This Old Mouse

Guarding files with Encryption

I get letters all the time from MUG members and Mac users in general about security, spam, and protecting their computer online.

One such writer recently asked:
      "How can I secure a file on my computer so no one else can open it?"
Another writes:
      "All the talk these days about OSX, I'm an OS/9 user and need some help securing files."
Yet another reader writes:
      "How can I fix a file for transmission as an attachment that cannot be accessed by anyone other than the recipient."

Encryption Under OS 9

encryptUnless the recipient is running OS 9, you'll need to purchase any of the file encryption software available, or check the Mac shareware sites for recent shareware programs. If you're sending to Windoze users you're pretty much out of luck.

OS 9 however shipped with an effective file security application. Use Cmd/F to open Sherlock and search for "Apple File Security". It should show you the Apple Applications > Security > directory.

Using Apple File Security

This small application encrypts and compresses the file you want protected. Once a file is successfully encrypted, a little key is added to the icon.

To encrypt a file

If you check the "Add to Keychain" then the passphrase will automatically be added to the keychain file.

Decryption

Decrypting is the same.

Double-click the file and it asks you for the passphrase. Supply it correctly and you're in. Get it wrong and you're out.

Send it

If you send the file to another OS/9 user, they'll need the passphrase. It will be best to give it to them in a phone conversation or another email -- never in the same email.

If you're sending the file to an OS X user, they'll need to find the "Apple File Security" application on their hard drive, and drag-and-drop the encrypted file onto its icon.

I tested a file, and when the OS X user attempted to double-click, it brought up the file in Text Editor with gibberish. Once he dropped it on the "Apple File Security" application it launched into Classic and requested the passphrase.

Under OS X

Of course we are beginning to see all sorts of solutions for OS X, and it's a good thing too! OS X is the most open and 'hackable' system Apple has ever produced, and the underworld does have a fair share of UNIX hackers. If you have highly sensitive files on your OS X computer then you should look into Apple's own security features and options and investigate third party solutions as well. Most of these however will thwart only the casual file browser and the amateur burglar. If your files are ultra sensitive, you'll need a commercial or perhaps custom solution.

First line of defense: Keychain

When you first set up your OS X system a new Keychain account was generated as well. Even if you never used it, it has been in the background protecting you all along. Some security experts suggest you establish a second account, different from the initial default account, and secure it with totally different access passwords known only to you.

To access your keychain application go to and click "Applications" icon in the toolbar (Cmd/Opt/A), double-click the "Utilities" icon and then double-click the "Keychain Access" icon. From there you'll see the various options available. Check Apple's "Help" menus for walk-through tutorials.

Network Security

If your Mac is conntected to a network, then a whole new set of problems present themselves. Those of you who became comfortable using "Privileges" in OS/9 are in for some rude results in OS X. In Classic, you'll find that all your OS X privileges are no longer in effect. If you set privileges under OS 9, then you'll have problems in Classic under OS X. So, until you are familiar and confident with permissions and privileges, it's best not to 'share' at all.

Security Online

If your Mac is conntected to a network via the internet or broadband then you are open to serious potential risks. It's recommended to have 'Net Sharing' off all together. It's also a good idea to investigate firewall software. Using your iDisk and Homepage is probably the safest way to share files because the files are actually on Apple's computer, and no one ever comes near yours.

Whatever you do, don't turn on FTP access or Remote Login -- these open your computer to anyone who has a terminal emulater (Mac or PC) and enough skill to use it -- which isn't much. Again, check the Mac Help files that came with your computer to get full info on these functions.

Also remember that while in OS X peer-to-peer file sharing and many of the "chat" drivers like IRC (Internet Relay Chat) also expose your machine to the skilled hacker. If you're in the P-2-P program downloading MP3 files, your port is open, and any port-sniffer can come in and help themselves and you won't even know it.

Getting Help

The Apple help files, as well as Apple's online tech department are good resources for lots of information about security and your Mac. You can get started at: http://www.info.apple.com/support/help/machelp/

Until next time, happy mousing.

Thanks for reading...

Fred Showker
      Fred Showker, Editor/Publisher UG Net News  

 

FredFred Showker is co-editor of "MUG Info Manager," the User Group Network News service, and a founding Apple User Group Advisory Board (UGAB) member. He was an original founder of the User Group Forum on AppleLink Personal Edition which became America Online in 1988 ... read more

"This Old Mouse" presents short, interesting articles about computers and computing for reprint in Macintosh user group newsletters, and the Macintosh computer community at large.
      If you would like to reprint "This Old Mouse" in your nonprofit newsletter contact us for details. We can supply header graphics, slugs for both web and print publication. We welcome your questions, problems, tips, tricks and input. Macintosh User Groups should register your group before reprinting

UGN Site Navigation:

Return to: the top of this page, or read more from This Old Mouse
Exit to: The User Group Network front page
Read more The User Group Articles
Check the The User Group News Department
Read this week's MUG Info Manager

 

The User Group Network is a member of: The Association of Apple Computer Users & Groups, the MUG News, and is sponsored in part by: The Design & Publishing Center, The News Serve Network, and the Designers' Bookshelf. The User Group Network is the first, and the original user group network for computer users everywhere including, Apple, Mac-Pro, User Group Organization to support Macintosh, IBM PC, Microsoft, Compaq, Amiga, BE/OS, Linux, UNIX, and other leading computer platforms. Hosting services are provided by The Graphic Design Network to serve the computing community. For information about the UGNetwork, to get involved or have your own groups' home page located at user-groups.net, please contact us. Copyright 1994 through present. This site is maintained in the community interest by The Graphic Design Network c/o Showker Graphic Arts & Design, a Corporation of the Commonwealth of Virginia, 22801, established in 1972.

Valid HTML 4.01!