Anonymous Security

You can choose, what DMs you want deleted, either by clicking specific person, and delete all, or manually choose to keep some via drop down menu. This app also gives the opportunity to send back up of DM's (if you wanted to keep the thread, but delete from Twitter) it will email you the DMs then delete.

Authenticate the Twitter app here:

You Have the Right to Remain Silent: A Know Your Rights Guide for Law Enforcement Encounters.

What Rights Do I Have? Whether or not you’re a citizen, you have rights under the United States Constitution. The Fifth Amendment gives every person the right to remain silent: not to answer questions asked by a police officer or government agent. The Fourth Amendment restricts the government’s power to enter and search your home or workplace, although there are many exceptions and new laws have expanded the government’s power to conduct surveillance. The First Amendment protects your right to speak freely and to advocate for social change. However, if you are a non-citizen, the Department of Homeland Security may target you based on your political activities.

What if FBI Agents or Police Contact Me? What if an agent or police officer comes to the door? Do not invite the agents or police into your home. Do not answer any questions. Tell the agent that you do not wish to talk with him or her. You can state that your lawyer will contact them on your behalf. You can do this by stepping outside and pulling the door behind you so that the interior of your home or office is not visible, getting their contact information or business cards and then returning inside. They should cease questioning after this. If the agent or officer gives a reason for contacting you, take notes and give the information to your attorney. Anything you say, no matter how seemingly harmless or insignificant, may be used against you or others in the future. Lying to or misleading a federal agent is a crime. The more you speak, the more opportunity for federal law enforcement to find something you said (even if not intentionally) false and assert that you lied to a federal officer. Do I have to answer questions? You have the constitutional right to remain silent. It is not a crime to refuse to answer questions. You do not have to talk to anyone, even if you have been arrested or are in jail. You should affirmatively and unambiguously state that you wish to remain silent and that you wish to consult an attorney. Once you make the request to speak to a lawyer, do not say anything else. The Supreme Court recently ruled that answering law enforcement questions may be taken as a waiver of your right to remain silent, so it is important that you assert your rights and maintain them. Only a judge can order you to answer questions. There is one exception: some states have “stop and identify” statutes which require you to provide identity information or your name if you have been detained on reasonable suspicion that you may have committed a crime. A lawyer in your state can advise you of the status of these requirements where you reside. Do I have to give my name? As above, in some states you can be detained or arrested for merely refusing to give your name. And in any state, police do not always follow the law, and refusing to give your name may make them suspicious or more hostile and lead to your arrest, even without just cause, so use your judgment. Giving a false name could in some circumstances be a crime. Do I need a lawyer? You have the right to talk to a lawyer before you decide whether to answer questions from law enforcement. It is a good idea to talk to a lawyer if you are considering answering any questions. You have the right to have a lawyer present during any interview. The lawyer’s job is to protect your rights. Once you tell the agent that you want to talk to a lawyer, he or she should stop trying to question you and should make any further contact through your lawyer. If you do not have a lawyer, you can still tell the officer you want to speak to one before answering questions. Remember to get the name, agency and telephone number of any investigator who visits you, and give that information to your lawyer. The government does not have to provide you with a free lawyer unless you are charged with a crime, but the NLG or another organization may be able to help you find a lawyer for free or at a reduced rate. If I refuse to answer questions or say I want a lawyer, won’t it seem like I have something to hide? Anything you say to law enforcement can be used against you and others. You can never tell how a seemingly harmless bit of information might be used or manipulated to hurt you or someone else. That is why the right not to talk is a fundamental right under the Constitution. Keep in mind that although law enforcement agents are allowed to lie to you, lying to a government agent is a crime. Remaining silent is not. The safest things to say are “I am going to remain silent,” “I want to speak to my lawyer,” and “I do not consent to a search.” It is a common practice for law enforcement agents to try to get you to waive your rights by telling you that if you have nothing to hide you would talk or that talking would “just clear things up.” The fact is, if they are questioning you, they are looking to incriminate you or someone you may know, or they are engaged in political intelligence gathering. You should feel comfortable standing firm in protection and defense of your rights and refusing to answer questions. Can agents search my home or office? You do not have to let police or agents into your home or office unless they have and produce a valid search warrant. A search warrant is a written court order that allows the police to conduct a specified search. Interfering with a warrantless search probably will not stop it and you might get arrested. But you should say “I do not consent to a search,” and call a criminal defense lawyer or the NLG. You should be aware that a roommate or guest can legally consent to a search of your house if the police believe that person has the authority to give consent, and your employer can consent to a search of your workspace without your permission. What if agents have a search warrant? If you are present when agents come for the search, you can ask to see the warrant. The warrant must specify in detail the places to be searched and the people or things to be taken away. Tell the agents you do not consent to the search so that they cannot go beyond what the warrant authorizes. Ask if you are allowed to watch the search; if you are allowed to, you should. Take notes, including names, badge numbers, what agency each officer is from, where they searched and what they took. If others are present, have them act as witnesses to watch carefully what is happening. If the agents ask you to give them documents, your computer, or anything else, look to see if the item is listed in the warrant. If it is not, do not consent to them taking it without talking to a lawyer. You do not have to answer questions. Talk to a lawyer first. (Note: If agents present an arrest warrant, they may only perform a cursory visual search of the premises to see if the person named in the arrest warrant is present.) Do I have to answer questions if I have been arrested? No. If you are arrested, you do not have to answer any questions. You should affirmatively and unambiguously state that you wish to assert your right to remain silent. Ask for a lawyer right away. Do not say anything else. Repeat to every officer who tries to talk to or question you that you wish to remain silent and that you wish to speak to a lawyer. You should always talk to a lawyer before you decide to answer any questions. What if I speak to government agents anyway? Even if you have already answered some questions, you can refuse to answer other questions until you have a lawyer. If you find yourself talking, stop. Assert that you wish to remain silent and that you wish to speak to a lawyer. What if the police stop me on the street? Ask if you are free to go. If the answer is yes, consider just walking away. If the police say you are not under arrest, but are not free to go, then you are being detained. The police can pat down the outside of your clothing if they have reason to suspect you might be armed and dangerous. If they search any more than this, say clearly, “I do not consent to a search.” They may keep searching anyway. If this happens, do not resist because you can be charged with assault or resisting arrest. You do not have to answer any questions. You do not have to open bags or any closed container. Tell the officers you do not consent to a search of your bags or other property. What if police or agents stop me in my car? Keep your hands where the police can see them. If you are driving a vehicle, you must show your license, registration and, in some states, proof of insurance. You do not have to consent to a search. But the police may have legal grounds to search your car anyway. Clearly state that you do not consent. Officers may separate passengers and drivers from each other to question them, but no one has to answer any questions. What if I am treated badly by the police or the FBI? Write down the officer’s badge number, name or other identifying information. You have a right to ask the officer for this information. Try to find witnesses and their names and phone numbers. If you are injured, seek medical attention and take pictures of the injuries as soon as you can. Call a lawyer as soon as possible. What if the police or FBI threaten me with a grand jury subpoena if I don’t answer their questions? A grand jury subpoena is a written order for you to go to court and testify about information you may have. It is common for the FBI to threaten you with a subpoena to get you to talk to them. If they are going to subpoena you, they will do so anyway. You should not volunteer to speak just because you are threatened with a subpoena. You should consult a lawyer. What if I receive a grand jury subpoena? Grand jury proceedings are not the same as testifying at an open court trial. You are not allowed to have a lawyer present (although one may wait in the hallway and you may ask to consult with him or her after each question) and you may be asked to answer questions about your activities and associations. Because of the witness’s limited rights in this situation, the government has frequently used grand jury subpoenas to gather information about activists and political organizations. It is common for the FBI to threaten activists with a subpoena in order to elicit information about their political views and activities and those of their associates. There are legal grounds for stopping (“quashing”) subpoenas, and receiving one does not necessarily mean that you are suspected of a crime. If you do receive a subpoena, call the NLG National Hotline at 888-NLG-ECOL (888-654-3265) or call a criminal defense attorney immediately. The government regularly uses grand jury subpoena power to investigate and seek evidence related to politically-active individuals and social movements. This practice is aimed at prosecuting activists and, through intimidation and disruption, discouraging continued activism. Federal grand jury subpoenas are served in person. If you receive one, it is critically important that you retain the services of an attorney, preferably one who understands your goals and, if applicable, understands the nature of your political work, and has experience with these issues. Most lawyers are trained to provide the best legal defense for their client, often at the expense of others. Beware lawyers who summarily advise you to cooperate with grand juries, testify against friends, or cut off contact with your friends and political activists. Cooperation usually leads to others being subpoenaed and investigated. You also run the risk of being charged with perjury, a felony, should you omit any pertinent information or should there be inconsistencies in your testimony. Frequently prosecutors will offer “use immunity,” meaning that the prosecutor is prohibited from using your testimony or any leads from it to bring charges against you. If a subsequent prosecution is brought, the prosecutor bears the burden of proving that all of its evidence was obtained independent of the immunized testimony. You should be aware, however, that they will use anything you say to manipulate associates into sharing more information about you by suggesting that you have betrayed confidences. In front of a grand jury you can “take the Fifth” (exercise your right to remain silent). However, the prosecutor may impose immunity on you, which strips you of Fifth Amendment protection and subjects you to the possibility of being cited for contempt and jailed if you refuse to answer further. In front of a grand jury you have no Sixth Amendment right to counsel, although you can consult with a lawyer outside the grand jury room after each question. What if I don’t cooperate with the grand jury? If you receive a grand jury subpoena and elect to not cooperate, you may be held in civil contempt. There is a chance that you may be jailed or imprisoned for the length of the grand jury in an effort to coerce you to cooperate. Regular grand juries sit for a basic term of 18 months, which can be extended up to a total of 24 months. It is lawful to hold you in order to coerce your cooperation, but unlawful to hold you as a means of punishment. In rare instances you may face criminal contempt charges.

What If I Am Not a Citizen and the DHS Contacts Me? The Immigration and Naturalization Service (INS) is now part of the Department of Homeland Security (DHS) and has been renamed and reorganized into: 1. The Bureau of Citizenship and Immigration Services (BCIS); 2. The Bureau of Customs and Border Protection (CBP); and 3. The Bureau of Immigration and Customs Enforcement (ICE). All three bureaus will be referred to as DHS for the purposes of this pamphlet. ■ Assert your rights. If you do not demand your rights or if you sign papers waiving your rights, the Department of Homeland Security (DHS) may deport you before you see a lawyer or an immigration judge. Never sign anything without reading, understanding and knowing the consequences of signing it. ■ Talk to a lawyer. If possible, carry with you the name and telephone number of an immigration lawyer who will take your calls. The immigration laws are hard to understand and there have been many recent changes. DHS will not explain your options to you. As soon as you encounter a DHS agent, call your attorney. If you can’t do it right away, keep trying. Always talk to an immigration lawyer before leaving the U.S. Even some legal permanent residents can be barred from returning. Based on today’s laws, regulations and DHS guidelines, non-citizens usually have the following rights, no matter what their immigration status. This information may change, so it is important to contact a lawyer. The following rights apply to non-citizens who are inside the U.S. Non-citizens at the border who are trying to enter the U.S. do not have all the same rights. Do I have the right to talk to a lawyer before answering any DHS questions or signing any DHS papers? Yes. You have the right to call a lawyer or your family if you are detained, and you have the right to be visited by a lawyer in detention. You have the right to have your attorney with you at any hearing before an immigration judge. You do not have the right to a government-appointed attorney for immigration proceedings, but if you have been arrested, immigration officials must show you a list of free or low cost legal service providers. Should I carry my green card or other immigration papers with me? If you have documents authorizing you to stay in the U.S., you must carry them with you. Presenting false or expired papers to DHS may lead to deportation or criminal prosecution. An unexpired green card, I-94, Employment Authorization Card, Border Crossing Card or other papers that prove you are in legal status will satisfy this requirement. If you do not carry these papers with you, you could be charged with a crime. Always keep a copy of your immigration papers with a trusted family member or friend who can fax them to you, if need be. Check with your immigration lawyer about your specific case. Am I required to talk to government officers about my immigration history? If you are undocumented, out of status, a legal permanent resident (green card holder), or a citizen, you do not have to answer any questions about your immigration history. (You may want to consider giving your name; see above for more information about this.) If you are not in any of these categories, and you are being questioned by a DHS or FBI agent, then you may create problems with your immigration status if you refuse to provide information requested by the agent. If you have a lawyer, you can tell the agent that your lawyer will answer questions on your behalf. If answering questions could lead the agent to information that connects you with criminal activity, you should consider refusing to talk to the agent at all. If I am arrested for immigration violations, do I have the right to a hearing before an immigration judge to defend myself against deportation charges? Yes. In most cases only an immigration judge can order you deported. But if you waive your rights or take “voluntary departure,” agreeing to leave the country, you could be deported without a hearing. If you have criminal convictions, were arrested at the border, came to the U.S. through the visa waiver program or have been ordered deported in the past, you could be deported without a hearing. Contact a lawyer immediately to see if there is any relief for you. Can I call my consulate if I am arrested? Yes. Non-citizens arrested in the U.S. have the right to call their consulate or to have the police tell the consulate of your arrest. The police must let your consulate visit or speak with you if consular officials decide to do so. Your consulate might help you find a lawyer or offer other help. You also have the right to refuse help from your consulate. What happens if I give up my right to a hearing or leave the U.S. before the hearing is over? You could lose your eligibility for certain immigration benefits, and you could be barred from returning to the U.S. for a number of years. You should always talk to an immigration lawyer before you decide to give up your right to a hearing. What should I do if I want to contact DHS? Always talk to a lawyer before contacting DHS, even on the phone. Many DHS officers view “enforcement” as their primary job and will not explain all of your options to you.

NLG National Hotline for Activists Contacted by the FBI 888-NLG-ECOL (888-654-3265)

Thank you to the National Lawyers Guild:

Enhance The Default Password Manager with Saved Password Editor.

Firefox has an internal password manager, which is a good alternative if you want to stay on the lean side with addons. You can enable it under > Firefox > Options > Security. Set the check next to > Remember passwords for sites. You can also set a master password (highly recommended) and view saved passwords. Obviously, the features are quite limited. Most annoyingly, you cannot manually add passwords or edit existing entries.

Saved Password Editor adds the following functions to Firefox’ default password manager:

Open Saved Passwords dialog via toolbar button

Manually add and edit new entries

Get the Firefox Saved Password Editor addon here

If the toolbar button isn’t added automatically, right-click on your toolbar and select > Customize… Locate the button, drag and drop it to the desired location, and click > Done to save your changes.

Here is another great way to store your passwords

Get KeeFox AddOn here

If you are already using KeePass or if you prefer to store your passwords locally, get KeeFox to connect Firefox to your KeePass Password Safe.

KeeFox has the following main characteristics:

Adds KeeFox toolbar

Installs open source KeePass Password Safe (unless installed already)

Reads and writes passwords to local KeePass Password Safe

Passwords available to all applications on your computer

Sort login data by categories

Download KeyPass here

Open Source – Allows the ability to analyze the encryption methods

Clients available for Windows, Ubuntu, Linux, MacOS X, Palm OS, Blackberry, Android etc

KeePass database files are encrypted. KeePass encrypts the complete database, i.e. not only your passwords. The user names, notes, etc. are encrypted, too.

Here is specifics on Security for KeyPass

Now this is how you instal it and use it:

Install or unzip the software. Open Keepass.exe (on Windows), go to File->Open and create a new file

.While you type your password, it will tell you how many bits encryption it will provide, and also a bar with how secure/complex it is. After hitting OK, enter your password again to make sure you typed what you thought you did.

Inside Keepass you will see a Folder structure where you can organize your logins according to type or use. In my case, I keep separate areas for Work and Personal logins. Click “Add Entry…” to add a new login

A password will be automatically generated – useful if you are making a new account. Click the three dots to change from a masked password to the plain text one.

If you want to have fine-grained control over your new password, while maintaining security, KeepPass includes a password generation tool

For the ultra paranoid, you can click the box “Collect additional entropy” – this will ask you to move your mouse randomly around a box and type in random letters. For ultimate usefulness, I have KeePass installed on my USB Keydrive.

What happens if you lose your Keydrive?

It is essential to back up the password file regularly. You can use a backup tool like SyncBack SE for this. The paid version has many priceless features – one being that it has an “On Insert” option. In the profile, select the drive letter that is assigned for your USB Key Drive on the “Insert” tab. On inserting your drive, it will automatically run this profile and back up your files.

There are many good free version of backup tools, here is a few:

Paragon Backup and Recovery

Create Synchronicity 

Bvckup

With this program running, all you need to do is plug in the USB drive – for example if you are accessing a password, and it will run a backup. Just what I like – a backup process that you don’t need to think about. Less interference means easier backups!

To Manually Bypass in Windows

Follow the below steps:

First you have to uninstall that application whose trial period is over and you wanna use it again.

Now open the “Regedit” you can open it by going to Start > Run > Regedit.

Navigate to HK Local Machine > Software > Your Software name.

Now simply Delete the Key.

You have to do this for HK Current user if key is there too.

Now go to Run and Type “%temp%”.

Delete all files in temporary folder, these are all the files created by software temporary installation and de-installation.

Go to C:// Users > Username > App-data ( Check all 3 directories "Local", "LocalLow", "Roaming" for your software entry there might be a folder for your software, if you find one Delete that.

Now every main step is done you can restart your computer and then Reinstall application.

Or you can use this freeware software, Time Stopper from following locations

Download from CNET.com

Download torrents

Download mediafire .RAR

Using this software you can stop the time for exe and start the exe specified date. When you stop the time of any exe using this Time Stopper it works via this Time Stopper. Real time & date runs normally on your system. I recommend seeing the example of help file before use this software.

Here's how you use/instal it:

First Download Time Stopper 3.5 Windows.

After downloading the above software extract it and RUN it and you will see something like this

Now here you simply have to choose the software which is going to be expired and you wanna use it as a trial again.(As Shown Step 1. in Above)

After choosing a valid .exe application you have choose a date, well you have to choose something between your trial software date like 2 days before its going to be expired.( As Step 2 .in Above Image)

For Example : Assume You install your Software  on  7 May 2012 . Today is 10 May,2012 . Trial period of this Software is 15 days. Then you should set day between 11 May,2012 to 22 May,2012 as the date.

Now enter a new name for the new valid shortcut and click Create Desktop Shortcut. (Step 3 ,4. in Above Image)

How a VPN Works

VPN stands for “virtual private network,”  as its name indicates, it’s used for connecting to private networks over public networks, such as the Internet. In a common VPN use case, a business may have a private network with file shares, networked printers, and other important things on it. Some of the business’s employees may travel and frequently need to access these resources from the road. However, the business doesn’t want to expose their important resources to the public Internet. Instead, the business can set up a VPN server and employees on the road can connect to the company’s VPN. Once an employee is connected, their computer appears to be part of the business’s private network they can access file shares and other network resources as if they were actually on the physical network.

The VPN client communicates over the public Internet and sends the computer’s network traffic through the encrypted connection to the VPN server. The encryption provides a secure connection, which means the business’s competitors can’t snoop on the connection and see sensitive business information. Depending on the VPN, all the computer’s network traffic may be sent over the VPN – or only some of it may (generally, however, all network traffic goes through the VPN). If all web browsing traffic is sent over the VPN, people between the VPN client and server can’t snoop on the web browsing traffic. This provides protection when using public Wi-Fi networks and allows users to access geographically-restricted services – for example, the employee could bypass Internet censorship if they’re working from a country that censors the web. To the websites the employee accesses through the VPN, the web browsing traffic would appear to be coming from the VPN server.

Crucially, a VPN works more at the operating system level than the application level. In other words, when you’ve set up a VPN connection, your operating system can route all network traffic through it from all applications (although this can vary from VPN to VPN, depending on how the VPN is configured). You don’t have to configure each individual application.

How an SSH Tunnel Works

SSH, which stands for “secure shell,” isn’t designed solely for forwarding network traffic. Generally, SSH is used to securely acquire and use a remote terminal session – but SSH has other uses. SSH also uses strong encryption, and you can set your SSH client to act as a SOCKS proxy. Once you have, you can configure applications on your computer – such as your web browser – to use the SOCKS proxy. The traffic enters the SOCKS proxy running on your local system and the SSH client forwards it through the SSH connection – this is known as SSH tunneling. This works similarly to browsing the web over a VPN – from the web server’s perspective, your traffic appears to be coming from the SSH server. The traffic between your computer and the SSH server is encrypted, so you can browse over an encrypted connection as you could with a VPN.

However, an SSH tunnel doesn’t offer all the benefits of a VPN. Unlike with a VPN, you must configure each application to use the SSH tunnel’s proxy. With a VPN, you’re assured that all traffic will be sent through the VPN – but you don’t have this assurance with an SSH tunnel. With a VPN, your operating system will behave as though you’re on the remote network – which means connecting to Windows networked file shares would be easy. It’s considerably more difficult with an SSH tunnel.

Which Is More Secure?

How can I send my note? Is there a way to send the link directly from Privnote's site? Privnote gives you a link to your note. You have to copy and paste that link into an email (or instant message) and send it to the person you want to read the note.

Can I send a Privnote to multiple recipients? No, you can't. If you want to send the same note to more than one person, you must create several notes and send each one to each person. That's why it's private.

Can I know when the note is read? Yes, you have to check the notification box below the note and enter your email address. Privnote will send an email to that address when the note is read. You can also add a reference to identify each note.

The recipient can copy and paste the note, so it doesn't actually self-destruct, right? Right. But, then again, you couldn't prevent the recipient from taking a screen capture or even memorizing the note. That's why Privnote doesn't try to protect the note contents from being copied. It only makes sure that the contents is never read, by anyone, before it reaches the recipient, and is never read by anyone afterward either. What the recipient does with the note is his sole responsability.

Is it possible to see a recently read note using the history of the browser, the back button or the recently closed tabs feature? The note self-destructs after being read; there is no way to re-read it once it has been read.

How much time are unread notes stored on your servers? After 30 days all unread notes are automatically deleted.

Privacy Policy points:

Depending on the communication channel of your choice (e.g., email, fax, SMS, phone, instant messaging), there may be a certain risk that third parties intercept your communication, get knowledge of the communicated URL and thus may be able to read your message.

Since only the link binds the decryption key to the note's content and since Privnote does not have the link, at no time is any note held in any readable format state at Privnote. This assures that nobody (including Privnote's administrators) can read a note.

When a note is retrieved, its data is completely removed from Privnote, which implies there is absolutely no way to recover it again.

When a note is not retrieved after 30 days, Privnote removes it permanently, just as if it were read.

Privnote sysadmin team will do as much as possible to protect the site against unauthorized access, modification or destruction of the data. But, even if someone or something could manage to gain access to the database, they would be unable to read the notes since their contents are encrypted and can't be decrypted without the links which Privnote never has a hold of.

Privnote is not logging the IP addresses; they are processed to enable communication with Privnote's servers but they are not part of the log-files. IP addresses are deleted as soon as they are no longer needed for the purpose of communication.

Privnote does not share nor sell any information to others, nor use it in any way not mentioned in this Privacy Policy.

Download OpenPuff here (ZIP)

OpenPuff supports many carrier formats:

    Images (BMP, JPG, PCX, PNG, TGA)

    Audio support (AIFF, MP3, NEXT/SUN, WAV)

    Video support (3GP, MP4, MPG, VOB)

    Flash-Adobe support (FLV, SWF, PDF)

Unique layers of security and obfuscation:

    256bit+256bit symmetric-key cryptography with KDF4 password extension

    256bit symmetric-key data scrambling (CSPRNG-based shuffling)

    Data whitening (CSPRNG-based noise mixing)

    Adaptive non-linear carrier bit encoding

A professional steganography tool:

    HW seeded random number generator (CSPRNG)

    Deniable steganography

    Carrier chains (up to 256Mb of hidden data)

    Carrier bits selection level

    Modern multi-cryptography (16 algorithms)

    Multi-layered data obfuscation (3 passwords)

    X-squared steganalysis resistance

A portable/stealth software:

    Native portable structure (no installation, registry keys, .ini files)

    Runs in user mode with DEP on

    Multithread support (up to 16 CPUs) = Faster processing

Also:

    Freeware

    Spyware/adware-free

    Fully redistributable

    OpenSource core crypto-library (libObfuscate)

Let's take a closer look at it's features:

Carrier chains : Data is split among many carriers. Only the correct carrier sequence enables unhiding. Moreover, up to 256Mb can be hidden, if you have enough carriers at disposal. Last carrier will be filled with random bits in order to make it undistinguishable from others.

Supported formats : Images, audios, videos, flash, adobe.

Layers of security : Data, before carrier injection, is encrypted (1), scrambled (2), whitened (3) and encoded (4).

Layer 1 - Modern multi-cryptography : A set of 16 modern 256bit open-source cryptography algorithms (chosen from AES Process [1997-2000], NESSIE Process [2000-2003] and CRYPTREC Process [2000-2003]) has been joined into a doublepassword multi-cryptography algorithm (256bit+256bit) : AES / Anubis / Camellia / Cast-256 / Clefia / FROG / Hierocrypt3 / Idea-NXT / MARS / RC6 / Safer+ / SC2000 / Serpent / Speed / Twofish / Unicorn-A

Layer 2 - CSPRNG based scrambling : Encrypted data is always scrambled to break any remaining stream pattern. A new cryptographically secure pseudo random number generator (CSPRNG) is seeded with a third password (256bit) and data is globally shuffled with random indexes.

Layer 3 - CSPRNG based whitening : Scrambled data is always mixed with a high amount of noise, taken from an independent CSPRNG seeded with hardware entropy.

Layer 4 - Adaptive non-linear encoding : Whitened data is always encoded using a non-linear function that takes also original carrier bits as input. Modified carriers will need much less change and deceive many steganalysis tests (e.g.: chi square test).

    Extra security: Deniable steganography : Top secret data can be protected    using less secret data as a decoy.

    Source code: This program relies on the libObfuscate system-independent open-source library. Users and developers are absolutely free to link to the core library (100% of the cryptography & obfuscation code), read it and modify it.

The American Civil Liberties Union of New Jersey has released an Android app designed to be used by people who want to secretly record police activity without running the risk that the mobile device will be seized. Called Police Tape, the free app allows the user to record video and audio discreetly. For one thing, the app disappears from a phone's screen when the recording begins. For another, it can send a copy of the recording to the ACLU-New Jersey for backup storage and analysis of potential civil liberties violations.

Download Police Tape here (For Android )

There is also the Stop-and-Frisk Watch App (download here)

“Stop and Frisk Watch”  a free and innovative smart phone application that will empower New Yorkers to monitor police activity and hold the NYPD accountable for unlawful stop-and-frisk encounters and other police misconduct.

Stop and Frisk Watch is available in English and Spanish. The app allows bystanders to fully document stop-and-frisk encounters and alert community members when a street stop is in progress. It has three primary functions: :

RECORD: This allows the user to film an incident with audio by simply pushing a trigger on the phone’s frame. Shaking the phone stops the filming. When filming stops, the user immediately receives a brief survey allowing them to provide details about the incident. The video and survey will go to the NYCLU, which will use the information to shed light on the NYPD’s stop-and-frisk practices and hold the Department accountable for its actions.

LISTEN: This function alerts the user when people in their vicinity are being stopped by the police. When other app users in the area trigger Stop and Frisk Watch, the user receives a message reporting where the police stop is happening. This feature is especially useful for community groups who monitor police activity.

REPORT: This prompts the survey, allowing users to report a police interaction they saw or experienced, even if they didn’t film it.

The app includes a “Know Your Rights” section that instructs people about their rights when confronted by police and their right to film police activity in public. Stop and Frisk Watch is intended for use by people witnessing a police encounter, not by individuals who are the subject of a police stop.

To uninstall be sure to uncheck "Lock Screen on Trigger" under the app’s “My Settings” tab. You will then be able to uninstall by accessing your phone’s application settings.

The NYCLU developed Stop and Frisk Watch with Jason Van Anden, a Brooklyn-based visual artist and software developer who previously developed the app, “I’m Getting Arrested.” (link download to that app)

Noted:

EXIF (Exchangeable Image File) data.

Camera settings. This includes static information such as the camera model and make, and information that varies with each image such as orientation (rotation), aperture, shutter speed, focal length, metering mode, and ISO speed information.

Date and time information. Digital cameras/phones will record the current date and time and save this in the metadata.

In addition, Exif also defines a Global Positioning/Geo location. The Exif format has standard tags for location information. Most mobile phones/cameras have a built-in GPS receiver that stores the location information in the Exif header when the picture is taken.

Here is an example of data that might come up on an image you post.

Here is a great web meta tool to check just EXIF data: 

Jeffrey's Exif Viewer

Another excellent web meta tool i use often that links to many different supported operations, such as:

Reverse/Similar search (Tineye/Google etc) For finding other webpages with same/similar image. Useful for finding original source, creator, remaining images from a group, or where else on the web same image may be posted.

Hidden data (exif  · http headers · error level)

EXIF: GPS location data/camera/phone model/Date taken etc

Http headers: Tells you the age of a file/type of server hosting the file/type of data being sent to your browser etc

Error level: A forensic tool that can indicate possible editing of a photo using (Error Level Analysis)

Also links to many image manipulation tools.

Web meta tool: http://imgops.com/

Now if you wish to strip your image before posting it i suggest using:

AJ00200 EXIF strip tool

Tips

Disabling Geolocation/Geotagging on your phone:

Most modern digital cameras do not automatically add geolocation (Latitude and Longitude) metadata to pictures. The process for adding the geolocation data either requires specialized add on hardware, or post processing with software on the desktop after the pictures are taken.

There is a large exception to this rule: Smartphones. With the proliferation of smart phones that contain GPS locator technology inside, the cameras in these devices are already equipped with the specialized hardware to automatically add geolocation information to the pictures at the time they are taken.

Most people don't realize that the action of automatic geotagging takes place on their smart phones, either because it is enabled by default, not exposed the user as an option, or was asked and then forgotten. As a result, individuals often share too much information about their location, right down to the exact Latitude and Longitude when snapping photos with their smartpphone and posting them online.

How do I disable this?

iPhone (iOS 4.x)

Apple greatly simplified the way to turn off location services on a per-application basis. To see your settings, go to Settings, General, then Location Services. From there you can set which applications can access your GPS coordinates or disable it entirely.

iPhone (iOS 3.x)

With the iOS 3.x there are two ways to disable Geotagging of photos. The first involves disabling of all location based services. To disable this feature, Go to Settings, General then set Location Services to off.

Be warned: This will turn off ALL location based services for ALLapplications. Of course we may actually have need to use location based services for other applications (such as maps and driving directions, or getting robbed via Foursquare), but just not for our pictures.

There is no easy way to disable location based servces for just one application. However, we can make the iPhone prompt us at first use for each application. Once reset, the first time we enter the application we can enable or disable location based services for the application. To do so we need to go to Settings, General, Reset.

Be careful here! We want to select Reset Location Warnings, and then Reset Warnings. This restores all of our Location based warnings for each application to the default, which in most cases is “Ask on first use”.

From here, once we enter into the default Camera app on the iPhone, we can select Don’t Allow. This will prevent the Camera app from geotagging our photos.

Android:

There are two ways to turn off geotagging. To completely disable GPS location finding for all applications, we will need to do the following:

Press the Menu Key and then Settings

Then press Location and security

By default, GPS is on. Uncheck it to turn it off

Like disabling the GPS in the iPhone, this will break location based information for all applications, including legitimate uses.

In order to disable for just the camera application, start the Camera app to make sure that you are not saving your location. This is the menu on the left side of the camera application; it slides out from left to right.

Select “Store Location” and make sure it is set to off.

Once this is disabled, the camera app will no longer add geotags to your images.

BlackBerry Devices:

There are multiple ways to disable the geo-tags on Blackberry. Three ways here:

Select Options, Advanced Options, GPS, press Menu key, Select Disable GPS and select Yes to confirm. This will disable all GPS capabilities on the phone.

Select Options, Security, Applications Permissions, menu select Edit on the application (default is Prompt for BB Core), Expand Connections, Change Location (GPS) to “Deny”, or you can disable within the application. Most apps i.e. Google Maps, Ubertwitter, etc… will just default everything to “allow” for app perms regardless of app settings chosen during setup.

Go into picture-taking mode (via HomeScreen, click icon “Camera”), press the Menu button and choose “Options”. Set the “Geotagging” setting to be “Disabled”. Finally, save the updated settings.

Point and shoot cameras:

If your device includes this geodata as the default option, you'll need to disable it in your settings. If you're working with a point-and-shoot camera or a DSLR, you can find this through the settings menu on your camera - just look for a menu mentioning "geotagging," "location" or "geodata" and to be sure the feature isn't enabled.

Final note:

This site has great information on how data is stored, obtained and found.

http://www.spiesonline.net

This is a Dox Tool that was created by @Joepie91

http://pastehtml.com/view/b1026x5qu.html

http://pastehtml.com/view/bh59gkh7b.html# (Edited by MotorMouth)

Misc. Search Sites:

http://www.spokeo.com

http://www.pipl.com

http://www.peekyou.com/

http://www.ipeople.com

http://www.yasni.com

http://www.skipease.com

http://www.peekyou.com

http://www.soople.com

https://www.intelius.com/

https://www.searchbug.com/

http://Abika.com

http://freeality.com

http://radaris.com

http://wink.com/

http://www.isearch.com/

http://www.keotag.com/

http://yahoo.intelius.com/

http://www.findermind.com/free-people-search-engines/

http://www.192.com/

WhitePages Search:

http://www.whitepages.com

http://www.zabasearch.com/

Archives Search:

http://aad.archives.gov/aad/series-list.jsp?cat=GS29

http://www.archive.org/web/web.php

Social Network Searches:

http://www.facebook.com/directory/people/

http://topsy.com/

http://monitter.com/ (Monitor twitter convos)

http://socialmention.com/

http://knowem.com/

http://twoogel.com/

http://www.yacktrack.com

http://www.samepoint.com/

http://www.whostalkin.com/

Phone Information & Lookups:

http://www.freecellphonedirectorylookup.com

http://www.numberway.com/

http://www.fonefinder.net

Public & Criminal Records Search:

http://publicrecords.onlinesearches.com

http://www.jailbase.com/en/sources/fl-lcso/

http://www.findcountyrecords.com/

To remove your webpages/results off of Google (here)

How to hide your tweets from Google (via lifehacker here)

Special thank you for letting me steal this, to

Cloudfogger-protected files can also be shared with others. You just need the automatically created Cloudfogger ID your partner uses and you are on your way to use your files together. Also, distributing files via e-mail or USB sticks is easy due to the portable Cloudfogger file format.

If you believe in cloud storage, no matter where you are, your documents and files travel with you, they can be accessed from any place, on any device and whenever you need them. At the same time I believe that cloud storage brings additional needs for privacy, data security and integrity. Are you always 100% sure who has access to your files stored on remote servers? With strong, reliable and yet simple encryption you keep control over your valuable data.

MD5 hash compare

Look for default files used by rootkits

Wrong file permissions for binaries

Look for suspected strings in LKM and KLD modules

Look for hidden files

Optional scan within plaintext and binary files

What is a Rootkit? Let me explain.

A Rootkit is a collection of tools (programs) that enable administrator-level access to a computer or computer network. Typically, a cracker/hacker installs a Rootkit on a computer after first obtaining user-level access, either by exploiting a known vulnerability or cracking a password. Once the Rootkit is installed, it allows the attacker to mask intrusion and gain root or privileged access to the computer and, possibly, other machines on the network.

A Rootkit may consist of spyware and other programs that: monitor traffic and keystrokes; create a "backdoor" into the system for the hacker's use; alter log files; attack other machines on the network; and alter existing system tools to escape detection. Your Virus protector may not always catch on detecting a Rootkit. Extra precaution is always good.

Here is a choice of free ware tools to use:

Download RootkitHunter for Linux

Download RootkitHunter for MAC

1) Download and install a client Pidgin

Here is a list of all dedicated clients

(i use Pidgin, you may use what you prefer)

2) Register your Jabber account

Just put in desired username/pass/captcha

3) Download Off-the-Record (OTR) Messaging which ensures:

Off-the-Record Messaging Protocol version 2 document

Encryption

No one else can read your instant messages.

Authentication

You are assured the correspondent is who you think it is.

Deniability

The messages you send do not have digital signatures that are checkable by a third party. Anyone can forge messages after a conversation to make them look like they came from you. However, during a conversation, your correspondent is assured the messages he sees are authentic and unmodified.

Perfect forward secrecy

If you lose control of your private keys, no previous conversation is compromised.

I set mine up with a German public XMPP server (here is an alternative list of others to choose from) This is how:

DNS or the domain name system is used to translate domain names such as www.privacyinternational.org into numerical IP addresses e.g. 123.123.123.123 which are required to route packets of data on the Internet. Whenever your computer needs to contact a server on the Internet, such as when you enter a URL into your browser, your computer contacts a DNS server and requests the IP address. Most Internet service providers assign their customers a DNS server which they control and use for logging and recording your Internet activities.

Under certain conditions, even when connected to the anonymity network, the operating system will continue to use its default DNS servers instead of the anonymous DNS servers assigned to your computer by the anonymity network. DNS leaks are a major privacy threat since the anonymity network may be providing a false sense of security while private data is leaking.

If you are concerned about DNS leaks, you should also understand transparent DNS proxy technology to ensure that the solution you choose will stop the DNS leak.

Some ISP's are now using a technology called 'Transparent DNS proxy'. Using this technology, they will intercept all DNS lookup requests (TCP/UDP port 53) and transparently proxy the results. This effectively forces you to use their DNS service for all DNS lookups.

If you have changed your DNS settings to an open DNS service such as Google, Comodo or OpenDNS expecting that your DNS traffic is no longer being sent to your ISP's DNS server, you may be surprised to find out that they are using transparent DNS proxying.

However, the greatest threat is if you choose to use an open DNS service to protect your privacy if your VPN service leaks dns requests. This would give you a false sense of security whilst you are connected to the VPN while your DNS requests are intercepted by your ISP.

When using a VPN service one might expect that all of the user’s traffic will go through the privacy network, but on rare occasions a phenomenon known as “DNS leakage” might occur. This means that rather than using the DNS servers provided by the VPN operator, it’s possible that the user’s default DNS servers will be used instead or otherwise become visible

A DNS leak may happen whenever a DNS query ‘bypasses’ the routing table and gateway pushed by the OpenVPN server. The trigger on Windows systems may be as simple as a slight delay in the answer from the VPN DNS, or the VPN DNS unable to resolve some name.

A tool to check for DNS leaks can be found here

How to fix a DNS leak:

The solution is to ensure that once connected to the anonymity network, you are using ONLY the DNS server/s provided by the anonymity service. As this problem affects predominantly windows clients, only solutions for Windows appear here.

3 basic steps to fix the problem;

Before connecting to the VPN, set static IP address properties if you are using DHCP

After connecting, remove DNS settings for the primary interface

After disconnecting, switch back to DHCP if neccessary or reapply original static DNS servers

Solution A (Automatic)

If you are using OpenVPN on Windows XP/Vista/7 then a fully automated solution is available.

Download dnsfixsetup.exe 

(md5 checksum: f212a015a890bd2dae67bc8f8aa8bfd9)

After installation, when you connect to a VPN server, a batch file will be run executing the 3 steps above.

Three scripts are generated for each OpenVPN configuration file;

configfilename_pre.bat - executed before the connection is established - Calls pre.vbs - If any active DHCP adapters exist, switch to static

configfilename_up.bat - executed when the connection is established - Calls up.vbs - Clear the DNS servers for all active adapter except the TAP32 adapter

configfilename_down.bat - executed after the connection is disconnected - Calls down.vbs - Reconfigure adapters back to their original configuration

Solution B  (Manually clearing the DNS)

Open the command prompt (cmd.exe) as an administrator.

Before connecting identify the name of the connected network interface. In the case below it is "Local Area Connection"

netsh interface show interface

Connect to the VPN. Once connected proceed to the next step.

Flush the DNS resolver cache

ipconfig /flushdns

Disable the DNS configuration for the Interface identified in step 1

netsh interface IPv4 set dnsserver "Local Area Connection" static 0.0.0.0

both

Test for DNS leaks.

After disconnecting, reconfigure the adapter to renew the previous DNS settings

netsh interface IPv4 set dnsserver "Local Area Connection" dhcp

Once again, flush the DNS resolver cache.

ipconfig /flushdns

Liberty Reserve Website

Account

It all starts with your account. This is where you see your balance, history of transactions, security features, private messaging, and all other features of the website. Access to your account requires the full spectrum of login and security details to be entered.

Quick Payments

The Quick Payments feature allows you to quickly access a dedicated portion of your funds in Liberty Reserve using a faster login procedure if you wish to pay someone quickly. It is recommended that you set only small limits for your Quick Payments because the security procedures necessary to access Quick Payments are less than the security procedures to access your full account. In order to set limits for Quick Payments, you will need to login to your account, and do it from there. You are not required to initialize Quick Payments, and are free to make payments from your account without using the Quick Payments. This is an optional feature for your convenience.

Once you have funds available for your Quick Payments, paying someone is very easy and quick, with a faster login process.

e-Currency

E-currency, or digital currency, is a stored value and payment system, usually account-based, that allows users to store funds (such as Euro, USD, Yen, etc., and metals such as gold, silver, etc., or anything else of value for that matter). The main feature of a digital currency is that spends (payments) are irrevocable, unlike bank payments (wires, checks), and other systems that have similar features (online payments) but can easily reverse payments, such as PayPal.

Digital currencies evolved as a need for merchants to have an alternative to credit cards due to the high cost of accepting credit cards (credit card % fees and fraud). Merchants using digital currencies get paid, and stay paid, lowering their costs of operation, eliminating fraud, and pass on the savings to their customers.

Balances

A balance is the total amount of funds or value that you have in your Liberty Reserve account. It is displayed on most pages within your account for your convenience.

Security

One of the most important features of Liberty Reserve is the security of your account. Passwords, PIN’s, stop account feature, and anti-keylogger (trojan) login system are just a few of the security precautions that Liberty Reserve has added to keep your value safe and secure within your account.

Nothing works better, however, than your own due diligence when it comes to security. Always use an anti-virus for safe computing.

Security Settings

IP Security

Liberty Reserve provides advanced IP Security for our customers. To increase the security of your account it is recommended to keep it enabled. System will send Verification PIN to your e-mail/phone each time you login from different IP Address/location to make sure you are the real owner of this account. To change settings of your IP Security you have to login to your account, go to Settings tab and open Change Security Settings link. You can select between three levels of IP Security:

Disabled (location change is not checked, you can access your account from any location without entering additional Verification PIN)

Medium (you have to enter Verification PIN if you login from different Region/ISP)

High (you have to enter Verification PIN each time your IP address changed)

Delivery Method

You can choose the method Verification PIN and Account Reset Code will be delivered to you. Liberty Reserve offers two options: send to e-mail associated with your Liberty Reserve account or to your cellphone by SMS. If you want to use SMS method, you need to verify your Mobile Phone first. Once your Mobile Phone is verified you can select SMS method. Liberty Reserve reserves the right to charge SMS fee from your LR account.

Authorized Devices

If If you want to protect the security of your account but do not want to enter your verification PIN each time that the IP address of your computer is changed, you can authorize trusted devices in order to quickly log in from them in the future without entering your Verification PIN. To do this, login to your account, go to Settings tab, open Change Security Settings link and enable Remember This Computer checkbox. After your PIN is entered upon login, the system will suggest that you authorize the device from which you are logging in. If you believe this device is trusted, you can give a name to this device and authorize it. Once device is authorized you do not have to enter Verification PIN if IP address/location of this device changed. If you cannot fully trust the device you are using to login to your account, you can skip device authorization.

To see the list of your Authorized Devices, login to your account, go to Settings tab and open Authorized Devices link. Here you can delete any selected devices. You can authorize up to 10 devices. Device names must be unique for account. While device authorization you can give name to a new device or select from the list of already authorized devices. Your Authorized Devices list will be cleared if you change Delivery Method of Verification PIN.

Quick Payments

Liberty Reserve’s Quick Payments feature allows you to access a limited portion of your LR funds quickly and easily, bypassing the regular, enhanced login security features of your main account.

You do not have to activate or use the Quick Payments feature if you do not wish to do so. However if you do choose to use it, it is a way to save time logging in and making payments very quickly.

This less secure, though quicker, way of logging in to your account to make transfers is recommended only for small payments. It is not recommended that you set large limits for your Quick Payments.

Settings

To change settings of your Quick Payments, log into your Liberty Reserve account and click on “Quick Payments” tab. Once there, you can set your Quick Payments type of limit and the total amount for each currency. You can select between Daily, Weekly and Monthly transfer limits. Simply select the type of limit and set amount of funds allowed to be sent using Quick Payments during a selected period of time. On this screen you have also an option to enable or disable your Quick Payments.

You can check available amount of Quick Payments funds allowed to be sent until the end of a selected period as well as the amount of funds spent within this period on your Account Summary page in Balances section.

Logging In

Logging in to your Quick Payments is easy. All you need is your account number and Password. You do not need your Login PIN. Once you are logged in, you will see your Quick Payments available funds and a funds transfer screen. You cannot access any of Liberty Reserve account features from Quick Payments.

Transfer