D&C Lug - Home Page
Devon & Cornwall Linux Users' Group

[ Date Index ][ Thread Index ]
[ <= Previous by date / thread ] [ Next by date / thread => ]

Encryption + Loopback (was Re: NTFS (was Re: [LUG] new laptop))



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 03 March 2003 6:31 pm, Theo Zourzouvillys wrote:
> On Monday 03 March 2003 6:30 pm, Kai Hendry wrote:
> > I can get access into almost any "linux" partitioned hard drive in my
> > hands too. I think you have a grave mis-understanding of SID/UID.
>
> encryption + loopback!
>

A few months ago the hard disk on my office machine died.  It was replaced 
by contract engineers who insisted that they had to return with the dead 
disk.  This concerned me a little as I keep some information on the disk
(name + address lists) which should not get into other hands. My 
preference would have been to reformat the disk with a lump hammer.  How 
could I be sure that the disk would be scrapped and not end up in a 
computer shop's bargain bin should it show any signs of life?  Having 
bought one or two bargain bin hard disks I know how interesting they can 
be!

On reinstaling I set up an encrypted partition for any sensitive data.  
With SuSE this is about as difficult as falling off a log, the options to 
do this are all available in the install process.  By default the machine 
asks for your passphrase every time it boots, but I turned this off, 
preferring to mount the encrypted partition whenever I actually need it 
by running as root "/etc/rc.d/boot.crypto start" and entering my 
passphrase

As with any security system there is nothing absolute about it.  My 
intention is to secure the data from the casually curious, not government 
spooks. AFAIK it does.

Tony
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+ZHey+ZJrkBuz/nkRAmx9AJ9QEL//p/XYFgW9qFcN+qRa/MTJOwCfZkRb
TnCYPurjg44TErriRSe+JnU=
=3B8T
-----END PGP SIGNATURE-----

--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe.


Lynx friendly