North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: New Laptop Polices

  • From: Todd Vierling
  • Date: Sat Aug 12 10:45:47 2006
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=osp58Co5T3Qt4UuZhAvRtWmlIUj94UWMsIe2rcvJvsMqnrlkD/IRIO3Y7ojta7yng+3JdkMqEtRKZYW6KLK07nGtctDetk0k10S0G8fyVa4b1SVLtYxO2j8CJ7XeJIjXH7AKiD+b/VTv4mRZExjd51WgXXs+IOqmJ8GmRctzWkE=

On 8/11/06, Christopher L. Morrow
<[email protected]> wrote:

> It's also a great time to plant some file that POOF the authorities
> will decrypt & show it's kiddie porn. {Or just hide same in your
> browser cache.} Do YOU know what every frigging file on your
> machine is?

and here I was thinking: "Quick! buy stock in whole disk encryption
software makers!"


Any laptop NOT using full disk encryption from the moment of boot-up
is begging for trouble.  As has been pointed out many times, laptops
DO get lost, and not just in airline facilities.

This can be accomplished with just about any OS.  Some require loading
an OS kernel first with a custom ramdisk or mini-partition to kick off
the encrypted disk driver; others can use off the shelf products
designed expressly for this purpose.

The only thing that bugs most people about full disk encryption is
that it often doesn't support "hibernation" -- but if the hardware has
a standby power save mode that is low enough on power consumption (S3
or similar), that shouldn't be a problem.

--
-- Todd Vierling <[email protected]> <[email protected]> <[email protected]>