Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: The VA Stolen Laptop - Lessons Learned

Subject: Re: The VA Stolen Laptop - Lessons Learned
Date: Wed, 20 Sep 2006 18:14:44 -0400
I just meet with a company in Washington, DC with a company from Canada
that has developed a hardware-based encryption module for computer
systems.  They are a start-up but have hooks into some of the laptop
manufactures, which plan to offer the device to customers as a option.  
I have not tested the equipment,, but plan too soon.  The device uses
AES-256 or 3-DES.  It also creates a mirror of the drive, which can be
used for failover operations.    There is even a self-destruction piece
being added.

Saqib Ali wrote:
Clement,

I just checked the True Crypt's website and it says that it only
supports partition but NOT the whole disc encryption. With whole disc
encryption everything including the OS is encrypted regardless of the
partition layout.



On 9/20/06, Clement Dupuis <cdupuis@cccure.org> wrote:
Wikipedia unfortunately is not always up to date

Truecrypt will do full disks and even allow you to have an encrypted disk
without any partitions on it.

Take care

Clement


-----Original Message-----
From: listbounce@securityfocus.com
[mailto:listbounce@securityfocus.com] On
Behalf Of Saqib Ali
Sent: Wednesday, September 20, 2006 12:35 AM
To: security
Cc: security-basics@securityfocus.com
Subject: Re: The VA Stolen Laptop - Lessons Learned

Caution: TrueCrypt is NOT a Full Disc Encryption (FDE) utility. I can
encrypt partitions but not the whole Disc. See:
http://en.wikipedia.org/wiki/FDE

On 9/18/06, security <security@xentek.net> wrote:
TrueCrypt (http://www.truecrypt.org/) is the one I recommend to
clients. Its Open-Source and supports Linux and Windows.

-em




On Sep 17, 2006, at 10:27 PM, MandommGmail wrote:

There are many free whole disk encryption softwares that are
around. Please google for CompuSec. I am personally using it. It is
free for commercial and personal usage.

I believe its just right for my usage.

Alex
----- Original Message ----- From: "George Toft"
<george@georgetoft.com>
To: <security-basics@securityfocus.com>
Sent: Saturday, September 16, 2006 1:42 AM
Subject: Re: The VA Stolen Laptop - Lessons Learned


There are many whole-disk encryption products that make this a
trivial exercise.  Even at $100-150 per seat, the price is cheaper
than a lawsuit and bad publicity.

George Toft, CISSP, MSIS
My IT Department
www.myITaz.com
480-544-1067

Confidential data protection experts for the financial industry.


evb wrote:
 :1. Encrypt all data on mobile computers/devices which
carry :agency data unless the data is determined to be non-
sensitive, :in writing, by your Deputy Secretary or an individual
he/she :may designate in writing : And does "data" include
operating system files, log files, cab files,
drivers, etc., or does it only include eg xls, doc, pdf and wpd
files, etc.?
How has Bush defined "data"?  Thx,

Eric
--------------------------------------------------------------------
-------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence in Information Security. Our program offers
unparalleled Infosec management education and the case study
affords you unmatched consulting experience. Using interactive e-
Learning technology, you can earn this esteemed degree, without
disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------------
-------




---------------------------------------------------------------------
------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence in Information Security. Our program offers
unparalleled Infosec management education and the case study
affords you unmatched consulting experience. Using interactive e-
Learning technology, you can earn this esteemed degree, without
disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------
------


----------------------------------------------------------------------
-----
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence in Information Security. Our program offers unparalleled
Infosec management education and the case study affords you
unmatched consulting experience. Using interactive e-Learning
technology, you can earn this esteemed degree, without disrupting
your career or home life.

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------
-----





---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus


---------------------------------------------------------------------------




--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15
-----------


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus

---------------------------------------------------------------------------








---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

<Prev in Thread] Current Thread [Next in Thread>