Privacy through Add-ons – LeetKey

While at work the other day, I wanted to send a friend an email but I didn’t want it going through the corporate systems. It used to be that just using webmail was generally enough to give you this protection (using corporate email is obviously out of the question), but in these days of increasing surveillance and paranoia over Data Leakage I know that every packet is being inspected at the gateway for certain text patterns.

I could have used a webmail provider that allows HTTPS connections I guess, such as Gmail (and been sure to check the certificate) but I wanted more than that

Now there are plenty of solutions if you are happy installing some encryption software on your computer but I wanted something that wouldn’t alert people who were looking at my add/remove program list. For example I could use FireGPG but that needs you to have GPG installed and have copies of your public and private keys. Freenigma (new ownership BTW) is similar in that it requires public/private keys to have been setup in advance and didnt quite fit what I needed

Some may suggest Hushmail but things like this are nearly always blocked at the proxy when you work at a large company

All I wanted to be able to do was a little quick (and strong) symmetric encryption and simply text the password to my friend. I briefly considered coding something but that is way beyond my skill levels and I realised that if I wanted it, then surely Im not the only one who did. I continued my search and eventually found the solution in a not particularly obvious Firefox add-on – LeetKey

LeetKey lets you select some text on a web page and convert it into (and back from) Elite Speak,but it doesn’t end there. You can also do other conversions/transforms with it – such as Morse code, base 64 etc etc. It also lets you do 128 bit AES en/decryption ! Fantastic, that is exactly what i was looking for. So now I can have nothing more than a Firefox add-on and I can send private emails to people on the fly.

Why not install it and use the AES Decrypt function with the password monkey to decrypt the following text

Tez4dx4BITAhITAhLVHp2QXdITEzIcy+ffJYvkHEzectITAhXdBaQlGVbROAZ50XE4ZVLcO6c7/R
fRt4a/LfsJW2ll0ttU0hMTIhsG4j06o7rMxFJSX9oy1khtpfhsuZ4yWbWWBb/rnTLa8hNDUhZemZ
btKlJEZoyXJ8vpItD+kG6PzAVymrPfk+7WtYgC0UWOk5+u4hMTIhe2LUuGNhwKQYLVXhyg8Yj8Sf
A0quyQOnfiQt7RxTfLKx0kRUQsenITkhuq0hMTIhLXWRdVwoszcvTKW6eHZKITEzIVctuo4I5Lc0
J03k2dR1zmIHTC3ALuKJn5KIlPiZVSohMTAhjAavLbBCp7hwJhhjxKQW2UWSKWQtVeKhicPd4bIv
lq5RkSE5IR/aLViFkhgjoosFhtnqNjjGPQgtLBw7ITQ1IXH7PJbPNcT5f/U49S2nD9t1z194Mtd9
uG2m4PkrLf7bBPBtvi8BP7Te2LKx6LotFRtQw6NmGdXfa+0uU0udwy3ubptSITkhBtyWHfQ3ciO2
yW0ta9VHnFdUenKSDpl4r5InIy0hMzMhT1839g7XHb2HVUr+e2UPLb60RA51buqYf/5j1xQhMzMh
ziE5IS06RyDjd9hNbV7sfVFN6WabLfgbc9OaJJjAY5qcatXe1nUtcGLnOzcxnBNUa3iJi7tBVi33
2SA1tI6w0M1VnwL1aCT7LepdnUHXvI1RTZad9mT7bkstNnSfOK3+cz8eHSExMSF78snObi1VXqiq
hHHm0+mfQBv+EP/GLSUo8HxR1Ut4Ht0hOSHDE90C4C1MZSExMyE+OcOpqjfxIoCiITEwIao4Lf+R
gCoSKoqK9mlMKzjndWMt7ei6I/dN47eLbRmlpGiMZy23vjzLJFPnYv1APRF9ITAh8CExMyEtHY8D
h6MRITE2MCH9YoyLv8DoQkYtaPCiFhYrqmhdwq2UKowXFC2+sF/VGCxzLI9vl6ObITEzIY/9Lf6I
ITE2MCGE7uZvAiExMSEmcgY5uNj3LUk4w02JRyExMyHvE/iVjbSQVx8tlZzqJwTe0KHaasoCDtFZ
ry1kITAhiUWxBa5S9GerK3PNMaktOP4hMTEh7fyzB00TSkm7iyExNjAhUIAtQMwPZDDlXUpxnh+U
ho6ZwC1ahoTpSPYcUvVWaJ0hNDUhq6aaLfBtLrksE/f6KeAuifjXHZgtMQhDLMlH8tvDbF68SxXr
wi27ZEnYu4cuKwWusUOHgknTLRwbbGFG8iDjdNDfMDfJkEItq+vW2iNkITMzITuvQv1+kRDhOy0+
8GnQFUfcyGH7oiExMCHv2jgdLc2ZcRbC6XBbxDIvXyf/twMtrzyreZPg+ONidy6l2hH8zS1S++lY
sl7n4G5q7ViRxyk+LWohMzMhn5DX/Q==

Have Fun, OSG

Netifera

I have to say I am really enjoying Netifera at the moment. Its a security tool that has most of what you need to do, like ports scan and look ups all in one tool. I think this is going to be one of those few times that someone decides to create a framework to base their tool in and it actually works. One of the reasons is that its plug-in based and it comes with a good range of them built in from day one.

Its written in Java and so I guess that means it is available on a wide range of platforms. They only list Linux and Mac at the moment but I don’t see why, given its Java based, it cant spread further.

Check it out for yourself – its available either with or without a bundled java environment – http://netifera.com