Windows 'SysKey' app, and MORE ! - Page 1
Forum section: electronics / general

author: GlennSprigg
author_rank: Super Contributor
timestamp: August 15, 2018, 01:21:51 pm
content: Sorry if this seems LONG, but many people need to understand, even though I hope most people here do.It is not so much a 'question', but a discussion about 'Security' levels accepted in the U.S.A.syskey.exeis a part of windows, and is/was there to allowUsersto encrypttheirsystem,at least at a basic level. At the risk of being corrected, probably 99.9% of people have never used it, (let alonethose that know about it). UNFORTUNATELY, the MOST time that this is utilized, is by HACKERS!...Now YOU, the computer owner, husband, father, workmate, friend... may REALIZE that a phonecall, or onlinerequest to HELP you fix your computer is a load of CRAP, but you can't always educate 'others' in time...These ArseHoles usually start by getting you to download something 'like' Team-Viewer, and to run it withcertain supplied information, which allows 'them' to take control of your PC/Laptop. They THEN runsyskey.exethemselves, and basically lock you out of your own computer. The answer? ( to stop anyone else who mayignorantly be using your computer), then please see the explanation in the following link, how to circumvent that...https://www.youtube.com/watch?time_continue=513&v=xX-75WJV-lgOK, so youWANTto use Encryption on files/folders/HDD's/Partitions/Computers... then read on...Do you trust Microsoft ?... (I don't). Why ?, because the American Government now'forbids'the use ofencryption software from 3rd parties, that does NOT have a BACK DOOR for their infiltration ! Case in point!...WhatUSEDto be a free Open-Source encryption package known as 'TrueCrypt', was shut down in 2014.They were forced into 'retirement' and removed their GitHub links/software, stating that 'they' suggesteveryone change toMicrosoft's "BitLocker"... This is incorporated in the 'higher-end' Windows versions likethe 'Pro' or 'Ultimate' versions. (But NOT the 'Home' editions). No guesses that Microsoft's 'BitLocker' hasbeen 'approved' by the United states National Security !!! But do they need this... NO !!!!!!Since the 'demise' of 'TrueCrypt', (Open-Source), there have been new advancements !Various groups tried to take it over. (At an open source level), and NO LONGER withhidden developers.FIRSTLY, a site labeling themselves as 'TCnext'https://truecrypt.ch/started by releasing the last knowngood version of "TrueCrypt", being version 7.1a (Still available for download).BE WARNEDthough, thatthe 'supposedly' final release, version 7.2, is NOT a USEABLE version !! It purely 'DECRYPTS' your files, inreadiness for '"BitLocker" !! You can STILL safely use TrueCrypt 7.1 with NO problems !!!!Any 'reported' problems are due to no further followups, and NOT because it has been 'hacked'.....SO, one follow through for 'TrueCrypt' was "CypherShed" which released a Version 7.4.0 in 2016.This now seems to be "Dead in the water" with no work done on it for 1 1/2 years.The BEST, current & maintained follow-on from 'TrueCrypt' was/is "VeraCrypt", which can be found here....https://www.veracrypt.fr/en/Downloads.htmlYou may have your own reasons for file/system-encryption, and if 'I' wanted/needed that, then Iwould be pissed off if my 'government' here in Australia 'demanded' that a back-door be built intoall such systems so that they could get in, when/if they please... NOPE !I guess I understand that terrorist organizations need to be brought to light, in no uncertain terms!And although the global authorities had been caught with their pants down in the past, they havea multitude of other methods to track them now, and hold them accountable, & eradicated !

author: Halcyon
author_rank: Unknown
timestamp: August 15, 2018, 09:23:02 pm
content: Let me just clarify a few points because I'm not quite sure what you're going on about and who has been in your ear, there is quite a bit of misinformation here.Syskey was/is a Windows component which encrypted the SAM database. It was designed to keep password hashes etc... secure. It has been around since the Windows NT days and by the time Windows XP came around, it was on by default and couldn't be turned off. Latest versions of Windows no longer have the syskey utility (but still implement security features with regards to the databases).Secondly, I don't pretend to be up-to-date on US laws and government but I find it hard to believe that even America would pass laws to forbid encryption without back doors. I call bullshit on that, so perhaps you can cite some references to back up your claim?Bitlocker encryption is fine for the casual home user but is not suitable for storing sensitive data, but then again, it was never designed to do so. TrueCrypt 7.1a is still relatively safe to use, but it is still possible to obtain encryption keys under certain circumstances based on well known attacks. It's not a flaw in the encryption itself, rather how TrueCrypt implements it. It's not a back door nor is it a secret.You seem angry, but I'm not quite following the point you're trying to make?

author: gnif
author_rank: Unknown
timestamp: August 16, 2018, 02:50:11 am
content: Bitlocker has a backdoor, as does TrueCrypt, as does LUKS and md-crypt... It's called Firewire.Until it was noticed that Firewire allowed DMA transfers to be initiated by the client Bitlocker had no known vulnerabilities, and even then you need to be able to unlock the HDD for the vulnerability to be a problem. Still today Bitlocker is considered by security experts world wide to be secure. Microsoft allows security research companies to audit the source code of components like Bitlocker under a NDA, and they do. It would be very hard to hide a backdoor in code that is audited by so many people.Working in the field of Security as a Security Researcher myself I also call this out as a complete crock. If you want modern supported non Microsoft encryption the best free option is a md-crypt volume, or LUKS which makes it a bit more idiot proof.As for TLS/SSL, in the past government agencies were able to store encrypted sessions to break the keys later, but in recent years with the added cipher modes with forward secrecy this is no longer possible. Even if they break one TLS session, they will still have to brute force the next (provided the server admin has been competent enough to configure this).You could consider my network a gold mine of top secret sensitive information containing access details, encryption keys, etc. for large enterprise organisations and as such you would think I would be a prime target for "covert" agencies. Since I have never been targeted by any such organisation, why would they even look at you unless you're doing something illegal? If I ever was legally ordered to produce access details for my client's by the government I would comply, not because I am scared of what might happen, but because it is the law. Once they have your keys/access details, they don't need a backdoor... it's that simple.

author: GlennSprigg
author_rank: Super Contributor
timestamp: August 17, 2018, 01:03:54 pm
content: Firstly, 'Halcyon' said......Syskey was/is a Windows component which encrypted the SAM database. It was designed to keep password hashes etc... secure. It has been around since the Windows NT days and by the time Windows XP came around, it was on by default and couldn't be turned off. Latest versions of Windows no longer have the syskey utility (but still implement security features with regards to the databases).Exactly... and was only mentioned as I said, as a warning to people 'who' uses it now, and how to protect yourself.Quote from: gnif on August 16, 2018, 02:50:11 amWell, please don't get me wrong. I absolutely trust the integrity/sincere-belief of your words, and the importance of the information that you say you protect. And obviously you have a lot of knowledge & utilization's of it, in the work that you perform, in the security 'arena'.I'm not suggesting that 'my' personal info etc, would even compare to that, or most anyone elses... but am talking about personal choice.Is it possible, that even you, (and I do NOT mean that facetiously), are unaware of certain Governments/Security-Depts control ??You say.... "Bitlocker has a backdoor, as does TrueCrypt, as does LUKS and md-crypt... It's called Firewire..."...I'm obviously not talking about 'that' sort of problem/breach....I don't want to get into a whole bunch of 'dialog' about it, as anyone can research the vast multitude of websites/forums etcspecifically about government intervention, past & present, and REAL 'backdoors', to keep anyone busy for weeks !! :-)

author: Buriedcode
author_rank: Super Contributor
timestamp: August 17, 2018, 06:31:34 pm
content: Quote from: GlennSprigg on August 17, 2018, 01:03:54 pmYou can also read thousands of web-pages discussing Alien abduction, homeopathy, fake moon landings, government (almost always American government because, you know, it always is) agendas trying to brainwash (which isn't even a thing) or control the population etc.. the trouble is the internet isn't neatly separated into "verified fact", "opinion", "satire" and "madness". We just tend to read what we already believe to be true and ignore the rest.I don't doubt there are ways to access ones information given enough time and resources, the question is, why do you need the best possible encyption? Just because "government agencies" potentially have the capability to access any of your personal information - doesn't mean to say they want to. These things require precious time, man-power and use of expensive tech which is put to much better use for national security. I understand that intentionally weakening security to make it easier to break it when needs be is troubling, but this was never hidden - you are free to choose what security methods you use, and having backdoors/exploits being discovered only serves to improve matters.I'm not sure what your thread is about.. is it a paranoid rant about conspiracies? Have you recently been hacked and tracked the method down to some intentional weakening of security? (its true that so-called "hackers" will use whatever backdoors are available to them including ones put in place intentionally). Are you trying to warn us about a new potential security threat, either a new method, or that it is more common? (baring in mind, very few people are actually targeted, almost all "hacks" are scattergun or phishing in the hope of getting something useful). I'm trying to not be mean, I genuinely don't know.Also, whilst it shouldn't matter, capitalizing words for emphasis, as well as making them bold just makes you look like a loon. Sorry, it shouldn't be the case but its true - just look at the British new paper "The Daily Mail" who regularly scream bizarre headlines about various "chemicals", there's just no need for caps and bold every few words.

author: bitseeker
author_rank: Super Contributor
timestamp: August 18, 2018, 07:26:39 am
content: Summary:UseVeraCrypt. QuarksLab performed asecurity audit of the codeand found vulnerabilities, which were fixed in 1.19. Subsequent versions had bug fixes, many for Windows. So, TrueCrypt, although excellent in its day, is pretty much outdated, now.And, of course, don't forget to back up your important files regularly (and verify that the backups work).

author: Mr. Scram
author_rank: Super Contributor
timestamp: August 18, 2018, 03:23:18 pm
content: Third party encryption software isn't prohibited by the US government. Comments like that are rather inflammatory and should be considered FUD.

author: GlennSprigg
author_rank: Super Contributor
timestamp: August 19, 2018, 02:14:50 pm
content: Quote from: bitseeker on August 18, 2018, 07:26:39 amThat's all I'm saying :-) Since the original "Open-Source" stuff, "VeraCrypt" is the way to go now if one wishes to followthe 'Open-Source' community!! Nothing to 'read' into that !!. If you choose to use 'BitLocker', then good for you !MY point was that 'BitLocker' is NOT built into the Windows 'Home' editions, that the VAST amount of users have.I'm just informing them about their CHOICES now :-)As for the Government (Departments!!) intervention thing... people have their belief and I have mine. I didn't 'ridicule'people for 'their' beliefs, but they chose here to try and belittle me with ref to sites about 'aliens' & other nonsense.If that gives them a sense of 'Power', then more power to them... I won't sink to their level.

author: rstofer
author_rank: Super Contributor
timestamp: August 19, 2018, 06:55:55 pm
content: Quote from: Mr. Scram on August 18, 2018, 03:23:18 pmThere was an issue where we in the US couldn't EXPORT encryption and that's why OpenBSD is hosted in Canada.I have no idea what this says but apparently export is still restricted:http://web.stanford.edu/group/export/encrypt_ear.htmlHere is a document re: OpenBSDhttps://www.openbsd.org/goals.html

author: Halcyon
author_rank: Unknown
timestamp: August 19, 2018, 09:31:40 pm
content: Exports/import of products using strong encryption isn't uncommon.https://en.wikipedia.org/wiki/Restrictions_on_the_import_of_cryptographyI do actually see a point to it.

author: Mr. Scram
author_rank: Super Contributor
timestamp: August 19, 2018, 10:10:18 pm
content: Quote from: rstofer on August 19, 2018, 06:55:55 pmNote that only applies to specific forms of strong encryption. Even encryption algorithms deemed safe and thus strong enough for government use can be exported freely. Something like Bitlocker wouldn't exist if it weren't.It's a bit silly to restrict nowadays too. Encryption used to be rare black magic, but it's much more public nowadays and the internet makes thinking in terms of import and export cumbersome.

author: bitseeker
author_rank: Super Contributor
timestamp: August 20, 2018, 12:53:20 am
content: And one could get around the export restriction the Phil Zimmerman way: publish the source code in a book, à laPGP.

author: GlennSprigg
author_rank: Super Contributor
timestamp: August 21, 2018, 02:38:23 pm
content: Quote from: Buriedcode on August 17, 2018, 06:31:34 pmWow... Talking about the proverbial "Waving a red rag at a bull"Where should I begin, to address you on your mighty pedestal of 'greatness'...What ever your 'knowledge' about life, the universe & everything... you are obviously an Angry man. Calm down !Regarding what this Thread is about... (much to your obvious disgust), I firstly did not know that 'one' can onlyask 'Questions', as opposed to merely 'discussing' a topic ? Which I started only to discuss the latest, & useable"Open Source" options for cryptography, if interested, for ALL Windows users, as apart from the limited BitLocker.My 'Bad'... (I guess) ...You then decided to go on, in your "Holier than thou" way, discussing my "capitalizing words for emphasis..."obviously with no other intent but to make myself... "Look like a Loon"...Well YOU, sir, are a typical self opinionated 'forum' BULLY. (Excuse the NEED for capitals there !!).You must feel so proud....Thank you to all the others who passed on their thoughts/knowledge... Glenn.

author: mdszy
author_rank: Unknown
timestamp: August 21, 2018, 02:58:20 pm
content: Quote from: GlennSprigg on August 21, 2018, 02:38:23 pmMy guy, you're absolutely going on like a raving lunatic at this point...

author: GlennSprigg
author_rank: Super Contributor
timestamp: August 24, 2018, 02:03:12 pm
content: Ahh... there's another name to look out for now'Buriedcode' and 'mdszy'... for the Forum Bullies database...I can see the "Error of my ways" now... for daring to 'reply' to a verbal (hidden) BULLY...That's the problem with some of these so-called Forums, that SOME consider themselvesso 'Elite', that they actually believe they are better than everyone else !!I can 'see' them, in their Digital "Ivory Tower", looking down over their "Minions"... Oh GOD!!!Funny... there was nothing constructive either of you have said, other than to 'flex' yourdigital muscles, (in your anonymity) and feel 'power' by putting someone downI STILL thank the 'others' for their answers/contributions.

author: Buriedcode
author_rank: Super Contributor
timestamp: August 24, 2018, 08:36:14 pm
content: I apologise if my reply came across as "bullying"m whilst perhaps my tone was rather tongue-in-cheek, it was never meant to be malicious. I wasn't really sure what your post was about, which is why I asked for confirmation. I gather from the title it is about syskey.exe and general user encryption applications, but was it promoting certain applications, or warning against their use? I understand the frustrating at forum replies that don't conform to your expectations, but please try not to assume everyone is trying to talk down to you - otherwise that is all you will see.

author: mdszy
author_rank: Unknown
timestamp: August 24, 2018, 08:37:50 pm
content: Quote from: GlennSprigg on August 24, 2018, 02:03:12 pmSeriously man. Using caps, quotes, ellipses, emotes everywhere and wording things like you do makes you come off as a crank. Your "forum voice" sounds no different from someone trying to convince me the moon landing was a hoax, or that politics are filled with lizard people.

author: gnif
author_rank: Unknown
timestamp: August 24, 2018, 09:30:54 pm
content: I am locking this thread as it seems to be devolving rather fast.