Talk about how to keep the last chastity of data

0x00 preface in this age of information explosion chrysanthemum. No matter who you are, there will be more than 10 accounts, including phone numbers, ID cards, QQ, email, Sister birthday, length...

However, now, just a brick-and-mortar employee has a few E data in his hand, and even knows what color of underpants you are wearing today. What makes us feel so embarrassed, I will not talk about any more about the recent online storage. That is definitely not to upload sensitive files. How should we deal with our files? In the computer? Oh, no. My uncle, who just checked the water meter, took the whole chassis away. Is this so that our data will go off the shelf? No, we have to take actions to protect our privacy!

 

The 0x01 Package introduces several packages below. It can be used in different occasions or cross-use (1) diaosi plan

There is no important information for me, such as the game accounts, QQ passwords, and common information. Although there is not much value, it is also afraid that some bear children or family members may go into disorder, but the most feared is those hackers, so the scheme is also very simple.

First, download a winhex package online. Then find a very common image. Note that it must be normal (1 )!

Use winhex to open the file and try to pull it down. Select a character next to it, right-click it, and choose add position ..., then, enter the privacy information you want to hide in the pop-up window, and click OK (tip: select the character after comparison to prevent the saved image from being damaged or cannot be opened)

Then, when you point to that character, the account and password will be displayed. Save the character and re-open the image. OK.

Password inside

Some friends will ask, "You can only hide data. If someone knows your method, your password will be leaked. ".

Indeed, we can change the posture. Here we will ask for the original winrar of the system. Right-click demo1, compress it, select the advanced selection box, and set the password. The key is here. We do not need to enter English or numbers because both can be cracked, although I am not sure that some Daniel can bypass password authentication for 0 days, it is feasible to enter Chinese. You can directly display the password and then enter Chinese directly, and then compress it.

This is even the basic protection of privacy, and finally pass this rar to your close friends, ask him to help you transfer it to his online disk storage is roughly OK. In this way, the image cannot be shot.

I think it is not safe. Use truecrypt to encrypt it again (tip: truecrypt). Here we will introduce two encryption software:

TrueCrypt is a free and open-source encryption software that supports Windows Vista, 7/XP, Mac OS X, Linux, and other operating systems. TrueCrypt can create a virtual disk on the hard disk without generating any files. Users can access the disk according to the drive letter. All files on the Virtual Disk are automatically encrypted and need to be accessed using a password. TrueCrypt provides a variety of encryption algorithms including: AES-256, Blowfish (448-bit key), CAST5, Serpent, Triple DES, and Twofish, other features include FAT32 and NTFS partitions, hidden volume labels, and hot key startup.

PGP (Pretty Good Privacy) is a mail encryption software based on the RSA public key encryption system. It can be used to keep the email confidential to prevent unauthorized users from reading the email. It can also add a digital signature to the email so that the recipient can confirm the sender of the email and be sure that the email has not been tampered. It can provide a secure communication method, without any confidential channels used to transmit keys. It adopts a combination of RSA and traditional encryption algorithms, which are used for the Digest algorithm of digital signatures, pre-encryption compression, and so on. It also has a good man-machine engineering design. It has powerful functions and a fast speed. And its source code is free of charge.

(2) technical Daniel package

For many Daniel, there must be a lot of his own privacy, and it is a heavyweight, excluding the three dimensions and length. The most important thing is what a variety of POC and bank passwords are, except for the above encryption, we have no choice? No! When our water meter burst, the chassis would be taken together, and sometimes even the display would be taken together. However, the only thing we can do is a vro,

Solution 1: directly write the password into the vro

Find a vrotelnet that supports telnet, log in with the root permission, upload the modified rar, and then hide the directory .... (large files are not supported, unless you are a custom vro.) The premise is that the file is directly written in the FLASH flash FLASH memory of the vro. Therefore, the flash FLASH must be large... so that, you need to brush a simplified version of the firmware, for example, if your FLASH is 8 Mb, you can only brush a 4 m simplified version, put it in JFFS, and this JFFS can only be accessed by root... if the password cannot be cracked, The Flash will disappear .... to protect data. You only need to telnet to download the SDK.

Solution 2: attach a hard disk or USB flash disk to a vro

We directly recommend that you use an external hard disk or USB flash drive to store data pants. Here I will use the tomato router of a unix-based system for Demonstration: P

(Tip: Tomato DualWAN enables the routers that can fl Tomato or DD-WRT firmware from the original single WAN port to dual WAN port, and this does not need to add any hardware on the router, just click the Tomato DualWAN firmware. After the Tomato DualWAN is used, the second WAN port can be connected to a wired network or a wireless network. The dual-WAN mode supports bandwidth merging or smart routing.

Note: To work in dual-WAN mode, you must have two lines (either your own line + others' wireless networks) or two broadband accounts, otherwise, it cannot work in dual-WAN mode.

In addition to basic functions of common routers, the router with Tomato DualWAN also provides the following features:

Bandwidth merge/Server Load balancer can merge the bandwidth of the two lines to achieve fast download of smart routing, automatically select the optimal line according to the ISP of the target IP address, to speed up user access QoS/IP speed limit, reasonable Allocation of network bandwidth device traffic for real-time viewing, understanding the traffic status of each computer ARP binding, can prevent illegal users from using network IPID to prevent China Telecom Network Vanguard VPN (PPTP) servers and clients, allows offices distributed in different locations to form a LAN that supports Apple (Mac OS X) NAT-PMP (another UPnP) BT offline download feature (the router needs a USB Interface ), before you go to bed or when you go to work, ask the router to help you download your favorite games or movies, instead of driving a computer Samba server (the router needs a USB Interface) to provide the file sharing function, in order to play the movie FTP server downloaded by the vro directly on the PC (the vro requires a USB Interface) 3G Internet access function (the vro requires a USB Interface ), after a 3G network card or smart phone card with a USB interface is inserted, the vro3g becomes a 3G router. When a team is on a business trip, multiple people share the Internet, making it easy to publish an online notification function.

Of course, we will not introduce his dualwan function. The key point is that it supports samba, ftp, and offline download. You can buy

A vro with tomato is used to connect to the usb chrysanthemum port behind the vro with a mobile hard disk. The vro is opened and a 5 V cable is drawn from the power cord as the power supply of the mobile hard disk (of course, or external power supply ). A small ftp server.

The following is a tutorial on using a vro as a web server or a Server Load balancer. If you are interested, you can check it out.

The portal is installed later.

Transmission WEB controller (address tutorial)

Http://code.google.com/p/transmission-control/

Download WEB Controller
Install external Transmission
Path \ sda1 \ opt \ share \ transmission \ web
Decompress the downloaded file and copy it in.

For how to install N16 settings such as external Transmission, see
Http://bbs.dualwan.cn/thread-317811-1-1.html

If you have installed
DLNA (minidlna ushare)
Bt
Aria2c
Goagent agent
DNS pollution prevention

You can directly set it on usb

Run the script after mounting
To avoid entering commands and saving NVRAM space.

/tmp/mnt/sda1/aria2/autorun.sh

Otherwise, modify the file!

After the server is set up, turn on the wifi of your main router, hide the SSID, and disable WPS (to prevent some brains from sniffing and cracking the PIN code every day ), step 2: Hide your server in a corner that someone else cannot find (pay attention to heat dissipation )... then add the WIFI of the primary router and set the secondary router to WDS. In this way, the two machines form the Intranet. We only need to build an FTP Server on our computer with the Quick Easy FTP Server, we can directly control Transmission to download various data on our computer for backup. This will prevent the pipe from popping up... the computer is taken away, and the data is lost...

A little messy? Let me draw a topology.

(3) Gao Fu Shuai Da Niu package

For Gao fushuai, money is not a problem. The important problem is that these Daniel has too much data, and it is impossible to discuss it with the above data.

You will say this is so troublesome... of course you can also buy a Raspberry Pi directly.

What's important is that he only has one business card that is big.

He uses the SD card to start the system, and uses the USB port to connect to the mobile hard disk... to back up data directly.

Startup diagram of Raspberry Pi on the lower side

After the platform is set up, the FTPserver of the host is used for file transfer.

If you think Raspberry Pi is too difficult .... then you can only directly upload the NAS .... although it is a little big... (tip: NAS is defined as a special dedicated data storage server, it includes storage devices such as disk arrays, CD/DVD drives, tape drives, or removable storage media, and embedded system software to provide cross-platform file sharing. NAS usually occupies its own node on a LAN, without the intervention of the application server, allowing users to access data on the network. In this configuration, NAS centrally manages and processes all data on the network, and detaches the load from the application or Enterprise Server, effectively reducing the total cost of ownership and protecting users' investment .)

The disadvantage is that NAS is a little big, but Gao fushuai thinks Raspberry Pi's external hard drive is too embarrassing. I can only recommend a small NAS, A few friends bought one together in the last few weeks... the volume is quite small. I also sent a 1 TB hard disk with a Wi-Fi module in it, saving a router. Model:

BUFFALO baafaro LS-V1.0TL network storage 1 TB hard drive

Let's take a few pictures.

It looks similar to the built-in wifi in xbox 360, and 1 TB hard drive, also through the Intranet to manage data, can be placed at the bottom of the bed or something... the rest of the work is ready for use.

0x02 to sum up, how to protect data depends only on what you are using. If the water pipe repair Foreman asks you to tell where the data is hidden, you must also say it... Therefore, do not do bad things. You can just use it to launch a plane at ordinary times. It is also beneficial to take action films from Europe, America, Japan, and South Korea next time. Don't think about taking off others' underpants all day !!!

This is the case... I am a high school dog, ready to break the network sprint for the college entrance examination, hope to have a good score