top

Cookies

Cookies are very small text files that are placed on your computer by many websites. There is much debate as to the value and risk of cookies. Cookies many times contain personal information that you have entered at websites, this information can usually only be read by the site that places it on your machine. However some sites use a seperate company to generate and monitor their cookies and this does pose a security risk, because conceivably your information from one site could get compiled with information from a nother site, thus elliminating anonymity.

There are a few things you can do.

1. You can disable cookies all together, completely removing any risk from cookies. The downside of this is many websites won't let you in if you disable cookies.

2. Use cookie managing software. There are many programs available on the web, the free ones usually end up making you look at adds or send you commercial emails.

3. Manage your own cookies.

Open Windows Explorer, go to Windows/Cookies and delete any cookies you want. Be careful though not to delete any cookies you want to keep. Be sure to empty your Recycle Bin, and wype your hard drive when you're done.

4. Use a proxy server such as Anonymizer. A proxy server acts as a buffer between the web and your ISP to fool website into thinking that you are surfing from a different server and mask your IP address. The better proxys also store your cookies on their hard drives for you and let you set different settings for what information you want to give to which sites. You may have to pay for the more advanced features

Friday, February 2, 2007

social security number risk

Maybe it's just me but I would think with all the media coverage about the risk to peoples' personal information and identity theft, and the laws requiring due diligence in protecting your clients information that agencies and businesses would start taking greater care.
Here's an example; I saw a news report a few years ago about doctors and hospitals carelessly throwing old medical records in the trash, and not long after shredding of outdated or sensitive documents became much less a good idea and more a necessity!

Now here is my specific gripe. Have you ever noticed those handy little baskets full of mail at the receptionist's desk at the doctor's office, or your lawyer's? I mean come on!!! You would think the medical profession would have learned their lesson by now, and if you can't trust your ATTORNEY, of all people, with your information the world is in sad shape. After I noticed this trend I really started paying close attention. This practice is very commonplace, at least in the area where I live. Even better, not only is the mail, full of your personal and possibly damaging information, sitting on the front counter in easy reach of anyone off the street, but (no exaggeration) 90% of the time the was no one any where near the desk to even keep an eye on it!

At my local physician's office that nifty little mail basket sits on a counter full of fliers for patients to take home. Just the other day I sat and watched a seedy looking fellow browse through the pamphlets for a good 15 minutes. And NO ONE NOTICED! Why would they? He was just browsing through the material that the office, in all their wisdom, left for him to look at. The fact that he could have just as easily picked up the 3 inch stack of outgoing mail and walked off with it to examine at his leisure must have never crossed anyone's mind!

Tell me, am I just being paranoid? Or does somebody need a little training, and maybe an ass kicking!

One more gripe, this one just happened today! Okay it actually starts yesterday. I was at the county/state run employment agency and signing up for an orientation class. The guy handed me a sheet of paper and asked me to write my name and social. Above my name was at least five other names and socials. I mean this guy had filled my information in on at least 5 other forms on his PC, I guess he couldn't operate a pen. Or maybe he was just being nice and trying to give me a little extra help stealing someone else's identity. No harm done though, I guess he's such a good judge of character that he could just tell what an honest guy I am. My poor wife had to listen to me rant about this for 30 minutes.

Icing on the Cake
Today I went in for the aforementioned orientation meeting. This time another guy had that familiar little piece of paper so he could call role. No big deal I am sure he was authorized to have everyone social security numbers for other aspects of his job. However, the first part of the meeting was going to be a 15 min video that he'd already sat through hundreds of times so understandably he left the room while we watched it. The only problem was that he decided to leave that inconspicuous paper lying on a table right in front of one of the other meeting attendees. I mean it was like he sat it down FOR him to look at. Would it have killed him to take it out of the room with him, or at least put it up on top of the TV. For Pete's sake!!! This is a Government agency! No wonder bureaucrats have such a bad rap. I haven't decided yet if I should write an article for the newspaper, make a suggestion at that office, or call my friggin' congressman. Come on folks let me hear from you, I'm dying to know if I'm just being a paranoid nutball or what.

Sunday, January 28, 2007

Anonymous emailers

I know there are other email options out there if you need one. I did a quick search and came up with a bunch, however some of the so called anonymous mail offering still require personally identifying info so be warned and read the use agreement.
theanonymousemail.com requires a credit card! Now that's what I call anonymous, HAH!
Anyway if any one would like me to look into this subject further or has any suggestions let me know.
DARKHELM

Gmail and cell phones

Maybe it's just me but I didn't much like the idea that you have to give up your cell number in order to sign up for gmail. Yeah it's a great email app and all, and google say's they won't release it to anyone. But here is my concern; what if you are looking for a moderately annonymous email account. You can't just say your name is Joe Smith and fake your zip code like with Yahoo! or Hotmail. Yes giving them your cell number adds lot's of funcionaliy and that's great if you plan to use those features. They say it helps cut down on abuse and spam, we'll see....
I went ahead and gave up my number but elected to not have it attatched to my account as it was required to use blogger. Not too sure what this means to my privacy as I have no proof of what they do with the information after all is said and done. They must keep it somewhere if it is being used to control user abuse.
Anyone else have any thoughts on the subject?
DARKHELM

Saturday, January 27, 2007

Welcome

Hi everyone,
My name is John and I have been concerned with, and involved in computer privacy and security for years. I will be posting tips on securing your data and eliminating unwanted tracks. I had a website up for awhile but I thought I'd try the whole blog thing. This is my very first blog so expect lot's of changes as I fine tune things , but I think anyone interested in preserving their privacy will find useful information posted here. I am sure I will learn a lot from you too.

Things may get a little technical from time to time because I would like to focus on empowering folks to secure their information with a minimum of expense. Though I may ad links to and review some applications, I do not intend this blog to be a sales pitch. I will eventually be covering such diverse topics as encryption, steganography, hidden files, computer forensics, troublesome file locations, and secure data destruction methods, as well as laws, court findings, and technical advancements that may endanger our civil rights. Please feel free to suggest any topics for discussion as I would like to keep this blog as relevant as possible.

I look forward to interacting with you very soon!
DARKHELM

The Day We Fight Back