Comments for Does locking my computer keep it safe?

Comment from chas on 2011-12-06

2011-12-06T18:53:22Z

get a fingerprint reader and use this to access your computer. it works in conjunction with a password, so make sure you have a very strong password - there are programs available which can randomly generate a password for you.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Adam on 2011-11-22

2011-11-22T15:12:01Z

password protect the bios

disable booting from anything but the volume you should be booting from

Still not as good as physically securing the machine, but better...

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Eicar Test Code on 2010-01-25

2010-01-25T10:26:52Z

re:
"I think that for a normal working situation, like an office or college locking your PC with a good password is safe enough. I believe there is no way to get into someones account (without knowing his pwd or an admin pwd) and leave it un-noticeable..."
_ _ _ _ _ _ _ _ _

I had a laugh with one of the admin. assistants at one of the bosses where I work,

it seems that all the PC's on the domain are accessible by me from my work station as long as they are turned on and connected to the network,

if I browse "my network places"
find the machine I want to look at

then use the administrative share for the root of the system drive of said machine,

I can look at any & everything on the machine, including their "Documents" folder, "Desktop", "Temporary Internet Files" etc.

I dropped a text file onto one of the bosses Desktop:
HiBoss.txt

It seems that internal network security is as necessary as physical security of the machine

I don't believe anyone here has set their "my documents" folder to Private as they've all been redirected to the server for the nightly backups
as well as that's the primary share point for sharing files
so I haven't had the opportunity to attempt to access a "Private" "My Documents" using this method of "administrative access".

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Glenn P. on 2010-01-23

2010-01-24T03:44:00Z

Additional information for Tom R. (and others!):

1. TrueCrypt doesn't "just" use AES. It can be configured (if desired) to use THREE ciphers in series -- AES, Twofish, and Serpent -- either in that order, or in the reverse order. Other combinations of these are also possible.

2. Leo is correct about using a passphrase, rather than a password. Ideally, your passphrase should have these eight (8) characteristics:

1. Uppercase letters.
2. Lowercase letters.
3. Numbers.
4. Punctuation (e.g., ",:;-?! and so forth).
5. Symbols (e.g., @#$&*+ and so forth).
6. Spaces (use your spacebar!).
7. Respelling (no word anywhere in your passphrase should be findable in any dictionary -- say "kwean", not "queen"!).
8. A long length (15 characters or longer, and the longer the better).

Hope this helps!

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Dave Markley on 2010-01-18

2010-01-18T22:45:58Z

Just wanted to add a little note concerning Gmail. As of January, 2010 Gmail is sent via HTTPS: (encrypted) as opposed to HTTP: that was previously used.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Pedro on 2010-01-06

2010-01-06T17:45:44Z

I think that is a little overkill. If someone did that the user would notice that the PC had been hacked because it would no longer be logged in to his account when he arrives to his PC...

I think that for a normal working situation, like an office or college locking your PC with a good password is safe enough. I believe there is no way to get into someones account (without knowing his pwd or an admin pwd) and leave it un-noticeable...

Whether it's noticeable isn't the issue. Keeping your data safe most certainly is. You'll notice your wallet has been stolen eventually, but even so ... your wallet has been stolen, and all the information in it. Best to not have it stolen in the first place.

07-Jan-2010

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Pookey on 2010-01-05

2010-01-06T05:36:54Z

@Tom R

Absolutely WRONG. The world's best super computers can crack AES in a couple of days. You and I don't need to worry about that because they are mostly used by scientists for research or government agencies to process certain data. However, for the average Joe Bloggs on the street with a Quad-Core 2.6 Ghz it will indeed take not only years, but decades to crack the encryption. Also, AES is strongest when the longest possible password is used, which would mean a 256 character password. Most people's password's are probably less than 64 characters and therefore, there is a reduction in the strength offered by the encryption.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from ron on 2010-01-05

2010-01-06T01:28:04Z

How "solid" is your GMail password? Do you have it written down anywhere (digital or paper)? Do you have GMail password recovery turned on? Are the hints easy to guess? Are you using HTTP or HTTPS to access your GMail (if HTTP your Password and email can be intercepted when you are reading it)?

The only way you can be sure that your files are unreadable at GMail is if they are encrypted. Which gets you back to encrypting your HD. Make sure to encrypt the whole HD, not just files, folders or partitions.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Craig on 2010-01-05

2010-01-05T23:29:00Z

I just got a brand new laptop, and at first used the fancy drive encryption that I thought would keep prying eyes off my data. The only problem is it was so INTRUSIVE, and became a pain in the toucas, that I finally turned it off; so much for good tools but not wanting (or liking) to use them.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Alan Smith on 2010-01-05

2010-01-05T23:05:28Z

Hello Leo, Find your site both informative & enjoyable.
Re Safe Lock Up of Your Computer.
Assuming my LT computer is stolen & unlocked by the thief.
If I store sensitive info within Gmail [like in 'Gmail contact notes] & create a solid pw for my Gmail sign on. How secure would this be?
My laymans logic tells me that Google could not be hacked easily & even if a hacker did this, crunching a Google sign on pw would also be difficult for an external hacker?
I have coupled the above set up with a Nortons Identity pw on my computer which i assume will make it doubly difficult for a thief ever gets his hands on my LT & unlocks it.
He would have to crack both the Nortons + my Gmail Sign On pw's to get amongst my sensitive stuff. Good Idea, or am I missing something?
I just back my Ho Hum files up on multi Flash Drives.
Alan

The risk is not hacking anything, but rather gaining access to your GMail password. If you've ever allowed your browser to remember your password, then it can be trivially recovered buy theif who has access to your machine. This on a different site might scare you a little: Forgot Gmail Password? Use your browser to recover it!

06-Jan-2010

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from loaded on 2010-01-05

2010-01-05T22:22:32Z

quoted: I remember reading somewhere that once somebody has physical access to the computer (or at least the HDD), no encryption is good enough.
Posted by: Me at January 5, 2010 11:15 AM //

Maybe you read it in the article you commented on ... the large bold print that says "If it's not physically secure, it's not secure".

That same article that you're also commenting on goes on to recommend encryption as a solution.

06-Jan-2010

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Tom R on 2010-01-05

2010-01-05T20:10:49Z

"I remember reading somewhere that once somebody has physical access to the computer (or at least the HDD), no encryption is good enough."

Absolutely and completely untrue. The 256-bit AES encryption algorithm as a practicle matter is unbreakable for the foreseeable future. AES is so mathematically complex that today's fastest supercomputers would have to work on the problem for many, many decades before they would be able to break it.

Physical access or not, AES (which TrueCrypt uses) will keep valuable personal information safe, as long as a strong password is used.

I agree, and want to emphasize the importance of the password - or rather pase phrase. All the encryption in the world won't save you from having chosen an easy to guess or compromized passphrase.

06-Jan-2010

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Me on 2010-01-05

2010-01-05T19:15:56Z

I remember reading somewhere that once somebody has physical access to the computer (or at least the HDD), no encryption is good enough.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Ken B on 2010-01-04

2010-01-04T19:54:10Z

Many computers have the ability to set a boot password, which will prevent (most) people from even getting to the point where they could boot from CD. Though, as you said, "If it's not physically secure, it's not secure", since the computers all have some method of clearing that password. (Typically, this involves opening the computer and shorting two pins.) It's the slightly-less-cheap padlock on the outside door that they need to get through before they can remove the other cheap padlock. :-)

Of course, if someone was that determined to get in, they'd probably just walk off with the entire computer. Not very subtle, but they'll still have access to all the data on the computer.

]]>

A comment on: Does locking my computer keep it safe?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.