Archive for the ‘p2p softwares’ Category


1. Secure your WIFI connection

secure your digital life from hackersHome users are particularly prone to leaving their routers open without passwords, in order to make sure that you’re protected check your router settings to verify whether encryption is turned on or not. leaving access unencrypted can be just a minor issue of bandwidth being stolen by unauthorized users freeloading off your connection to more serious cybercrimes like credit card fraud or hacking taking place using your internet connection, which may be traced back to you.

The majority of routers support encrypted connections, support either WEP or WPA/WPA2, always opt for WPA/WPA2 as it’s far more secure. If you have the option hide SSID broadcast, turn that on as well, it basically allows you to make your wireless router invisible to outsiders and they need to know your SSID to access the network.

2. Encrypt your hard drive

secure your digital life from hackersIt’s important to keep your data secure in case of loss of hardware or even theft. An encrypted hard drive basically prevents its contents from being access without the password. It is obviously more important to encrypt thumb drives and laptop drives. Windows 7 Ultimate and Business editions come with a built in hard drive functionality using a software called BitLocker which will encrypt your entire hard drive, but users with Home Premium or Basic users shouldn’t feel left out as there is a free way to encrypt your hard drive using trucrypt.

Mac users can use FileVault to encrypt their folders, and OSX Lion will allow you to encrypt your entire hard drive as well.You can also get hardware encryption which will use fingerprint recognition to unlock data inside the drive like the Lacie Rugged Safe.

3. Keep your software updated

secure your digital life from hackersIt’s a given that you need to keep your operating system, antivirus and web browser up to date in order to protect yourself from exploits, and if you haven’t got automatic update turned on for them, you should do it now.

However a lot of users often overlook other software such as Acrobat Reader, Flash, Java and iTunes when it comes to keeping software updated. It’s important to realize that many of these applications have direct access to the operating system, and an exploit in these applications can be used as a gateway into your system files. Flash and Acrobat are used heavily with web browsers which is the number one source of malware infections.

4. Upgrade your antivirus suite.

secure your digital life from hackersIt’s as important to keep your virus suite updated as much as it is to keep your virus definitions updated. The reason for this is because antivirus software evolve in the way they deal with malware, such as introducing heuristic technologies which identify common traits of viruses, the way they interact with the system and actively block these scripts. This is why having an outdated antivirus software, despite updated virus definitions may not provide the best possible protection. If you’re using an older version of antivirus software you may entitled to discounted upgrades to newer versions.

5. Secure your smartphones

secure your digital life from hackersMany people completely overlook this fact, but smartphones are essentially mini computers which hold swathes of personal information about you. They often hold logins to your facebook/twitter accounts which are set on auto login, online banking and other financial information as well as access to email. If someone gets hold of all these details it can cause a lot of stress and havoc to your life.

It’s vital to keep your devices with password lock activated, additionally you should take some precautionary measures in case you lose your device.

Apple has a very cool security software called Find my iPhone which is a free app by Apple, which lets you track your phone by GPS, lock and remotely delete data from it. You can even use it just to locate your iPhone if you misplace it, causing it to sound an alarm.

For Android users it’s important to stay protected, smartphones are just as vulnerable to viruses as a PC, although the android platform is more prone to them than apple due to the open platform nature of the former. Android phones require antivirus protection, all the popular desktop antivirus brands offer android support as well.

The app store is less prone to malware due to the fact that all apps are vetted by Apple before publishing, although if you’ve jail broken your iPhone, antivirus protection may be something you need to look at.

6. Vet web page links using a link checker

Cyber criminals are using sophisticated strategies to drive users onto their web pages, increasingly innocent websites are being targeted using exploits to find security holes to hack and implant code on them which can launch JavaScript applications and infect computers when users visit the infected site. Link checkers scan links on your search results and optionally other websites and indicate whether links are safe, websites are scanned by their own servers so it does not impair your computer performance. Link checkers are available with most anti malware security suites such as with AVG, McAfee and Symantec.

7. Laptop Security for mobile workers

secure your digital life from hackersLaptops thefts are common, and are easy targets due to their transportable nature. If you work away from your office it’s important to invest in a Kensington Lock. While a lock won’t prevent trained thieves armed with cable cutters, it will prevent opportunistic thieves which is the overwhelming majority of laptop thefts.

It’s also important to keep prying eyes away from your data, always password protect your login, and when leaving your laptop unattended, using the screen lock feature in Windows to prevent unauthorized users from looking at or accessing your information.

If you work with particularly sensitive data a privacy screen may provide an added level of protection, the screen is only viewable to the person sitting directly in front, so people sitting around you cannot look at your screen. Targus and 3M are well known for producing privacy screens for all manner of monitor sizes.

8. HTTPS encryption for websites

secure your digital life from hackersMost people are well informed with the necessity of using https secure connections with online shopping when entering sensitive personal information. However, it can be argued that websites like facebook, twitter, gmail and others hold equally sensitive information about you.

Did you know you can elect to use https secure connections on these websites? For case by case uses, you can insert a ‘s’ after the http on the web address, if there isn’t one already to access the site securely. However if you want to access the sites securely every time you visit, you can login select the option to always use https in the profile settings.

9. Use online backup to keep an offsite storage of your files.

secure your digital life from hackersA great way for mobile workers to keep data kept safe and secure while on the move is to use online backup, this provides great peace of mind if your computer gets lost, as it allows you to recover your files from the cloud. Online backup services like Sugar Sync also provide users with high level synchronization features which can be used as a great time management tool as well, as it keeps data across all your computers consistent and up to date. You can look up various online backup reviews here to compare their features and read up user reviews.

10. Avoid public wifi and public computers.

Using public computers can be incredibly risky as malware and key loggers can be installed to track your keystrokes and cached files in order to gain access to your private information.

secure your digital life from hackersAdditionally, public wifi connections can be risky as the servers can be breached with malware additionally phantom hotspots can be set up which appear like legitimate hotspots, but are actually other ordinary laptops which act as a middleman eavesdropping into the connection.

An example on how cached data can be hijacked to login to your web accounts can be demonstrated using FireSheep.

Thankfully mobile 3G internet connections are becoming more affordable, and are often faster than public wifi hotspots. 3G connections are far more secure, additionally you may be able to tether your Smartphone internet connection to work on your laptop. I hope this article helped you all for sure. And do follow these above 10 steps and secure your digital life from hackers.

Advertisements

Anonymous P2P

Posted: January 7, 2011 in p2p network, p2p softwares

An anonymous P2P communication system is a peer-to-peer distributed application in which the nodes or participants are anonymous or pseudonymous. Anonymity of participants is usually achieved by special routing overlay networks that hide the physical location of each node from other participants.

Interest in anonymous P2P systems has increased in recent years for many reasons, ranging from the desire to share copyrighted files without revealing one’s network identity and risking litigation[1] to distrust in governments, concerns over mass surveillance and data retention, and lawsuits against bloggers.[2]

Contents [hide]
1 Motivation for anonymity
2 Arguments for and against anonymous P2P communication
2.1 General
2.2 Freedom of speech
2.2.1 Anonymous blogging
2.2.2 Censorship via Internet domain names
2.3 Control over online tracking
2.4 Effects of surveillance on lawful activity
2.5 Access to censored and copyrighted material
2.6 Anonymous online money
3 Functioning of anonymous P2P
3.1 Anonymity and pseudonymity
3.2 Spam and DoS attacks in anonymous networks
4 Opennet and darknet network types
5 List of anonymous P2P networks and clients
5.1 Public P2P clients
5.1.1 Defunct or dormant
5.2 Private P2P clients
5.3 Friend-to-friend clients
5.4 Hypothetical or defunct networks
5.4.1 Hypothetical
5.4.2 Defunct or dormant
5.5 Anonymous P2P in a wireless mesh network
6 See also
7 References
8 External links

Motivation for anonymity

There are many reasons to use anonymous P2P technology; most of them are generic to all forms of online anonymity.

P2P users who desire anonymity usually do so as they do not wish to be identified as a publisher (sender), or reader (receiver), of information. Common reasons include:
The material or its distribution is illegal or incriminating
Material is legal but socially deplored, embarrassing or problematic in the individual’s social world (for example, anonymity is seen as a key requirement for organizations like Alcoholics Anonymous)
Fear of retribution (against whistleblowers, unofficial leaks, and activists who do not believe in restrictions on information or knowledge)
Censorship at the local, organizational, or national level
Personal privacy preferences such as preventing tracking or datamining activities

A particularly open view on legal and illegal content is given in The Philosophy Behind Freenet.

Governments are also interested in anonymous P2P technology. The United States Navy funded the original onion routing research that led to the development of the Tor network, which was later funded by the Electronic Frontier Foundation and is now developed by the non-profit organization The Tor Project, Inc.


Arguments for and against anonymous P2P communication

General

While anonymous P2P systems may support the protection of unpopular speech, they may also protect illegal activities not protected under some free speech laws, such as fraud, libel, the exchange of illegal pornography, the unauthorized copying of copyrighted works, or the planning of criminal activities. Critics[who?] of anonymous P2P systems hold that the advantages offered by such systems do not outweigh these disadvantages, and that other communication channels are already sufficient for unpopular speech.

Some[who?] proponents of anonymous P2P systems believe that all restrictions on free speech serve authoritarian interests. Others[who?] argue that information itself is ethically neutral, and that it is the people acting upon the information that can be good or evil. Perceptions of good and evil can also change (see moral panic); for example, if anonymous peer-to-peer networks had existed in the 1950s or 1960s, they might have been targeted for carrying information about civil rights or anarchism.

Easily accessible anonymous P2P networks are seen by some as a democratization of encryption technology, giving the general populace access to secure communications channels already used by governments. Supporters of this view, such as Phil Zimmermann, argue that anti-surveillance technologies help to equalize power between governments and their people,[3] which is the actual reason for banning them. Pilger opines that monitoring of the populace helps to contain threats to the “consensual view of established authority”[4] or threats to the continuity of power structures and privilege.

Freedom of speech

Some claim that true freedom of speech, especially on controversial subjects, is difficult or impossible unless individuals can speak anonymously. If anonymity is not possible, one could be subjected to threats or reprisals for voicing an unpopular view. This is one reason why voting is done by secret ballot in many democracies. Controversial information which a party wants to keep hidden, such as details about corruption issues, is often published or leaked anonymously.

Anonymous blogging

Anonymous blogging is one widespread use of anonymous networks. While anonymous blogging is possible on the non-anonymous internet to some degree too, a provider hosting the blog in question might be forced to disclose the blogger’s IP address (as in the case of Google revealing an anonymous blogger’s identity[5]). Anonymous networks provide a better degree of anonymity. Flogs in Freenet, Syndie in I2P and Osiris sps are some examples of anonymous blogging technologies.

One argument for anonymous blogging is a delicate nature of work situation. Sometimes a blogger writing under his/her real name faces a choice between either staying silent or causing a harm to himself, his colleagues or the company he works for.[6]

Risk of lawsuits is another reason. Some bloggers have faced multi-million dollar lawsuits[7] that were later dropped completely;[8] anonymous blogging provides protection against such risks.

Censorship via Internet domain names

On the non-anonymous internet, a domain name like “mysite.com” is a key to accessing information. The censorship of the Wikileaks website[9] shows that domain names are extremely vulnerable to censorship. Some domain registrars have suspended customers’ domain names even in the absence of a court order.

For the affected customer, blocking of a domain name is a far bigger problem than a registrar refusing to provide a service; typically, the registrar keeps full control over the domain names in question. In the case of a European travel agency, more than 80 .com web sites were shut down without any court process and held by the registrar since then. The travel agency had to rebuild the sites under the .net top-level domain instead.[10]

Anonymous networks, on the other hand, do not rely on domain name registrars. For example, Freenet implements censorship-resistant URLs based on public-key cryptography: only a person having the correct private key is able to update the URL or take it down.

Control over online tracking

Anonymous P2P also has value in normal daily communication. When communication is anonymous, the decision to reveal the identities of the communicating parties is left up to the parties involved and is not available to a third party. Often there is no need or desire by the communicating parties to reveal their identities. As a matter of personal freedom, many people do not want processes in place by default which supply unnecessary data. In some cases such data could be compiled into histories of their activities.

For example, most current phone systems transmit caller ID information by default to the called party (although this can be disabled either for a single call or for all calls). If a person calls to make an inquiry about a product or the time of a movie, the party called has a record of the calling phone number, and may be able to obtain the name, address and other information about the caller. This information is not available about someone who walks into a store and makes a similar inquiry

Effects of surveillance on lawful activity

Online surveillance, such as recording and retaining details of web and e-mail traffic, may have effects on lawful activities.[11] People may be deterred from accessing or communicating legal information because they know of possible surveillance and believe that such communication may be seen as suspicious.

According to law professor Daniel J. Solove, such effects “harm society because, among other things, they reduce the range of viewpoints being expressed and the degree of freedom with which to engage in political activity.” [12]

Access to censored and copyrighted material

Most countries ban or censor the publication of certain books and movies, and certain types of content. Other material is legal to possess but not to distribute; for example, copyright and software patent laws may forbid its distribution. These laws are difficult or impossible to enforce in anonymous P2P networks.

Anonymous online money

With anonymous money, it becomes possible to arrange anonymous markets where one can buy and sell just about anything anonymously. Anonymous money could be used to avoid tax collection. However, any transfer of physical goods between two parties could compromise anonymity.[13]

Some[who?] argue that conventional cash provides a similar kind of anonymity, and that existing laws are adequate to combat crimes like tax evasion that might result from the use of anonymous cash, whether online or offline[citation needed].

Functioning of anonymous P2P

Anonymity and pseudonymity

Some of the networks commonly referred to as “anonymous P2P” are truly anonymous, in the sense that network nodes carry no identifiers. Others are actually pseudonymous: instead of being identified by their IP addresses, nodes are identified by pseudonyms such as cryptographic keys. For example, each node in the MUTE network has an overlay address that is derived from its public key. This overlay address functions as a pseudonym for the node, allowing messages to be addressed to it. In Freenet, on the other hand, messages are routed using keys that identify specific pieces of data rather than specific nodes; the nodes themselves are anonymous.

The term anonymous is used to describe both kinds of network because it is difficult—if not impossible—to determine whether a node that sends a message originated the message or is simply forwarding it on behalf of another node. Every node in an anonymous P2P network acts as a universal sender and universal receiver to maintain anonymity. If a node was only a receiver and did not send, then neighbouring nodes would know that the information it was requesting was for itself only, removing any plausible deniability that it was the recipient (and consumer) of the information. Thus, in order to remain anonymous, nodes must ferry information for others on the network.

Spam and DoS attacks in anonymous networks

Originally, anonymous networks were operated by small and friendly communities of developers. As interest in anonymous P2P increased and the user base grew, malicious users inevitably appeared and tried different attacks. This is similar to the Internet, where widespread use has been followed by waves of spam and distributed denial-of-service attacks. Such attacks may require different solutions in anonymous networks. For example, blacklisting of originator network addresses does not work because anonymous networks conceal this information. These networks are more vulnerable to DoS attacks as well due to the smaller bandwidth, as has been shown in examples on the Tor network.

However, a conspiracy to attack an anonymous network could be considered criminal computer hacking[citation needed]. Participants in the network interested in ensuring the continuous availability of it could collaborate to identify the source of abusive traffic, and further investigate or prosecute it. This could be done without compromising the anonymity of data in the network.

Opennet and darknet network types
Main article: Friend-to-friend

Like conventional P2P networks, anonymous P2P networks can implement either opennet or darknet (often named friend to friend) network type. This describes how a node on the network selects peer nodes:
In opennet network, peer nodes are discovered automatically. There is no configuration required but little control available over which nodes become peers.
In a darknet network, users manually establish connections with nodes run by people they know. Darknet typically needs more effort to set up but a node only has trusted nodes as peers.

Some networks like Freenet support both network types simultaneously (a node can have some manually-added darknet peer nodes and some automatically-selected opennet peers) .

In a friend-to-friend (or F2F) network, users only make direct connections with people they know. Many F2F networks support indirect anonymous or pseudonymous communication between users who do not know or trust one another. For example, a node in a friend-to-friend overlay can automatically forward a file (or a request for a file) anonymously between two “friends”, without telling either of them the other’s name or IP address. These “friends” can in turn forward the same file (or request) to their own “friends”, and so on. Users in a friend-to-friend network cannot find out who else is participating beyond their own circle of friends, so F2F networks can grow in size without compromising their users’ anonymity.

Some friend-to-friend networks allow the user to control what kind of files can be exchanged with “friends” within the node, in order to stop them from exchanging files that user disapproves of.

Advantages and disadvantages of opennet compared to darknet are disputed, see Friend to Friend article for summary.

List of anonymous P2P networks and clients

Public P2P clients
Bunzilla – file sharing
Calypso – (formerly Kommute) successor to Mute
Freenet – a censorship-resistant distributed file system for anonymous publishing (open source, written in Java)
GNUnet – P2P framework, includes anonymous file sharing as its primary application (GNU project, written in C)
I2P – a decentralized (overlay) network for strong anonymity and end-to-end encryption, with many applications (p2p, browsing, distributed anonymous e-mail, instant messaging, irc, …) running on top of it (free/open source, platform-independent)
I2phex – a Gnutella client which communicates anonymously through I2P
iMule – an emule port running under I2P network (includes built-in I2P router)
Netsukuku – a peer-to-peer routing system aiming to build a free and independent internet
Nodezilla – an anonymizing, closed source network layer upon which applications can be built (written in C++ and Java)
OneSwarm – A backwards compatible BitTorrent client with privacy-preserving sharing options, aims to create a large F2F network.
OFF System – a P2P distributed file system through which all shared files are represented by randomized data blocks
Omemo – an open source social storage platform (p2p virtual hard drive)
Osiris sps – an anonymous and distributed web portals creator.
Perfect Dark – a P2P client which relies on a mixnet and distributed datastore to provide anonymity (freeware, written for Windows)
Rodi – a file sharing client which allows for a low degree of anonymity
StegoShare – a steganography software may be used for anonymous file sharing
Stealthnet – the successor to RShare
Syndie – a content syndication program that operates over numerous anonymous and non-anonymous networks
Vuze (formerly Azureus) – a BitTorrent client with the option of using I2P or Tor (open source, written in Java)
Winny – a P2P client that is very popular in Japan (freeware, written in C++ for Windows)

Defunct or dormant

ANts P2P – file sharing and HTTP publishing
Bitblinder
Entropy – a “Freenet alternative”
Marabunta – for chatting only
MUTE – file sharing
RShare – file sharing

Private P2P clients

Private P2P networks are P2P networks that only allow some mutually trusted computers to share files. This can be achieved by using a central server or hub to authenticate clients, in which case the functionality is similar to a private FTP server, but with files transferred directly between the clients. Alternatively, users can exchange passwords or keys with their friends to form a decentralized network

Friend-to-friend clients

Friend-to-friend networks are P2P networks that allows users only to make direct connections with people they know. Passwords or digital signatures can be used for authentication.

Hypothetical or defunct networks

Hypothetical

The following networks only exist as design or are in development
Crowds – Reiter and Rubin’s system for “blending into a crowd” has a known attack
Herbivore – a distributed anonymous DC-communication system, providing private file sharing and messaging, under development at the Cornell University.
P2PRIV – Peer-to-Peer diRect and anonymous dIstribution oVerlay – anonymity via virtual links parallelization – currently in development and has significant, unsolved problems in a real world environment
Phantom – a fully decentralized high-throughput anonymization network currently working on a plan to implement it
Ano – extensible IP anonymizer with steganography support (in development)

Anonymous P2P in a wireless mesh network

It is possible to implement anonymous P2P used on a wireless mesh network: unlike fixed internet connections, users don’t need to sign up with an ISP to participate in such a network, and are only identifiable through their hardware. Even if a government were to outlaw the use of wireless P2P software, it would be difficult to enforce such a ban without a considerable infringement of personal freedoms. Alternatively, the government could outlaw the purchase of the wireless hardware itself. Protocols for wireless mesh networks are OLSR and the follow-up protocol B.A.T.M.A.N., which is designed for decentralized auto-IP assignment. See also Netsukuku.