Security, Privacy, and Risks of Computers

CERT

• CERT Coordination Center
• DFN CERT (DE)

PGP

• The International PGP Home Page
• PGP DH vs. RSA FAQ
• PGP-Users Mailing List Home Page and Privacy Links also has a Keyserver Lookup Page
• PGP 2.6.2 hypertext documentation
• Pretty Good Privacy (UK)
• PGP -- Pretty Good Privacy
• PGP.net, DE (WWW interface for retrieving PGP keys)
• PGP for various systems
• GnuPG - The GNU Privacy Guard implements RFC 2440
• The Global Trust Register
• PGP Web of Trust Statistics
• DFN-PCA (german) Policy Certification Authority
• c't - Krypto-Kampagne (german)
• Kryptographie: Rechtliche Situation (german)

Security (Problems) with sendmail/e-mail

• *That* sendmail bug
• One security hole can be closed by using the sendmail restricted shell.
• SSMail for sendmail (Qualcomm Australia) [NEW 1999-01-05]

RISKs using computers/computer controlled systems

• RISK (discussing risks using computers)
• Why Cryptosystems Fail
• Hamburger Erklaerung fuer Verschluesselungsfreiheit
• Internet Privacy Coalition
• Anonymity and privacy on the Internet

Security Tools

• IP Filter - TCP/IP Packet Filtering package, The FreeBSD Diary -- Installing IP Filter 3.3.3
• Titan
• SSH (Secure SHell), OpenSSH (free implementation), Secure (remote) Shell (FAQ)
• OpenSSL: The Open Source toolkit for SSL/TLS
  • Analysis of the SSL 3.0 Protocol
  • Domestic Client SSL Connection Details
  • Dr S N Henson's Home Page (OpenSSL)
  • previous version:
    • SSLeay
    • SSLeay: SSLeay and SSLapps FAQ,
    • SSLeay Programmer Reference
  • Net::SSLeay
  • PKI-risks-ft
  • SPYRUS Fuels Growth of SSL Market with New Pricing Model
• Encrypting your Disks with Linux
• Cryptfs: A Stackable Vnode Level Encryption File System

Privacy/Security (WWW)

• Pascal's Header-Echo
• Handbook of Applied Cryptography
• chaffing + winnowing? [NEW 1999-02-11]
• ActiveX - Conceptional Failure of Security
• Uni-GH Siegen - Security-Server (german)
• National Security Institute (USA)
• Netscape Security Solutions
• Security Information

Security in Operating Systems (UNIX)

• OpenBSD Security [NEW 1999-09-20]
• Beginner's guide to armoring Solaris 2.6
• Security Hints for SunOS 4.1.3 from UnixWorld Online
• Stack Smashing Security Vulnerabilities

FAQ/Archives in Computer Security

• Internet Security FAQ (ISS) (USA)
  ISS X-Force Vulnerability Database
• Geek Girl's Bugtraq mailing list archives, Search Bugtraq Archives

Other Security stuff

• Counterpane Labs is the research part of Counterpane
• TC TrustCenter (german)
• The SNOW Home Page Steganography
• Trusted Information Systems
• centerline
• NIST Computer Security Resource Clearinghouse
• Security (Computer Technology) Einet
• SPY BBS
• Rutgers (USA)
• NIH Unix Security (USA)
• bsy's Security Related Net-pointers
• DIGITAL
• RSA
• SPY
• Datenschutz (AT)
• Secure Networks Incorporated
• Security Information
• Security Survey of Key Internet Hosts
• DigiCrime, Inc.
• The Ping o' Death Page