Archive for the 'Security' Category
equinux today released VPN Tracker 6.1 – a new update to its market-leading IPsec-based VPN client for Mac OS X. VPN Tracker 6.1 supports the SonicWALL TZ 100 and TZ 200, the latest additions of the TZSeries UTM appliances that are aimed at small to mid-sized businesses. VPN Tracker now includes Mode Config support for additional VPN gateways and has greater interoperability with a range of other devices, thereby making it simpler to configure and administrate Macs in a virtual private network.
“SonicWall and VPN Tracker have worked hand in hand since VPN Tracker’s inception,” says equinux CEO Till Schadde. “We are proud to announce that VPN Tracker now supports the high quality entry-level VPN gateways of the SonicWALL TZ Series. This is yet another milestone in the great partnership with SonicWALL.”
“We are pleased to present Mac users with our new TZ Series UTM appliances in combination with VPN Tracker, as together they provide a robust solution for a successful VPN installation,” said Dave Parry, Director of Engineering at SonicWALL.
Easier Configuration and Improved Interoperability
VPN Tracker 6.1 simplifies configuration via Mode Config for D-Link devices and includes new configuration guides for the D-Link DFL-800 and DFL-200 VPN firewall solutions. It also contains device profiles and configuration guides for all Fireware XTM based WatchGuard VPN gateways, including for the first time, the Firebox X Edge e-Series. To simplify setup for those using an AVM FRITZ!Box, an updated configuration assistant is now available from the VPN Tracker website.
VPN Tracker 6 has been optimized for businesses, consultants and mobile Mac users. With the fully customizable Secure Desktop, users can easily perform routine tasks, including accessing file servers, checking emails, and using any application, file or script, without having to worry about connecting and disconnecting VPN connections. In addition to its IPsec-based VPN connections, VPN Tracker 6 also provides access to any existing Mac OS X PPTP or L2TP VPN connections from within the same user interface. VPN Tracker 6 supports the new Internet protocol IPv6 and 64-bit mode in Mac OS X Snow Leopard. VPN connections are now more secure than ever with the addition of the latest security standards – including the SHA-2 family of hash algorithms, Diffie-Hellman (DH) groups 14-18 (up to 8192 bit), and the integration of Snow Leopard’s new Mac OS X Service Management framework.
VPN Tracker 6 has been optimized for businesses, consultants and mobile Mac users. With the fully customizable Secure Desktop, users can easily perform routine tasks, including accessing file servers, checking emails and using any application, file or script, without having to worry about connecting and disconnecting VPN connections. In addition to its IPsec-based VPN connections, VPN Tracker 6 also provides access to any existing Mac OS X PPTP or L2TP VPN connections from within the same user interface. VPN Tracker 6 supports the new Internet protocol IPv6 and 64-bit mode in Mac OS X Snow Leopard. VPN connections are now more secure than ever with the addition of the latest security standards – including the SHA-2 family of hash algorithms, Diffie-Hellman (DH) groups 14-18 (up to 8192 bit), and the integration of Snow Leopard’s new Mac OS X Service Management framework.
Pricing and Availability
VPN Tracker 6.1 licenses are currently available from €79 (incl. VAT) / $99 USD. Existing VPN Tracker customers can upgrade to the latest version 6.1 for a discounted price by visiting http://my.equinux.com.
A VPN Tracker Business Pack is also available to suit professional needs. This package includes 1 VPN Tracker Professional license in addition to 5 Player licenses and offers savings of 20% in comparison with the purchase of single licenses at the regular price.
TASER International Inc., a market leader in technologies that protect life, will introduce a groundbreaking new family safety platform called PROTECTOR during the International Consumer Electronics Show (CES) that runs from January 7-10 in Las Vegas, NV.
PROTECTOR is a revolutionary toolset that gives parents the ability to supervise their children’s mobile phone usage and driving behaviors. Parents can manage the contact lists and content of their child’s mobile phone – including calls, texts, emails, photos and video, and can automatically limit phone functionality to prevent dangerous distractions while driving. PROTECTOR uses integrated GPS, allowing parents to track their child’s location, monitor driving habits, and release vital records to the authorities in emergency situations.
“Our mission at TASER International is to protect life – PROTECTOR is our latest technology breakthrough to further our mission by empowering families to protect the most precious of lives: our children,” says Rick Smith, CEO and founder of TASER International. “Auto accidents are the leading cause of death among American teenagers, and distracted driving is becoming a major factor in these accidents. PROTECTOR will play a significant role in addressing this national tragedy.”
“Keeping my family safe is crucial, but being engaged and staying involved in my kids’ lives is important too. With PROTECTOR, I can do both,” says Smith. “Many kids spend more time with their mobile phone than their families, and most parents have been helpless, in the dark as to who their kids are interacting with and what kind of content their kids are exposed to every day. PROTECTOR empowers parents to stay involved and provide parenting guidance in a fast moving, mobile world.”
PROTECTOR works on multiple devices, each managed through an intuitive control panel accessible through a smart phone, PC, MAC or smart TV. Parents can control who their children interact with and monitor their mobile phone activity and driving behavior at any time – and change permissions and settings in real time. PROTECTOR is carrier-independent and seamlessly connects parents and children, even if they’re on different cellular networks.
Smith adds, “It’s unlike anything on the market today. PROTECTOR is a technologically advanced, yet flexible product suite that grows with the family by providing controls as needs and situations change – from a child’s first mobile phone through the critical teenage years. PROTECTOR adapts as children mature. Through a simple, user-friendly interface, parents can modify parameters or rules anytime.”
TASER will introduce PROTECTOR at CES from booth SOUTH 4 36200 in the Las Vegas Convention Center Thursday, January 7 through Sunday, January 10, 2010. PROTECTOR is anticipated to launch as a subscription service in mid 2010. More information will be available at www.PROTECTOR.com on January 7, 2010.
D-Link, the end-to-end networking solutions provider for consumers and business, today announced a trio of products designed to make the digital home more secure and less power hungry with minimal impact on the family budget.
The D-Link® Home Monitoring Starter Kit is an affordable, easy-to-use and very innovative “Connected Home Monitor” system that provides homeowners and renters with new levels of security for their property and loved ones. Designed for quick and easy installation by the user, the system connects via broadband router in the home, and can then be remotely monitored and controlled through a personalized web portal account at mydlink.com. Alerts from wireless sensors around the home are instantly relayed by text, email and voice-call to the consumer and their designated contacts.
Featuring a sleek, unobtrusive design, the D-Link Home Monitoring Starter Kit offers enhanced features found in more costly security systems, and uses Internet Protocol (IP) technology to offer an improved range of services and functionality in homes without traditional phone lines (POTS). The system can be easily expanded with infrared motion detection, door/window contacts, keypad, personalized key fobs, fire, carbon monoxide, and water leak detectors — all offered as additional accessories. The system can use these sensors to inform parents when their kids get home safely from school, and a home video option is available with D-Link IP cameras which can capture and record events with remote access to the images available through the website or via mobile phones.
Whether the user is traveling, at work, on vacation or at the neighborhood shopping mall, this solution can provide new levels of protection with the mydlink™ platform monitoring the property 24 hours a day, seven days a week It can even protect people in the home, with messaging to relatives and caretakers if someone is not out of bed and moving around the property by a specified time in the morning!
The kit’s Control Unit is simply connected via Ethernet cable to a broadband router and reports all alarm and other activity information directly to the mydlink platform. A range of in-home sensors report wirelessly to the Control Unit, and the user can add up to 20 additional sensors. The whole system can be self-installed in just 30 minutes as all sensors supplied with the standard kit are pre-registered with default settings.
The Home Monitor can be expanded with the D-Link Home Energy Monitoring Starter Kit. It is one of the first products that lets consumers measure energy consumption of all electrical appliances in the home, turning the Home Monitor into the ultimate smart energy “Green Machine”. It actually changes the way homeowners or renters deal with the age-old challenge of how to keep their home energy consumption to a minimum. It also provides practical tools for power management. When linked to the Home Monitoring Starter kit, consumers can use the mydlink portal to program devices to power-down when the home is empty, helping reduce carbon emissions and reduce utility bills by saving electricity.
The kit is equipped with two power-usage sensor adapters (additional sensors may be purchased separately) that plug into the home’s wall sockets near where the electrical appliances are located. By plugging the appliances directly into the kit’s sensor adapters, users can automatically download energy consumption data to their personal mydlink.com webpage where they have access to real-time power usage levels; daily, weekly and monthly breakdowns; cost conversions and graphical analysis. In addition, the product allows utility companies to offer users incentives on fee schedules based on their history of energy conservation.
The D-Link 3G Door Phone, another security innovation from D-Link, is the newest idea for adding another level of surveillance for the home. It acts like – and is powered the same as – an ordinary doorbell. But it is not ordinary. It is the first doorbell of its kind to allow homeowners to get a full view of visitors to their property from wherever they are – at home or away – using their 3G mobile phones. A built-in fixed focus .1 megapixel CMOS camera captures the images of visitors and streams the information to the PC or 3G mobile device, an LED indicator lets the homeowner know that the device is working, and an illuminated button allows easy visibility when it is dark outside.
Price and Availability
All three products, the D-Link Home Monitoring Starter Kit with a MSRP of $149.99, the D-Link Home Energy Monitoring Starter Kit at $99.99 MSRP, and the D-Link 3G Door Phone priced at $199.99 MSRP are expected to be available in the second quarter of this year through the company’s vast network of retail and etail outlets, and at D-Link’s online store, www.dlinkshop.com. Additional details for free and paid-subscription services for the D-Link Home Monitoring Starter Kit will be available when the product ships.
So you’re sitting in the comforts of your warm home and your car is parked out front all cold and uninviting? Bundle up and tackle that frigid automobile until the heater makes things nice or you can pull out your iPhone and just start it from your couch!
Viper has just announced the Vehicle Remote Start & Security application for the iPhone (with limited support for the iPod touch) that when coupled with a $500 box installed to your vehicle will let you remotely start the car, toggle the locks, pop the trunk, and beep the horn. The application works with multiple vehicles equipped with the Viper hardware and is only limited to cellular connection for the vehicle and Wi-Fi or a cellular connection on your iPhone.
Viper has a pretty sweet demo on its Facebook fan page with an option to win one of these cool remote devices.
While I love this whole set up, I have to say, $500 is a pricey for just starting your car and unlocking it. Still, really cool idea and makes OnStar that much lamer. 
Zoombak has announced the release of the first speed and directional tracking features for all Zoombak devices. Beginning today, all new and existing Zoombak customers can easily monitor the speed and driving direction of any vehicle. Speed tracking comes at no additional cost from Zoombak, which retails for $99.99 plus a small monthly service fee.
“Statistics around teen driving accidents are staggering, and studies have shown that teens’ driving habits improve when they are being monitored by a parent,” said Simon Buckingham, CEO of Zoombak. “Zoombak speed tracking is an easy-to-use and affordable solution for parents to monitor the location of their teen drivers and how fast they are driving. Our customer research has indicated that this added line of communication among families improves teens’ driving skills and give parents added peace of mind.”
“Since we launched Zoombak over a year ago, speed monitoring and alerting has been the most requested new feature from both parents and business users. We are therefore delighted to add this feature for all of our customers for no additional charge,” Buckingham added.
How Zoombak speed tracking works:
Following a quick over-the-air software update, Zoombak customers will be able to set up a speed threshold, (say 60 MPH) and receive alerts if that threshold is exceeded.
Setting up a speed alert for an account at Zoombak.com is simple and fast, and users can choose to receive alerts by SMS text to their mobile device, or by email. Users can set the speed alert to be always on, or set on/off schedules around certain times of day.
Zoombak determines the speed and direction (North, South, East, West) of the driver based on their location signal every 5 to 15 seconds.
When conducting Find-Now searches at Zoombak.com, in addition to the regular current location information, the email or text message will now also automatically display both the speed and the direction the driver was heading. So even if automatic alerts are not set up, parents can still see on-demand how fast and which direction their teen was driving. Direction is displayed as North, South, East or West.
The new “Speed” section of the Zoombak website provides Zoombak customers with more detailed instructions on setting up and getting the most out of the speed tracking feature.
Because speed and direction monitoring requires additional battery power, Zoombak recommends that consumers who use speed tracking hard wire the device to their vehicle with the Zoombak Car Installation Kit, or use the car charger that comes along with the Zoombak Universal A-GPS Locator.
For more information, visit www.zoombak.com/speed/.
Aleratec Inc., leading developer and manufacturer of “Prosumers’ Choice” solutions for the USB, Flash, HDD, Blu-ray, DVD CD Duplicating, and publishing markets, is now shipping the 2nd generation of its award winning compact Aleratec DVD/CD Shredder. The Aleratec DVD CD Shredder is the quick and easy way to prevent unauthorized use of secret, classified, business, and personal confidential information recorded on discarded discs. The unit has an attractive compact design to fit on any desktop, yet it is equipped with a powerful motor and enclosed steel cutters that safely cut DVDs and CDs into 4 strips, successfully rendering them useless. A demo of the DVD/CD Shredder can be seen at View Demo
“Sensitive data stored on CDs or DVDs can change frequently and disposing of old discs is a growing problem. With identity theft and corporate espionage increasing almost exponentially, just tossing them in the trash is more than dangerous,” states Perry Solomon, Aleratec President and CEO. “An Aleratec DVD/CD Shredder makes destroying unwanted discs very easy. This light weight desktop unit shreds DVDs and CDs in seconds. With its auto start/stop feature all a customer needs to do is insert a disc and the shredder does the rest.”
The great news is this innovative data security product has a low Estimated Retail Price of $44.99 making the Aleratec DVD/CD Shredder (Aleratec Part # 240143, Ingram Micro SKU U08101, Tech Data SKU 25377I), an easy addition to any Prosumer, Business, Government and Education office and due to its low price and small footprint it is ideal for small office/home office users.
The full line of Aleratec solutions, and accessories is featured at AAFES, Adorama, Amazon.com, B&H Photo Video, Best Buy, Buy.com, CDW, Dell, Hewlett Packard, Insight, J & R, Mac Connection, MacMall, Meijer, Micro Center, NewEgg, Office Depot, PC Connection, PC Mall, PC Nation, ProVantage, Quill, QVC.com, Ritz Camera, Staples, Tech Depot and Wal-Mart in addition to other leading U.S. retailers. Government and Education customers may purchase from Government and Education Specialists including AAFES, B&H Photo Video Gov, Best Buy Gov/Ed, CDW-G, CompuCom, EnPointe, GovConnection, GTSI, Insight Gov, PC Mall Gov, Pomeroy, Sayers, Shi.com, Softchoice, telcobuy, TIG, and Unisys. All products are available to resellers in the U.S. through D&H Distributing, Ingram Micro, and Tech Data; in Canada through D&H Canada and Ingram Micro Canada; in Latin America and the Caribbean through Tech Data Miami. Complete information available at www.aleratec.com.
SplashData, Inc. today announced a major update to the version of its SplashID secure information manager for iPhone and iPod(r) touch. The new SplashID version 4.5 offers significantly faster loading times, improved search and look-up functions, and a simpler, more elegant user interface.
After the initial launch of the iPhone version of SplashID this past July, the company began receiving a tremendous amount of feedback from a new legion of SplashID users – plus previous customers who have moved on to the iPhone and were thrilled to be able to once again use SplashID for securely storing passwords, user names, account numbers, and airline frequent flyer information. The new version 4.5 of SplashID is a response to requests from these customers and takes the application to a new level.
Enhancements to the new version of SplashID include:
* Up to 2x faster loading times for power users with many records
* Enhanced user interface with simplified navigation
* Improved search and look-up functions
* Landscape view
* Number pad login
* New browser window to make log-in to websites on the iPhone easier
* Updated Mac and PC desktop software
Over the past seven years, SplashID has grown to be the best selling password manager for mobile phones and PDA’s with hundreds of thousands of users worldwide. Its popularity continues to climb as the number of user names, passwords, and account numbers most people have to remember is rapidly multiplying. At the same time, the risk of this kind of sensitive information falling into the wrong hands has never been greater. SplashID helps solve this dilemma by creating an encrypted digital safe for sensitive data, offering the peace of mind of being able to access their critical information whenever needed while keeping it secure.
SplashID for the iPhone can sync with a user’s PC or Mac wirelessly using optional SplashID desktop companion software available from SplashData. The desktop version offers even more powerful features, easier data entry, and the ability to import existing SplashID records from other devices.
SplashID is available for $9.99 from Apple’s App Store on devices running OS 2.0 or higher or at www.apple.com. Windows and Mac OS desktop companion software for each application is available for $19.95 directly from SplashData at www.splashdata.com/iphone.
SvenOnTech has confirmed with co-developer, David Teare, of Agile Web Solutions that 1Password for the iPhone has already been updated to handle stability issues in the current 1.0 version.
Teare told SvenOnTech that fixes are not the only thing in version 1.2 that will make users happy. New in 1.2 will the inclusion of search, originally found in the bookmarklet version of 1Password used prior to the App Store release. Another lost feature, auto-form filling within Safari, may also make a return in a future version invoking the native 1Password application to fill the form within Safari. An exciting feature that may come as soon as 1.3 could be auto-sync. Any time a change is made on the desktop application, it would immediately send it to the iPhone keeping 1Password users up to date.
1Password for the iPhone is currently free, however, this may not be the case for ever according to Teare. So, download your copy now from the App Store in iTunes or from your iPhone and have access to all of your important data securely today!
Michael Fiola, pictured with his wife, Robin (Photo by Matthew Healey), was just another state employee with a laptop doing his job. One day he was called in and questioned about the content his employer had found on his hard drive after investigating why his Verizon wireless broadband data use was four times that of the average worker. What the Department of Industrial Accidents found was a slew of child pornography and it wasn’t listening to anything Fiola had to say. Immediately terminated on March 14th, 2007, the Department of Industrial Accidents then informed the state police of the evidence which then involved the Boston Municipal Court. The court issued a criminal complaint against Fiola in August of 2007.
Nationally recognized computer forensic analyst Tami Loehrs told the Herald Michael Fiola’s ordeal was “one of the most horrific cases I’ve seen.”
“As soon as you mention child pornography, everybody’s senses go out the window,” she said.
Loehrs found the laptop to be running a corrupted anti-virus program which allowed for a flood of spammers and crackers to hijack the laptop. Loehrs’ investigation for the defense was thorough which lasted a full month. Filled with images of incest and pre-teen porn not visible to the naked eye stored in a temporary “cache” folder, evidence showed that Fiola never downloaded the offending images.
DIA spokeswoman Linnea Walsh confirmed Fiola “was terminated,” but would not recognize the fact that Fiola was completely innocent. “We stand by our decision,” she told the Herald.
Fiola’s attorney Timothy Bradl can’t understand this response.
“Imagine this scenario: Your employer gives you a ticking time bomb full of child porn, and then you get fired, and then you get prosecuted as some kind of freak,” he railed.
“Anybody who has a work laptop, this could happen to,” he said. “Mike Fiola is a hunt-and-peck kind of computer guy. He can barely get on the Internet.”
Fiola, a self-described computer illiterate is taking the DIA to court for “destroying our lives.”
“Our lives have been hell,” said Fiola. “I hope to recover my reputation, but our friends all ran.”
The court officially dropped Fiola’s case Tuesday.
Apple Nailed with Nasty Trojan That Takes Over Macs Emailing, Passwords, and Even Takes Your Picture
Mac fanboys love to point out the fact that Windows users must waste immense systems resources to protect themselves from the millions of viruses, trojans, and spyware that live on the Internet. Even Apple makes light of this Windows malware problem in its commercial entitled Viruses in which Mac says to PC, “I run Mac OS 10 so I don’t have to worry about your spyware and viruses”. Sadly, however, Macs are no more protected from such attacks as is the Windows operating system. With holes and security vulnerabilities found in OS X and its default applications, such as Safari’s Zero-day exploit, Apple needs to start taking some defensive moves as it increases sales of its shinny machines to unsuspecting “switchers”.
Point in case, today SecureMac is reporting that the AppleScript.THT Trojan Horse runs hidden on a Mac and , “Allows a malicious user complete remote access to the system, can transmit system and user passwords, and can avoid detection by opening ports in the firewall and turning off system logging. Additionally, the AppleScript.THT Trojan horse can log keystrokes, take pictures with the built-in Apple iSight camera, take screenshots, and turn on file sharing. The Trojan horse exploits a recently discovered vulnerability with the Apple Remote Desktop Agent, which allows it to run as root.” Ouch! The trojan is distributed through web sites, iChat, and Limewire. This trojan only effects OS X 10.4 and 10.5.
There are a few ways to protect yourself from this trojan. One, do not download an AppleScript named ASthtv05 (60 KB in size), use sharing services such Limewire, or use a virus scanner such as SecureMac’s MacScan. SvenOnTech does not endorse this product; however, it would recommend it over Norton or McAfee as we have tested those on the Mac and they are horrible.
President of SecureMac, Nicholas Raba, cautions OS X users by telling SvenOnTech, “The increased number of threats, security advisories, and security updates is an indication that Mac users must pay attention to computer security issues. As Apple’s market share continues to grow, so will security research and hack attempts against OS X.”
Recommended reading: MacForensicsLab Malware document.