Cryptocat is free software that aims to provide an open, accessible Instant Messaging environment with a transparent layer of encryption that works right in your browser.

This service is a public testbed of the Open Secure Telephony Network (OSTN) project, with the goal of promoting the use of free, open protocols, standards and software, to power end-to-end secure voice communications on mobile devices, as well as with desktop computers. Other OSTN instances include Tanstagi and Intimi.ca.

ZeroBin is a minimalist, opensource online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES. More information on the project page.

PwdHash generates theft-resistant passwords. The PwdHash browser extension invisibly generates these passwords when it is installed in your browser. You can activate this protection by pressing F2 before you type your password, or by choosing passwords that start with @@. If you don't want to install PwdHash on your computer, you can generate the passwords right here.

A new tool under development by Oregon State computer scientists could radically alter the way that communications work on the web. Privly is a sort of manifesto-in-code, a working argument for a more private, less permanent Internet. The system we have now gives all the power to the service providers. That seemed to be necessary, but Privly shows that it is not: Users could have a lot more power without giving up social networking. Just pointing that out is a valuable contribution to the ongoing struggle to understand and come up with better ways of sharing and protecting ourselves online. [ http://news.ycombinator.com/item?id=3799542 ]

Public key encryption for the Android. Encrypt/decrypt emails/files via OpenPGP. OpenPGP for Android. It's open source and its goal is to provide a similar OpenPGP implementation as GnuPG.

Whisper Systems provides security and management solutions that transform consumer phones and tablets into enterprise-ready devices.

otr4j is an implementation of the OTR (Off The Record) protocol in java.

Block-level full disk encryption would be a huge win, eliminating dependence on PGP, which is pretty close to abandonware at Symantec (a recent 10.5 dot release corrupted PGP WDE drives, for instance). Presumably, if it's cool enough to have a brand name at Apple, it'll also gracefully handle hibernation, which no FDE currently does.

Bottom line: if you have a Core i3, Core i5, or Core i7 processor, you’ll barely notice the impact of disk encryption, regardless of whether you’re using an SSD or traditional platter drive. Is a tiny performance hit worth the peace of mind of total data security? You’ll have to decide, but if you have sensitive data and a newer CPU on your Mac, it probably is.

OS X Lion ships with a low-level technology called “core storage,” which is used to facilitate a wide variety of disk-maintenance functionality, including whole-disk encryption. To get a quick look at what core storage supports, type “diskutil cs” at the Terminal command line. For a more in-depth look, type “man diskutil” and search for the core storage command documentation.

Think of an SSD like the puzzle game Jenga. You pull a block of data out of the bottom, and then place it on the top. Copy and repeat. The data is still there, justspread out in different locations. Standard erasure methods only write over a file location, while the SSD wear-leveling technology may specify that a write operation (of all zero's) is written somewhere else entirely. The data, unbeknownst to the end user, is still there and able to be recovered by those with the right resources.

You might be shocked to learn this, but when a quivering-lipped Chloe from 24 cracks the encryption on a terrorist’s hard drive in 30 seconds, the TV show is faking it. “So what? It’s just a TV show.” Well, yes, but it turns out that real federal intelligence agencies, like the FBI, CIA, and NSA, also have a problem cracking encrypted hard disks — and according to a new research paper, this is a serious risk to national security. [ http://www.reddit.com/r/technology/comments/mhdsy/full_disk_encryption_is_too_good_says_us/ , http://news.ycombinator.com/item?id=3253280 ]

Just a warning, a lot of these SSDs "cheat" by using compression. I bought the best drive that I could find for my macbook pro - OCZ Vertex 3 Max IOPS, and was rather disappointed to find out that the posted speeds are based on benchmarks with compressible data. The reason this is an issue is because if you use disk encryption like you should be doing, encrypted data is not compressible. As a result, my speeds are 1/3rd to 1/2 of that which is advertised, and it was not worth the extra money.

Encryption and decryption is done in your browser using factory standard RSA algorithm. We receive and send already encrypted traffic. [ http://news.ycombinator.com/item?id=2955300 ]

HTTPS Finder automatically detects and enforces HTTPS connections when available. It also provides one-click creation and in-browser editing for HTTPS Everywhere rules. Other features include an ignore-domain 'whitelist' and an alert-only mode. [ http://news.ycombinator.com/item?id=2909102 ]

Firefox addon that uses OTR to ensure encryption on web-based chats. [ http://news.ycombinator.com/item?id=2708142 ]

Document editing and managing tools are going online, as evidenced from Google Docs, Microsoft OfficeLive, and Mozilla Bespin, etc. These services bring tremendous benefits on document reliability and usability. However, these benefits come somehow at the cost of security, since users have to fully trust the cloud service provider with their data. There are lots of reasons you might not want to trust the service provider with your confidential data. Even if you trust them to "not be evil", their server could have bugs that make it unintentionally reveal your data (e.g., Google Privacy Blunder Shares Your Docs Without Permission, TechCrunch, March 2009). A cloud provider could also be subjected to a subpoena that requires it to turn over a large amount of information.

encfs didn't work for me either. See this comment from a year and a half ago: http://news.ycombinator.com/item?id=895660 . Dropbox supposedly encrypts server side. If you want to encrypt client-side, use SpiderOak or TarSnap. These hacks on top of Dropbox don't mesh with the semantics of Dropbox properly and will cause problems days, weeks, or months down the line unless managed extremely carefully.

TorChat is an unofficial portage of torchat for Max OS X. It's a Cocoa application written in C++, Objective-C and Objective-C++. It uses Grand Central Dispatch. So Mac OS X.6 (and later) is necessary to execute it. It can run in basic mode (tor, integrated in the application bundle, is launched and automatically configured) and in advanced mode (the user configure itself tor, and give the configuration to TorChat).

WhisperCore is a secure Android platform dedicated to providing the security and management features necessary for transforming a consumer phone into an enterprise-class device.

Gibber is a secured chat client capable of firewall and filter circumvention, surveillance blocking and end-to-end encryption.

TorChat is a peer to peer instant messenger with a completely decentralized design, built on top of Tor's location hidden services, giving you extremely strong anonymity while being very easy to use without the need to install or configure anything. There exists a less commonly known mode of operation in which two Tor clients can initiate a fully encrypted peer-to-peer connection between each other that will not leave the Tor network at any point! This is what TorChat is using. Both clients build a normal 3-hop circuit from each end to some random tor node in the middle to "meet" there and connect their circuits with each other. Upon connection another layer of encryption is established reaching through from one client to the other, building one uninterrupted encrypted tunnel over all 5 hops between both clients. This means all TorChat traffic is end2end encrypted.

When you connect to an insecure network, Sidestep opens an SSH tunnel with the proxy server, and then sets the Mac OS X system-wide SOCKS proxy to use this SSH connection. And since most Mac applications (including browsers) use this system-wide proxy to connect to the Internet through, they will all end up using the encrypted SSH tunnel.

Earlier today I read an article posted on Hacker News about automated SSH scans and the things they try to do once they get in. In my day job I work as a security consultant, and as security tends to be more opinion-driven than an exact science different people have different views on what constitutes a reasonable level of security for SSH. I thought I'd write a few words here as I keep seeing this come up time and time again on mailing lists and I seem to get asked/dragged into debate quite frequently. It's your environment at the end of the day, so use your own judgement.

Bitcoin is a peer-to-peer network based digital currency. Peer-to-peer (P2P) means that there is no central authority to issue new money or keep track of transactions. Instead, these tasks are managed collectively by the nodes of the network.

Automatic security, browse encrypted.

Force-TLS allows web sites to tell Firefox that they should be served via HTTPS in the future; this helps secure you from accidentally negotiating an insecure session with certain sites. Force-TLS is also compatible with Strict Transport Security.

I recently purchased and installed a new SSL certificate from GoDaddy for Marrily. During the process, I came to learn more about SSL and the different steps to set everything up from scratch. There are an abundant amount of articles and tutorials on how you can get started, but surprisingly there are no articles on “why” you have to follow those steps. Truth is I was pretty confused when I first started. There were a bunch of different steps and different key, pem, crt, csr files that need to be generated. The result was that I got lost and screwed up during the process. I then add insults to injury by accidentally revoking my certificate instead of re-keying it and ended up having to call GoDaddy to revert the deletion. Since any entrepreneur with a SaaS website will eventually need to implement SSL to protect their customers, having a better understanding of SSL will be greatly beneficial.

Before there were VPNs, there was ssh. And when you don’t have access to your VPN or can’t set one up, you can still get most of the functionality over ssh.

This page describes how to write Rulesets for HTTPS Everywhere, the Firefox plugin that switches sites over from http to https automatically.

Today EFF and the Tor Project are launching a public beta of a new Firefox extension called HTTPS Everywhere. This Firefox extension was inspired by the launch of Google's encrypted search option. We wanted a way to ensure that every search our browsers sent was encrypted. You can also write custom rulesets.

BCArchiveTM is designed to compress a group of files/folders to a single encrypted file. The following options to encrypt data are implemented.

Google Secure Search uses Google's newly released https search interface to query google securely. This prevents people and proxies from sniffing your search terms. Contrary to the Google SSL Search add-on, this one also features secure type ahead suggestions.

My search for a program comparable to the Windows' application DVD Decrypter is finally complete. If you've ever wanted to create an ISO of a DVD -- in order to keep all of the menus, special features, language options, etc. of an encrypted DVD intact -- I've got a straightforward solution:

1. Download and run the (free and open source) Fairmount from Metakine Inc.
2. Insert the DVD into your computer; in a few moments Fairmount will 'ghost' a decrypted image of your DVD.
3. Run Disk Utility and select this new image from the left hand panel (it will look something like disk3).
4. Select Images » Convert... in Disk Utility's menu.
5. Name your file, select a location, and use 'DVD/CD Master' for the image format; click Save.

As governments around the world consider proposals to hand surveillance powers to the entertainment industry and twitchy cops, the Pirate Bay is striking back. Its new €5/month IPRedator service is an encrypted VPN that you can use to hide your traffic (whatever it may contain) from prying eyes. The name comes from Sweden's adoption of IPRED (the "IP Rights Enforcement Directive," a punishing piece of anti-Internet legislation). I've been looking for a reliable VPN to use on public hotspots -- this might just be it.

NX is an exciting new technology for remote display. It provides near local speed application responsiveness over high latency, low bandwidth links. The core libraries for NX are provided by NoMachine under the GPL. FreeNX is a GPL implementation of the NX Server and NX Client Components.

I2P (originally short for Invisible Internet Project,[1] though it is not commonly referred to by this name anymore) is a mixed-license free and open source project building an anonymous network (or, more accurately, a pseudonymous overlay network). The network is a simple layer that applications can use to anonymously and securely send messages to each other. Possible uses include anonymous surfing, chatting, blogging and file transfers.

Fairmount is a free tool which allows on-the-fly decryption of DVD content for convenient access. Fairmount does not perform the actual decryption, it simply forwards the data to VLC Media Player, which is used for the decryption. Hence, VLC Media Player must be installed for Fairmount to work.

OperaTor is a portable software bundle which allows you to browse the web anonymously. It combines the power of the Opera Browser, Tor and Polipo.

With OperaTor no data will be stored at the computer you plugged your portable memory into.

Comodo EasyVPN allows businesses and home users to quickly group multiple computers into a secure, peer to peer, network over the Internet. EasyVPN requires no expert configuration, is fast and easy to set up and uses 128 bit encryption to recreate a cabled local area network over the Internet.

The following two functions (just add to your .bash_profile or .profile file) will make life easier when encrypting and decrypting files with openssl in Terminal.

pearPortVPN allows you to automatically establish a specific VPN connection whenever a wireless network of choice becomes available. When connected to Ethernet you can specify an IP-Range to establish a VPN connection automatically. Furthermore, pearPortVPN can automatically disconnect any open connections before your Mac falls asleep and thus safe you from annoying error messages about timed out connections when your Mac wakes up again.
Now works with Snow Leopard (32/64 bit universal binary).

DiskCryptor is the only truly free solution, provided under GNU General Public License (GPLv3), which offers encryption of all disk partitions, including the system partition. The main criteria for open-source software is the availability of its source code under one of the open source licenses. The only open-source alternative to DiskCryptor that has comparable features is TrueCrypt. However, because of the restrictive license under which TrueCrypt is provided - the TrueCrypt Collective License - TrueCrypt cannot be classified as a truly free software, as it places limits on the use and modification of its source code by developers. There are other alternatives with similar functionality, but they are fully proprietary ones, which makes them unacceptable to use for protection of confidential data.

Upload a PDF and this web site will give it back to you minus the restrictions on copying/printing/etc.

You save the png yourself. You can post it anywhere. People can decode it, but it can't be searched for... it won't turn up in searches for those torrents, unless you provide text that matches.

This form will allow you to encode your e-mail address through the use of Character Entities, transforming your ascii email address into its equivalent decimal entity. Simply enter your regular e-mail address in the first text box, click the encode button, and then highlight and copy the resulting code produced in the second text box. This encoded e-mail address can be read and translated back into its original ascii text by almost any web browser without any further action on your part. Just replace all instances of your e-mail address on your pages with the code, and you won't have to worry (too much) about spam lists.

Since version 4.8, OpenSSH supports chrooting (see http://openssh.org/txt/release-4.8), so no patches are needed anymore. This tutorial describes how to give users chrooted SSH access. With this setup, you can give your users shell access without having to fear that they can see your whole system. Your users will be jailed in a specific directory which they will not be able to break out of. I will also show how to use chrooted SFTP. I do not issue any guarantee that this will work for you!

IPREDator is a network service that makes people online more anonymous using a VPN. it costs about 5 EUR a month and we store no traffic data.
our service is right now in a beta stage. we hope it will be released for the public before 1st of april. sign up now to start using it as soon as we're stable.
the network is under our control. not theirs. the pirate bay likes and knows real kopimism. and waffles.

Although widely used, currently popular peer-to-peer (P2P) applications are limited by a lack of user privacy. By design, services like BitTorrent and Gnutella share data with anyone that asks for it, allowing a third-party to systematically monitor user behavior. As a result, P2P networks can only be safely used by those comfortable with wholly public knowledge of their activity.

Moxie Marlinspike, who spoke at the Black Hat security conference on Wednesday, explained how to subvert an SSL session by performing a man-in-the-middle attack. The anarchist researcher explained in a YouTube video that the attack uses a tool developed called SSLstrip, which exploits the interface between http and https sessions. "SSLstrip man-in-the-middles all of the potential SSL connections on the network, specifically attacking the bridge between http and https," Marlinspike said in the video. Secure Sockets Layer, and its successor Transport Layer Security, are cryptographic protocols used to encrypt communications over TCP/IP networks. SSL and TLS are often used by banks and other organizations to secure web transactions.

Digsby requires a Digsby account and there are benefits. Single sign-on is a HUGE benefit from contacting the Digsby server so wherever you go, your preferences including Account preferences travel with you. And yes it is secure because all passwords are encrypted.

The robust update Blu-ray's BD+ copy protection that was gonna take three months to crack was just busted by Slysoft, months ahead of schedule. Wanna guess what's gonna happen to the next BD+ update?

WebDrive is more than just an FTP Client. By connecting to WebDAV, FTP, Amazon S3, FTPS, or SFTP servers through a virtual drive, there is no need to run a separate FTP client interface. Unlike a typical FTP client, WebDrive allows you to open and edit server-based files without the additional download step.

With NetDrive, managing your remote FTP and WebDAV servers will be as easy as any old file folders on your PC. Once you mount the local drive, you don't need to run an application or an FTP client interface but a simple drag-and-drop in your Windows Explorer will be sufficient to transfer and manage files.

NetDrive allows you to map a drive on a Windows, Novell, or Linux server via FTP, SFTP, WebDAV or iFolder so that it shows up as a regular drive in explorer and behaves very much as a local drive would in the Windows file system. You can map multiple servers to multiple drives and assign each one the drive letter of your choosing.

Problem: I want to mount my folders from my webhost over sftp (ssh) on my Windows machine for free. Something like sshfs for Windows. Discussion: Currently there is no single application that will let me mount an SFTP connection as a drive. There are however applications such as NetDrive, FTPDrive, etc which will let me mount an FTP connection as a drive. So all that’s left to do is create a FTP to SFTP bridge. What does that do you ask? That creates a FTP proxy to your SFTP connection. It will allow you to send your commands from the FTP server to the SFTP connection. There are two tools that stand out to create the bridge we need. The first is mindTerm, an open source solution written purely in java. The second is Tunnelier by Bitvise. I will be using mindTerm with NetDrive in my solution. If you have success with any other combination feel free to comment about your setup.

Dokan SSHFS is a program that mounts remote file systems using SSH.

Perfect Dark is a Japanese peer-to-peer file-sharing (P2P) application designed for use with Microsoft Windows (not to be confused with the video game franchise Perfect Dark). Its author is known by the pseudonym Kaichō (会長, Kaichō? lit. "The Chairman"). Perfect Dark was developed with the intention for it to be the successor to both Winny and Share.[1] It is currently in an open testing phase, with frequent updates.

WiFi is no longer secure enough to protect wireless data. Global Secure Systems has said that a Russian's firm's use of the latest NVidia graphics cards to accelerate WiFi ‘password recovery' times by up to an astonishing 10,000 per cent proves that WiFi's WPA and WPA2 encryption systems are no longer enough to protect wireless data.

Gpg Tools is a Mac OS X graphical interface to the GNU Privacy Guard (GPG) utility. It provides approximately the functionality of the old PGPtools, and is freeware.

Quite naturally I found FileVault and Disk Utility, but both of those options seemed like overkill for encrypting one file. So I went with MacGPG instead.

MidpSSH is an SSH and Telnet client for MIDP 1.0 / 2.0 (J2ME) devices such as Java(tm)-capable cellphones and other mobile devices. MidpSSH is developed by Karl von Randow www.xk72.com and released under the GPL. MidpSSH is based upon Floyd SSH and Telnet Floyd by Radek Polak http://activationrecord.net/radekp/telnet/, who ported the Java (tm) Telnet/SSH Applet to the MIDP platform. MidpSSH adds a GUI and a number of other features to Floyd SSH, see the Features section below.

Not one Mac OS X program has delievered a simple way to encrypt and decrypt files with a secret key. BitEncrypt is a new free application that allows for simple file encryption, allowing you to be confident that the file is safe. BitEncrypt uses solid 256-bit AES encryption; the same standard that the United States uses at a highly confidential level.

The practice of disguising, or munging, an e-mail address to prevent it being automatically collected and used as a target for people and organizations who send unsolicited bulk e-mail. Address munging is intended to disguise an e-mail address in a way that prevents computer software seeing the real address, or even any address at all, but still allows a human reader to reconstruct the original and contact the author: an email address such as, "no-one@example.com", becomes "no-one at example dot com", for instance. Any e-mail address posted in public is likely to be automatically collected by computer software used by bulk emailers — a process known as e-mail address harvesting — and addresses posted on webpages, Usenet or chat rooms are particularly vulnerable to this.

Remobo creates an Instant Private Network ™ (IPN) between users.

Just login from your computers or add other users to your buddy list and Remobo will create an IPN between these computers, allowing you to...

Remote control your home computer and access files while at work or traveling.

Privately share large files like photos & docs between computers or with friends & family.

Replace your existing, costly and difficult to use VPN software.

Run games, video conferencing, streaming media, secure instant messaging and more!

Especially for people with little experience it is important to have simple solutions to break through walls. For this reason we present the FreedomStick. The FreedomStick is an ordinary USB stick with the TorBrowser and Torprojects software preinstalled.

Den svenska internetoperatören Bahnhof är allt annat än förtjust i den nya FRA-lagen. - Vi kommer att installera våra kablar på annat håll för att på så sätt kringgå lagen, säger vd:n Jon Karlung.

Public key authentication, when used to authenticate with an SSH server, has a very limited scope compared with all the features public key cryptography provides. But still, there are several reasons to consider using this.

You can enable Firefox to do remote domain name lookups. The option network.proxy.socks_remote_dns in about:config. In some versions of Firefox, it is possible that even with this option set remote DNS resolution will not work.

The Pirate Bay has started to work on a new encryption technology. The project, which is still in its initial stages, goes by the name “Transparent end-to-end encryption for the Internets,” or IPETEE for short.

Den nya lagen om signalspaning har fått många att protestera. Enormt missnöje och en oro har spridit sig bland den svenska befolkningen, hävdar Phoneras vd Henric Wiklund som nu svarar FRA genom att bygga ett krypterat nät för internettrafik.

The private key is kept secret, while the public key may be widely distributed. Incoming messages would have been encrypted with the recipient's public key and can only be decrypted with his corresponding private key.

The Enkoder helps protect email addresses by converting them into encrypted JavaScript code, hiding them from email-harvesting robots while revealing them to real people. The Enkoder will work on Mac OS X 10.5 as well as 10.4.