DOCSLIB.ORG

The Complete Guide to Improving Your Online Security and Defending Your Privacy Written by James Frew

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text

Load more

! Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! The Complete Guide to Improving Your Online Security and Defending Your Privacy Written by James Frew Published July 2017. Read the original article here: http://www.makeuseof.com/tag/improve-online-security- defend-privacy/ This ebook is the intellectual property of MakeUseOf. It must only be published in its original form. Using parts or republishing altered parts of this ebook is prohibited without permission from MakeUseOf.com. Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! Table of contents Web Browsers 4 The Ever-Present Threat of Tracking 4 A Focus on Privacy 5 Browser Extensions 6 Email Providers 7 Privacy-Conscious Search Engines 8 Virtual Private Networks 9 Password Managers 9 Operating Systems 11 Going Mobile 12 Secure Messaging 13 Cloud Storage 13 Encryption Tools 15 Defenders of Data 16 Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! In our always-on society we generate a lot of data, with some estimates suggesting 28,875 GB per second. With this massive trove of data we divulge a huge amount of personal information. From our cloud-based photo collection, to what websites we visit, it’s getting easier for malicious attackers to do the digital equivalent of rummaging through our garbage. Whether it’s Facebook selling your data to advertisers, overreaching government surveillance, or cyber criminals looking to make some fast money — there are a lot of people out there who want your data. Sadly, this invasion of your privacy doesn’t benefit you at all. If you want to build up your defenses and protect yourself online, let us guide you through how to improve your security and safeguard your privacy. Web Browsers Web browsers act as our window into the great wonderland of the internet. Nearly everything we do online, from a quick Google search to online banking, happens through the browser. This ease of use makes it incredibly convenient for us, but also means our browser knows a lot about what we get up to online. In fact, your browser’s history may be one of the most invasive databases ever created. There once was a time that your history would only be available locally on your computer. Most modern browsers now allow you to sign in to enable settings to sync to the cloud and between devices. This is especially true of Chrome, where all the information is stored in your Google account. History syncing is turned on by default when signed into Chrome, but you can head into Settings to turn it off. The Ever-Present Threat of Tracking Most of us are aware that our online activity is monitored and stored by the browser. What you may not know is just how much information about you is given away to every website you visit. We compared your browser to a leaky tap as it will often give away a large stream of information to any website that wants it. Websites like What Every Browser Knows About You (WEBKAY) can give you a window into this world of background data sharing. Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! Your location, hardware and software setup, internet connection, and social media accounts are all up for grabs. Some of this data allows for the smooth operation of the internet, while other parts — like your social media accounts — are there to scrape data for advertisers provide you with personalized content. Your smartphone browser can even access your phone’s gyroscope to decide if your phone is in your hand or on the table. A Focus on Privacy Microsoft was one of the first to popularize Private Browsing mode after adding the feature to an Internet Explorer 8 beta. The main advantage to the Private Browsing mode is that anything you do is only stored just for that session. As soon as you close the window, all traces of it are removed from your computer. It allows you to quickly and easily browse the web without everything being stored in the history and log into multiple accounts simultaneously. It is widely considered one of the easiest ways to protect yourself when browsing on a shared computer. As it turns out though, Private Browsing isn’t always private. Watch the YouTube video here: 8 Second Demos - Private Browsing Google’s entire business is based on selling your information to advertisers. So it shouldn’t be a surprise that their popular Chrome web browser is often seen as a means to that end. Supposing that you want to switch from Chrome, the open source Firefox is an excellent choice. Mozilla even developed an entirely privacy focused version for mobile called Firefox Focus. If that isn’t quite private enough for you, then there are choices that offer even greater anonymity. Remember though that total anonymity on the internet is almost impossible — no matter what the developers claim. Recommendations • Firefox — Mozilla’s Firefox rose from the ashes of the once-beloved Netscape Navigator and now ranks as the second most popular web browser. Firefox offers opportunities for customization, while also standing by its commitment to privacy. Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! • Opera — Opera is based on the same open source Chromium browser as Google Chrome, but makes privacy a priority. Only a single click is needed to erase all browsing data, and security badge details every sites credentials. Opera even offers a free, built-in VPN. • Tor Browser — Short for The Onion Router, the Tor browser (based on Firefox) connects you to a chain of Tor nodes. Your traffic is encrypted and sent through the chain before ending up at its destination. This is done in an attempt to obscure where it came from. Tor is also your gateway to the Deep Web. Browser Extensions Chrome and Firefox have become the dominant browsers in part because of their ability to customize and improve the default experience with Extensions. The Chrome Web Store and Mozilla Add-Ons collection allow developers to submit extensions that you can easily download and add to your browser. Firefox even lets you take your extensions on-the-go with their smartphone apps. As Chrome is the world’s most used browser, it has a large collection of security extensions. Firefox also has a healthy range, as the open source movement is naturally disposed towards privacy and security. Extensions like Disconnect, HTTPS Everywhere, Ghostery, and Privacy Badger are even cross-platform. One advantage that extensions have over native applications is that they aren’t usually blocked by workplace management systems. This means you are able to freely install security and privacy focused extensions — letting you browse safely and privately wherever you are. Recommendations • HTTPS Everywhere (Chrome, Firefox, Opera) — If HTTPS is in the address bar, then the data sent between you and the website is encrypted. HTTPS Everywhere adds this protection to all websites. Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! • Privacy Badger (Chrome, Firefox, Opera) — Developed by privacy campaigners the Electronic Frontier Foundation (EFF), Privacy Badger blocks spying ads and invisible trackers. • Web of Trust — The Web of Trust extension adds a small symbol next to any website that ranks its trustworthiness. They were found to be abusing their position, but have since taken steps to remedy this. Email Providers We think of email as a relatively recent innovation, but the seeds were first sown over 50 years ago. As computers became more commonplace throughout the 1980s, email turned into an essential part of our work and personal lives. Some estimates even say that we collectively send 205 billion emails every day. With so much information being sent around the world, it’s no wonder that criminals and governments are only too eager to peer inside our global mailbox. Recently, concerns over government surveillance have become increasingly commonplace. Encryption is your best line of defence against unwanted eavesdropping. By scrambling your emails, only parties with the encryption key can decrypt your messages. The end-to-end encryption (E2EE) is generally considered the most secure method. Only you and the recipient hold the encryption key, so neither the server or any third party can decrypt your messages. Unfortunately, a mix of technical and commercial reasons mean that most mainstream email providers do not offer E2EE. Fortunately there are at least a few that do have your privacy in mind, like ProtonMail. Developed by researchers at CERN, the service uses E2EE, and disables IP logging by default. Their servers are based in Switzerland under strict privacy laws, and the software is even open source. At present ProtonMail can only be accessed through their website or mobile apps. Despite its privacy-enhancing advantages, the E2EE prevents you adding ProtonMail to Outlook or other desktop clients. If finding a secure email provider sounds like too much hassle then it may be worth considering just getting rid of email altogether. Copyright © 2017 MakeUseOf. All Rights Reserved ®. ! Recommendations • ProtonMail (Android, iOS, Web) — Based in Switzerland and developed by CERN researchers, ProtonMail puts privacy and security front and centre. They cemented this reputation by recently launching a free VPN. • TutaNota (Android, iOS, Web) — TutaNota offers a similar service to ProtonMail, except their servers are based in Germany. Their platform is open source, and offers E2EE. • MailFence (Web) — MailFence distinguishes itself from the competition by offering a full suite of productivity tools alongside its secure mail service. They demonstrate their commitment to privacy by donating 15 percent of their income to the EEF and EDRi. Privacy-Conscious Search Engines First there was Yahoo, AltaVista, and Ask Jeeves. Then along came Google and they proceeded to dominate the market. Search became synonymous with Google — so much so that their name became a verb.
Recommended publications
  • Secure Data Sharing in the Cloud

    Secure Data Sharing in the Cloud

    Eivind Nordal Gran Secure data sharing in the cloud Eivind Nordal Gran Eivind Nordal Master’s thesis in Communication Technology Supervisor: Colin Alexander Boyd, Gareth Thomas Davies & Clementine Gritti June 2019 Master’s thesis Master’s Secure data sharing in the cloud data Secure NTNU Engineering Communication Technology Communication Department of Information Security and Department of Information Faculty of Information Technology and Electrical Technology of Information Faculty Norwegian University of Science and Technology of Science University Norwegian Eivind Nordal Gran Secure data sharing in the cloud Master’s thesis in Communication Technology Supervisor: Colin Alexander Boyd, Gareth Thomas Davies & Clementine Gritti June 2019 Norwegian University of Science and Technology Faculty of Information Technology and Electrical Engineering Department of Information Security and Communication Technology Problem description: Data sharing using cloud platforms has become increasingly more popular over the last few years. With the increase in use comes a heightened demand for security and privacy. This project will conduct a thorough study of a key transport proto- col developed at NTNU, which targets strong security as its preeminent property, including a form of forward secrecy. More specifically, it will investigate how this escalation in security level affects the performance and usability of the protocol. How will the new protocol designed with security as its primary concern compare against other already established schemes when it comes to efficiency and practicality? Abstract Cloud sharing security is an important topic in today’s society. The majority of the most common cloud sharing solutions require that the user trust the Cloud Service Provider (CSP) to protect and conceal uploaded data.
  • Photos Copied" Box

    Photos Copied" Box

    Our photos have never been as scattered as they are now... Do you know where your photos are? Digital Photo Roundup Checklist www.theswedishorganizer.com Online Storage Edition Let's Play Digital Photo Roundup! Congrats on making the decision to start organizing your digital photos! I know the task can seem daunting, so hopefully this handy checklist will help get your moving in the right direction. LET'S ORGANIZE! To start organizing your digital photos, you must first gather them all into one place, so that you'll be able to sort and edit your collection. Use this checklist to document your family's online storage accounts (i.e. where you have photos saved online), and whether they are copied onto your Master hub (the place where you are saving EVERYTHING). It'll make the gathering process a whole lot easier if you keep a record of what you have already copied and what is still to be done. HERE'S HOW The services in this checklist are categorized, so that you only need to print out what applies to you. If you have an account with the service listed, simply check the "Have Account" box. When you have copied all the photos, check the "Photos Copied" box. Enter your login credentials under the line between the boxes for easy retrieval. If you don't see your favorite service on the list, just add it to one of the blank lines provided after each category. Once you are done, you should find yourself with all your digital images in ONE place, and when you do, check back on the blog for tools to help you with the next step in the organizing process.
  • Crypto Projects That Might Not Suck

    Crypto Projects That Might Not Suck

    Crypto Projects that Might not Suck Steve Weis PrivateCore ! http://bit.ly/CryptoMightNotSuck #CryptoMightNotSuck Today’s Talk ! • Goal was to learn about new projects and who is working on them. ! • Projects marked with ☢ are experimental or are relatively new. ! • Tried to cite project owners or main contributors; sorry for omissions. ! Methodology • Unscientific survey of projects from Twitter and mailing lists ! • Excluded closed source projects & crypto currencies ! • Stats: • 1300 pageviews on submission form • 110 total nominations • 89 unique nominations • 32 mentioned today The People’s Choice • Open Whisper Systems: https://whispersystems.org/ • Moxie Marlinspike (@moxie) & open source community • Acquired by Twitter 2011 ! • TextSecure: Encrypt your texts and chat messages for Android • OTP-like forward security & Axolotl key racheting by @trevp__ • https://github.com/whispersystems/textsecure/ • RedPhone: Secure calling app for Android • ZRTP for key agreement, SRTP for call encryption • https://github.com/whispersystems/redphone/ Honorable Mention • ☢ Networking and Crypto Library (NaCl): http://nacl.cr.yp.to/ • Easy to use, high speed XSalsa20, Poly1305, Curve25519, etc • No dynamic memory allocation or data-dependent branches • DJ Bernstein (@hashbreaker), Tanja Lange (@hyperelliptic), Peter Schwabe (@cryptojedi) ! • ☢ libsodium: https://github.com/jedisct1/libsodium • Portable, cross-compatible NaCL • OpenDNS & Frank Denis (@jedisct1) The Old Standbys • Gnu Privacy Guard (GPG): https://www.gnupg.org/ • OpenSSH: http://www.openssh.com/
  • Full-Text (PDF)

    Full-Text (PDF)

    Vol. 10(14), pp. 2043-2050, 23 July, 2015 DOI: 10.5897/ERR2015.2297 Article Number: 6B548DF54295 Educational Research and Reviews ISSN 1990-3839 Copyright © 2015 Author(s) retain the copyright of this article http://www.academicjournals.org/ERR Full Length Research Paper Computer education and instructional technology teacher trainees’ opinions about cloud computing technology Ay şen Karamete Balikesir University, Necatibey Education Faculty, Department of Computer Education and Instructional Technology, Turkey. Received 15 May, 2015; Accepted 13 July, 2015 This study aims to show the present conditions about the usage of cloud computing in the department of Computer Education and Instructional Technology (CEIT) amongst teacher trainees in School of Necatibey Education, Balikesir University, Turkey. In this study, a questionnaire with open-ended questions was used. 17 CEIT teacher trainees participated in the study. The aim of this qualitative study was to determine trends about cloud technology. The cloud technology under study included “Dropbox”, “SpiderOak”, “Google Drive”, “IDrive”, “pCloud”, “OpenDrive”, “Bitcasa”, “OneDrive”, “Tresorit”, “Box” and “Yandex.Disk. The CEIT teacher trainees’ opinions about cloud storage and its purposes; their opinions about types of cloud storage and the level of importance of cloud storage were investigated. The reliability and validity were taken. The advantages and disadvantages of cloud computing were examined. The study found that CEIT teacher trainees’ had used cloud storages such as Dropbox
  • Encryption and Anonymity Follow-Up Report

    Encryption and Anonymity Follow-Up Report

    PALAIS DES NATIONS • 1211 GENEVA 10, SWITZERLAND www.ohchr.org • TEL: +41 22 917 9000 • FAX: +41 22 917 9008 • E-MAIL: [email protected] Mandate of the Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression Research Paper 1/2018 June 2018 Encryption and Anonymity follow-up report Contents I. INTRODUCTION ............................................................................................................................... 2 II. TRENDS IN STATE RESTRICTIONS ON ENCRYPTION AND ANONYMITY .............................. 3 A. An Overview of State Obligations ........................................................................................................... 3 B. State practice: examples and concerns ..................................................................................................... 4 (i) Bans on Use and Dissemination of Encryption Tools ......................................................................... 5 (ii) Licensing and Registration Requirements .......................................................................................... 5 (iii) Intentional Weakening of Encryption ................................................................................................ 5 (iv) Government Hacking ......................................................................................................................... 7 (v) Mandatory Data Localization and Key Escrows ................................................................................. 8 (vi)
  • Security Analysis of the Signal Protocol Student: Bc

    Security Analysis of the Signal Protocol Student: Bc

    ASSIGNMENT OF MASTER’S THESIS Title: Security Analysis of the Signal Protocol Student: Bc. Jan Rubín Supervisor: Ing. Josef Kokeš Study Programme: Informatics Study Branch: Computer Security Department: Department of Computer Systems Validity: Until the end of summer semester 2018/19 Instructions 1) Research the current instant messaging protocols, describe their properties, with a particular focus on security. 2) Describe the Signal protocol in detail, its usage, structure, and functionality. 3) Select parts of the protocol with a potential for security vulnerabilities. 4) Analyze these parts, particularly the adherence of their code to their documentation. 5) Discuss your findings. Formulate recommendations for the users. References Will be provided by the supervisor. prof. Ing. Róbert Lórencz, CSc. doc. RNDr. Ing. Marcel Jiřina, Ph.D. Head of Department Dean Prague January 27, 2018 Czech Technical University in Prague Faculty of Information Technology Department of Computer Systems Master’s thesis Security Analysis of the Signal Protocol Bc. Jan Rub´ın Supervisor: Ing. Josef Kokeˇs 1st May 2018 Acknowledgements First and foremost, I would like to express my sincere gratitude to my thesis supervisor, Ing. Josef Kokeˇs,for his guidance, engagement, extensive know- ledge, and willingness to meet at our countless consultations. I would also like to thank my brother, Tom´aˇsRub´ın,for proofreading my thesis. I cannot express enough gratitude towards my parents, Lenka and Jaroslav Rub´ınovi, who supported me both morally and financially through my whole studies. Last but not least, this thesis would not be possible without Anna who re- lentlessly supported me when I needed it most. Declaration I hereby declare that the presented thesis is my own work and that I have cited all sources of information in accordance with the Guideline for adhering to ethical principles when elaborating an academic final thesis.
  • Data Protection and Collaboration in Cloud Storage

    Data Protection and Collaboration in Cloud Storage

    Technical Report 1210 Charting a Security Landscape in the Clouds: Data Protection and Collaboration in Cloud Storage G. Itkis B.H. Kaiser J.E. Coll W.W. Smith R.K. Cunningham 7 July 2016 Lincoln Laboratory MASSACHUSETTS INSTITUTE OF TECHNOLOGY LEXINGTON, MASSACHUSETTS This material is based on work supported by the Department of Homeland Security under Air Force Contract No. FA8721-05-C-0002 and/or FA8702-15-D-0001. Approved for public release: distribution unlimited. This report is the result of studies performed at Lincoln Laboratory, a federally funded research and development center operated by Massachusetts Institute of Technology. This material is based on work supported by the Department of Homeland Security under Air Force Contract No. FA8721-05- C-0002 and/or FA8702-15-D-0001. Any opinions, findings and conclusions or recommendations expressed in this material are those of the authors and do not necessarily reflect the views of Department of Homeland Security. © 2016 MASSACHUSETTS INSTITUTE OF TECHNOLOGY Delivered to the U.S. Government with Unlimited Rights, as defined in DFARS Part 252.227-7013 or 7014 (Feb 2014). Notwithstanding any copyright notice, U.S. Government rights in this work are defined by DFARS 252.227-7013 or DFARS 252.227-7014 as detailed above. Use of this work other than as specifically authorized by the U.S. Government may violate any copyrights that exist in this work. Massachusetts Institute of Technology Lincoln Laboratory Charting a Security Landscape in the Clouds: Data Protection and Collaboration in Cloud Storage G. Itkis B. Kaiser J. Coll W. Smith R.
  • Is Bob Sending Mixed Signals?

    Is Bob Sending Mixed Signals?

    Is Bob Sending Mixed Signals? Michael Schliep Ian Kariniemi Nicholas Hopper University of Minnesota University of Minnesota University of Minnesota [email protected] [email protected] [email protected] ABSTRACT Demand for end-to-end secure messaging has been growing rapidly and companies have responded by releasing applications that imple- ment end-to-end secure messaging protocols. Signal and protocols based on Signal dominate the secure messaging applications. In this work we analyze conversational security properties provided by the Signal Android application against a variety of real world ad- versaries. We identify vulnerabilities that allow the Signal server to learn the contents of attachments, undetectably re-order and drop messages, and add and drop participants from group conversations. We then perform proof-of-concept attacks against the application to demonstrate the practicality of these vulnerabilities, and suggest mitigations that can detect our attacks. The main conclusion of our work is that we need to consider more than confidentiality and integrity of messages when designing future protocols. We also stress that protocols must protect against compromised servers and at a minimum implement a trust but verify model. 1 INTRODUCTION (a) Alice’s view of the conversa-(b) Bob’s view of the conversa- Recently many software developers and companies have been inte- tion. tion. grating end-to-end encrypted messaging protocols into their chat applications. Some applications implement a proprietary protocol, Figure 1: Speaker inconsistency in a conversation. such as Apple iMessage [1]; others, such as Cryptocat [7], imple- ment XMPP OMEMO [17]; but most implement the Signal protocol or a protocol based on Signal, including Open Whisper Systems’ caching.
  • Evaluating Mobile App Vetting Integration with Enterprise Mobility Management in the Enterprise

    Evaluating Mobile App Vetting Integration with Enterprise Mobility Management in the Enterprise

    Evaluating Mobile App Vetting Integration with Enterprise Mobility Management in the Enterprise June 26, 2019 ii Executive Summary Federal agencies increasingly use mobile devices and mobile applications (apps) to meet their mission and business needs and improve productivity and efficiency. The ubiquity of mobile apps and the increased reliance on their use has a counter side, however. Mobile apps pose substantial risk to federal enterprises because of their potential for exploitable vulnerabilities, malicious code, or privacy-violating behaviors and should be deployed with care. Even apps from the Google Play or Apple App Stores are not free of these risks. Mobile app vetting solutions can automate security analysis of mobile apps to help enterprises determine whether apps are safe to deploy on mobile devices. This generally takes time to review and act upon the findings from these solutions. Enterprise mobility management (EMM) provides the centralized capability to manage an enterprise’s mobile devices, including provisioning security policies to the devices. Many EMM and mobile app vetting solutions advertise integration capabilities—the mobile app vetting solution can share an inventory of installed apps with the EMM, and the EMM can take action based on app vetting findings. The Mobile Security Research and Development (R&D) program within the Department of Homeland Security (DHS) Science and Technology Directorate (S&T) promotes such adoption of safe and secure mobile technology within DHS and across the federal government, and encourages development and adoption of integrated cybersecurity solutions to improve mobile security for the federal government. To help promote this adoption and explore other solutions, the team solicited the Homeland Security Systems Engineering and Development Institute (HSSEDI) to perform an independent evaluation of the integration capabilities of mobile app vetting and EMM solutions.
  • Message-Layer Encryption in Ricochet

    Message-Layer Encryption in Ricochet

    Message-Layer Encryption in Ricochet by Liam Kirsh Computer Science Department College of Engineering California Polytechnic State University 2017 Date submitted: 06/07/17 Advisor: Dr. Bruce DeBruhl Table of Contents Background.........................................................................................3 Project Goals.......................................................................................6 Stronger cryptography................................................................................................6 Support for relay nodes..............................................................................................6 Implementation...................................................................................7 Choice of cryptographic protocol...............................................................................7 GPGME cryptographic library...................................................................................8 Modifications to the Ricochet client........................................................................10 Future Improvements........................................................................10 Use of the Signal Protocol in Ricochet....................................................................10 Use of Off-the-Record Messaging in Ricochet........................................................11 Ephemerality in D-H................................................................................................11 Ricochet Relays........................................................................................................11
  • Obstacles to the Adoption of Secure Communication Tools

    Obstacles to the Adoption of Secure Communication Tools

    Obstacles to the Adoption of Secure Communication Tools Ruba Abu-Salma M. Angela Sasse Joseph Bonneau University College London, UK University College London, UK Stanford University & EFF, USA Anastasia Danilova Alena Naiakshina Matthew Smith University of Bonn, Germany University of Bonn, Germany University of Bonn, Germany Abstract—The computer security community has advocated Recent mobile phone-based secure communication tools widespread adoption of secure communication tools to counter have often been designed to hide security from the user com- mass surveillance. Several popular personal communication tools pletely (albeit at some security cost [1]). WhatsApp famously (e.g., WhatsApp, iMessage) have adopted end-to-end encryption, and many new tools (e.g., Signal, Telegram) have been launched deployed E2E encryption to approximately a billion users with security as a key selling point. However it remains unclear through a code update to its application for messages, voice if users understand what protection these tools offer, and if they calls and video communications [18], with only negligible value that protection. In this study, we interviewed 60 partici- changes to the user experience. Some other communication pants about their experience with different communication tools tools (e.g., Signal, Threema) have launched with security and their perceptions of the tools’ security properties. We found that the adoption of secure communication tools is hindered by as an explicit selling point, but they also hide nearly all fragmented user bases and incompatible tools. Furthermore, the cryptographic details. vast majority of participants did not understand the essential There are key differences in the security model of dif- concept of end-to-end encryption, limiting their motivation to ferent E2E-encrypted tools, in addition to a large gap in adopt secure tools.
  • Untraceable Links: Technology Tricks Used by Crooks to Cover Their Tracks

    Untraceable Links: Technology Tricks Used by Crooks to Cover Their Tracks

    UNTRACEABLE LINKS: TECHNOLOGY TRICKS USED BY CROOKS TO COVER THEIR TRACKS New mobile apps, underground networks, and crypto-phones are appearing daily. More sophisticated technologies such as mesh networks allow mobile devices to use public Wi-Fi to communicate from one device to another without ever using the cellular network or the Internet. Anonymous and encrypted email services are under development to evade government surveillance. Learn how these new technology capabilities are making anonymous communication easier for fraudsters and helping them cover their tracks. You will learn how to: Define mesh networks. Explain the way underground networks can provide untraceable email. Identify encrypted email services and how they work. WALT MANNING, CFE President Investigations MD Green Cove Springs, FL Walt Manning is the president of Investigations MD, a consulting firm that conducts research related to future crimes while also helping investigators market and develop their businesses. He has 35 years of experience in the fields of criminal justice, investigations, digital forensics, and e-discovery. He retired with the rank of lieutenant after a 20-year career with the Dallas Police Department. Manning is a contributing author to the Fraud Examiners Manual, which is the official training manual of the ACFE, and has articles published in Fraud Magazine, Police Computer Review, The Police Chief, and Information Systems Security, which is a prestigious journal in the computer security field. “Association of Certified Fraud Examiners,” “Certified Fraud Examiner,” “CFE,” “ACFE,” and the ACFE Logo are trademarks owned by the Association of Certified Fraud Examiners, Inc. The contents of this paper may not be transmitted, re-published, modified, reproduced, distributed, copied, or sold without the prior consent of the author.