You are here

Security For Portable Apps Traveling (help!)

8 posts / 0 new
Last post
Flatlander
Offline
Last seen: 17 years 1 month ago
Joined: 2007-08-26 20:36
Security For Portable Apps Traveling (help!)

I'm new to PortableApps and very excited to find such a well-organized community of easily useable apps -- thanks to the developers and supporters!

The only questions I can't seem to answer easily are those involving security. I've been searching the forums with little success, so forgive me if my questions have already been answered. (If they have, please give links -- and please consider a Guide or something so that new users can find this info easily!)

I will be traveling in India, notorious for sketchy machines. I want to ensure some level of protection against spyware/keylogging/other malacious crap.

1. Does using PortableApps offer any basic security against keylog/spyware?

2. Is there any consensus here about what "portable" apps are best to protect against these keylog/spyware?

Thank you for any help!

Zach Thibeau
Zach Thibeau's picture
Offline
Last seen: 1 year 11 months ago
Developer
Joined: 2006-05-26 12:08
hmmmm

Well name some open-source ones and maybe John Will do up them
That be a nice addition I would think
-----------------------------
"I don't fear Computers. I fear the lack of them" Isaac Asimov
My Personal Blog in the making at a new address thibeaz.com Biggrin

your friendly neighbourhood moderator Zach Thibeau

Aciago
Aciago's picture
Offline
Last seen: 11 months 2 weeks ago
Joined: 2007-01-24 14:23
well

1. try smithteach's PAM mod with encryption
2. use clamwin portable
3. search in www.portablefreeware.com for another security stuff like spyware terminator, spybot search & destroy, etc...
4. You can also trying search here: http://standalone.atspace.org/index.html

And there is an extension for Firefox to prevent keylogers, I use it, but it ask you to install in every new machine you try to run your browser... search in the security area of the firefox extensions because I don't remember de name at this early moment in the morning... Blum

------------------
If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report Biggrin

If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report Biggrin

Flatlander
Offline
Last seen: 17 years 1 month ago
Joined: 2007-08-26 20:36
KeyScrambler

Thanks Aciago, KeyScrambler is the name of that extension I believe, and according to the creators at QFX Software:

"Sorry, KeyScrambler isn't yet compatible with Firefox portable. The reason for this is that the encryption module of KeyScrambler is a kernel driver, which must be installed on each computer that you use. And to install it, you have to have administrator rights on that computer. So right now KeyScrambler isn't well suited for portable use. We're working on a solution to this limitation since a lot of users have asked about using KeyScrambler on a USB key."

I'll continue looking into the other options everyone has suggested, and post back what I find. Hopefully John can integrate something in the future. Thanks All!

Aciago
Aciago's picture
Offline
Last seen: 11 months 2 weeks ago
Joined: 2007-01-24 14:23
That is...

The App I was thiking about... but I have it in my PFirefox and just ask me to install each time a run it in a different PC... with no problem at all... maybe I have been using just computers with access right (and with that app tha keeps everything like the first run when restart).

If a packet hits a pocket on a socket on a port,
and the bus is interrupted as a very last resort,
and the address of the memory makes your floppy disk abort,
then the socket packet pocket has an error to report Biggrin

RMB Fixed
Offline
Last seen: 14 years 8 months ago
Joined: 2006-10-24 10:30
..

1: No, not really. The way windows works you are owned
the second you insert your flash-drive if the host it set up
in a malicious way. Just an example of the risks you are facing :

"USBDumper is a cute little utility that silently copies the contents of an inserted USB drive onto the PC. The idea is that you install this piece of software on your computer, or on a public PC, and then you collect the files -- some of them personal and confidential -- from anyone who plugs their USB drive into that computer.
http://www.schneier.com/blog/archives/2006/08/usbdumper_1.html "
It can even be set up to e-mail the contents of your drive to the "hacker" ..

2 : Truecrypt is a good encryption-program and can protect your sensitive data,
even against USB-dumper, as long as you DO NOT mount the encrypted disk on a malicious host . Unfortunately it requires admin-rights.
7zip can encrypt your files with strong encryption and does not require admin-rights but to use your files you will need to extract and decrypt them !

KeePass is a password-safe that keeps all your account-PW's
in a encrypted (portable) data-base.
You can also attach files and have them encrypted and stored within the data-base.
You can copy/paste your login-info from KeePass and that might protect you against
primitive key-loggers but probably not against machines with monitoring-software..

Portable ClamAV can scan the host but it is doubtful if you will be able to remove
the "virus" from the host if you run under a limited account..
still, A LOT better than nothing .

I think the best strategy is to bring 2 flash-drives :
One that doesn't have any personal and/or sensitive data,
containing ClamAV and other security-tools and one that holds your sensitive data: you then use the first drive to scan the host and
if you decide to take the risk after scanning you then use the second drive ..
But there is no guarantees and this will most likely not protect you against "well-written" software or hardware-keyloggers ..

Bensawsome
Offline
Last seen: 2 years 7 months ago
Joined: 2006-04-22 19:27
Well that is a nasty little utility.

Well that is a nasty little utility.
"USBDumper is a cute little utility that silently copies the contents of an inserted USB drive onto the PC. The idea is that you install this piece of software on your computer, or on a public PC, and then you collect the files -- some of them personal and confidential -- from anyone who plugs their USB drive into that computer.
http://www.schneier.com/blog/archives/2006/08/usbdumper_1.html "
It can even be set up to e-mail the contents of your drive to the "hacker" ..

-----------------------------------------------------
Bensawsome AKA BJ
:My Website (Still under development):

 iLike Macs, iPwn, However you put it... Apple is better ^_^ 
"Claiming that your operating system is the best in the world because more people use it is like saying McDonalds makes the best food in the world..."

Bahamut
Bahamut's picture
Offline
Last seen: 12 years 9 months ago
Joined: 2006-04-07 08:44
If you don't trust that the

If you don't trust that the machine will not infect your drive, either prepare to deal with the possible infection of other machines (such as your own) or simply do not plug your drive into the machine. If you don't trust that the machine will not harvest information, either make sure nothing on it is private or don't plug your drive in. Remember, you only have control with your own machine. Plugging in your drive does not give you control.

Vintage!

Log in or register to post comments