Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Hard drive encryption in windows

Subject: Re: Hard drive encryption in windows
Date: Tue, 27 Sep 2005 11:34:55 -0700
No EFS is not good.

For starters it is only encrypting the data that you tell it to.  What
if that file that you are accessing is copied over to the Swap File? 
Now you have an unencrypted copy on your computer, and a false sense
of security.

Also, there are tools freely available on the internet, with just a
VERY SMALL amount of looking that will break into the EFS.

Granted it is better than nothing, but if I were you, I wouldn't rely
on it strictly as a safe alternative.  It's better if you have nothing
else at the time and are in a pinch.

Make sure you use it in accordance with a secure erasing system,
something like Eraser.

Rob.

On 9/22/05, Beauford, Jason <jbeauford@eightinonepet.com> wrote:
EFS is no good?

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs
/en-us/encrypt_overview.mspx

JMB

        |   -----Original Message-----
        |   From: Cesc Santasusana
        |   [mailto:cesc.santasusana@nl.thalesgroup.com]
        |   Sent: Thursday, September 22, 2005 10:36 AM
        |   To: <
        |   Subject: Hard drive encryption in windows
        |
        |   Hi,
        |
        |   I am looking for a solution to encrypt the hard
        |   drives which contain confidential info. Ideally,
        |   this tool would be transparent and usable on all
        |   the drives on the computer/laptop  (from c: to z:).
        |   Ideally it would be easy to set up and manage, not
        |   a problem if the tool is not free. Any experience
        |   on this? What algorithm(s) does it use?
        |   Another option would be to use external encrypted
        |   drives to store the info. What are the options here?
        |
        |   I am looking for some background information, to
        |   short-list all the options.
        |
        |   Thanks for the help!
        |
        |   Cesc
        |
        |
        |
        |   Unclassified
        |
        |



--
Rob

<Prev in Thread] Current Thread [Next in Thread>