Reply to: Securing my company laptop

[Ignis Fatuus]

Get a MacbookAir 11" and just keep it with you (in a manila envelope).

[quackhandle]

FWIW:

Lojack for Laptops

qh

[Sysman]

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux

Nuff Said

Does anyone have thoughts on Fedora forbidden items: Truecrypt?

The TrueCrypt software is under a poor license, which is not only non-free, but has the potential to be actively dangerous to end users or distributors who agree to it, opening them to possible legal action even if they abide by all of the licensing terms, depending on the intent of the upstream copyright holder. Fedora continues to make efforts to try to work with the TrueCrypt upstream to fix all of the issues in their license so that it can be considered Free, but have not yet been successful.

Fedora Suggests: Avoid this software entirely.

tcplay is an independently developed TrueCrypt-compatible program under the BSD license. A tcplay package has been submitted for package review for possible future inclusion in Fedora.

[Freamon]

Good to see that Kensington locks get more secure as time goes on

Apparently the toilet roll trick doesn't work on the most recent ones (unless you buy a cheap one off ebay i suppose)...

[redgiant]

Another vote for Truecrypt here. Does what it says on the tin, open source, and seems very efficient (no noticeable loss of performance after installing it).

For physical security, get a modern kensington lock but don't leave the laptop on display overnight. Ideally take it home, but failing that, lock it in a pedestal. Be warned that I've been at sites where laptops have been stolen from pedestals in the past.

Don't skimp on the kensington lock, the cheap ones are easy to open without a key:

Good to see that Kensington locks get more secure as time goes on

[Freamon]

Another vote for Truecrypt here. Does what it says on the tin, open source, and seems very efficient (no noticeable loss of performance after installing it).

For physical security, get a modern kensington lock but don't leave the laptop on display overnight. Ideally take it home, but failing that, lock it in a pedestal. Be warned that I've been at sites where laptops have been stolen from pedestals in the past.

Don't skimp on the kensington lock, the cheap ones are easy to open without a key:

Look at PGP Whole Disk Encryption. Far more secure than Bitlocker and better value for money. Only downside is that it's now owned by Symantec.

Don't bother, just use Truecrypt.

[jmo21]

Since they are only designed to deter opportunistic thieves and not ones with wire cutters I see little point in using them, on a client site who has security in individual places in the building preventing the access of undesirables.

Erm isn't that the exact point?

Secure client site deters people with wire cutters, but for the opportunistic thief who IS on site, it'll stop them.

Where else would they be designed to be used if not in an office environment? Maybe at home but then the type of thief that's get in there they more likely have something to cut with.

Every office I've ever worked in where I've had a laptop, Kensington locks have been compulsory.

[TheFaQQer]

Stick one of these on the case, and no-one will nick it.

[SimonMac]

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows 7/Vista/XP, Mac OS X and Linux

Nuff Said

[redgiant]

Chain it to a desk with one of these.

Not very secure ... I used to open one of these with a screwdriver
http://www.google.co.uk/url?sa=t&rct...SJ6_hoaZhe9jGg

I currently have W7 bitlocker secured on both my laptop disks. If you have TPM you'll need to manually change the registry settings to enable the on boot password annoyingly.

I have used Truecrypt in the past and it works great ... the only problem that I have found is unencrypting secondary drives (i.e. a disk that doesn't contain the OS) is not supported.

I also use a biometric scanner but that's only because i'm lazy

[SueEllen]

I did lock it to the desk but but irony was that a permy stole the kensington cable off the desk one morning.

Since they are only designed to deter opportunistic thieves and not ones with wire cutters I see little point in using them, on a client site who has security in individual places in the building preventing the access of undesirables.

If you are leaving your laptop when you aren't on the client site then it should be locked in a secure cupboard/draw. Lots of clients expect you to do that with the stuff they provide also.

[TheFaQQer]

Chain it to a desk with one of these.

[quackhandle]

I did lock it to the desk but but irony was that a permy stole the kensington cable off the desk one morning.

However thanks for the amazon tip, forgot to check them.

qh

[pmeswani]

Look at PGP Whole Disk Encryption. Far more secure than Bitlocker and better value for money. Only downside is that it's now owned by Symantec.

[Spacecadet]

Obviously I have a strong password(s) but I am more concerned if it gets stolen as it normally stayed in the house (yes I could be burgled lose it that way) but now I am travelling with it, there's always the risk of damage, etc.

And yes I have removed all sensitive data on it, but you know, it's nice to be aware of anything that can make your laptop more secure, hence my OP. I was thinking along the lines of Bitlocker but without having to upgrade to Windows 7 Ultimate.


qh

Do you physically secure it to your desk when on a client site or in a hotel?

and if you are this concerned about the security of the harddrive then the upgrade to Windows 7 ultimate is only £95 from amazon