Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Encryption for the masses
Kelly Martin, 2006-03-21

File and disk encryption needs to be simple and easy if it's going to be used. This article looks at Apple's FileVault and takes a sneak peak at what's coming in Windows Vista.

Comments Mode:
Encryption for the masses 2006-03-22
Anonymous
In the working world, I would suggest checking with IT management for policies concerning user encryption. In my large environment this seems to be curiously lacking. Also, if disk encryption is used, I would say backup first and often, and keep the backups secure....

[ more ]  [ reply ]
Encryption for the masses 2006-03-22
Scott Ramsdell (3 replies)
Windows does have the ability to encrypt your home folder, you simply enable EFS on your home folder. It's that easy.

Encrypting a drive offers no security when someone has physical access to the machine. Why? Because the encryption key itself cannot be encrypted, it has to be on the disk some...

[ more ]  [ reply ]
Re: Encryption for the masses 2006-03-22
William
"Encrypting a drive offers no security when someone has physical access to the machine. Why? Because the encryption key itself cannot be encrypted, it has to be on the disk some..."

Not quite true-- most key-based encryption systems DO encrypt the keys locally, and use a (usually smaller) passwor...

[ more ]  [ reply ]
Re: Encryption for the masses 2006-03-23
Anonymous (2 replies)
I am by far no expert in this field, but according to the makers of TrueCrypt (www.truecrypt.org), the key is NOT stored on the disk. So if you use a good strong password (who uses weak passwords these days?) then the attacker will not be able to gain access to your encrypted partition/drive.

I ...

[ more ]  [ reply ]
Re: Re: Encryption for the masses 2006-03-24
Ja.
Who uses weak passwords? About 95% of our customers would like to use it. They are just lazy to remember strong password. They live in a world without attackers......

[ more ]  [ reply ]
Re: Re: Encryption for the masses 2006-03-24
Peter
TrueCrypt is an excellent product. I use it to manage an encrypted file-based volume on my USB flash drive. Works flawlessly....

[ more ]  [ reply ]
Re: Encryption for the masses 2006-03-23
J (1 replies)
>>>Windows does have the ability to encrypt your home folder, you simply enable EFS on your home folder. It's that easy. <<<

You're ignoring the fact that 99 out of a 100 typical Windows users wouldn't know where to find it in the first place......

[ more ]  [ reply ]
Re: Re: Encryption for the masses 2006-03-25
Anonymous
First, EFS is not available in XP Home.
Those few who use XP Pro at home, sometimes have grief when they reinstall the OS and all their precious encrypted files turn from gold to crap.

Microsoft faulted that you're not prompted to export the recovery key when you enable encryption....

[ more ]  [ reply ]
Only open source security can be trustworthy 2006-03-23
Anonymous
Closed source security software simply can not be trusted. Open-source and rock solid disk encryptio for Windows (and also Linux) has been available for years. It's called TrueCrypt. http://www.truecrypt.org...

[ more ]  [ reply ]
Encryption for the masses 2006-03-24
Anonymous
http://www.prosefights.org/baltimoresun/shanebowman.htm...

[ more ]  [ reply ]
One problem with EFS 2006-03-28
Anonymous (1 replies)
If you lose the password, you've lost the data, period....

[ more ]  [ reply ]
Re: One problem with EFS 2006-03-28
Anonymous
I think that is kind of the point....

[ more ]  [ reply ]
Encryption for the masses 2006-04-16
Anonymous
Great article Kelly. ...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus