Date: Thu, 21 Jan 2010 11:25:21 -0500 From: Jerry McAllister <jerrymc@msu.edu> To: Henry Olyer <henry.olyer@gmail.com> Cc: freebsd-questions@freebsd.org Subject: Re: hardening FreeBSD, already using GBDE Message-ID: <20100121162521.GA17337@gizmo.acns.msu.edu> In-Reply-To: <1d7089c41001210732t233bdf46pbbc2ab5be1fdd360@mail.gmail.com> References: <1d7089c41001210732t233bdf46pbbc2ab5be1fdd360@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jan 21, 2010 at 10:32:01AM -0500, Henry Olyer wrote: > For example, the editor I use normally writes to /tmp -- I changed that, > making it slower, but in the event that someone takes my laptop I want to > sleep at night. > > I've no problem letting some poor person make a windoz machine out of my > laptop -- but I don't want to share my work, my intellectual property. (I > do research.) > > So, I'm looking for a list of changes to make, hacks really, that will > further tighten up security. > > Can you point me to such a list of to-do's, please. Just send mail to > henry.olyer@gmail.com If you encrypt everything on disk and make sure the machine is powered off any time you leave it, there is not much else you can do to protect it from physical access. That is, if someone can get their grubby little fingers on it, there is little you can do to absolutely prevent them from getting to the data. If they have physical access, they have the same tools you do. There are things such as putting on a BIOS password and encrypting everything and powering it off when it is not in your hands that can make it more difficult, but nothing that totally prevents seeing your stuff. You could remove the hard disk and take it with you everywhere. The only complete security is never to store your data anywhere - on a computer, on paper, even in your head -- you might talk in your sleep. So, make a good effort to make it difficult and then just resign yourself to living in the real world. ////jerry > > --jg > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100121162521.GA17337>