Security Basics mailing list archives
RE: Protect folder data.
From: "Nero, Nick" <Nick.Nero () disney com>
Date: Mon, 31 Mar 2003 08:48:52 -0500
Yeah, EFS uses a 40bit key so it is not meant to keep the dedicated thief away from your data, just the casual snooper. Sidenote: A couple of years ago when CNN discovered an Al Qaeda laptop in Afghanistan they turned it over to the FBI. The files were encrypted with EFS and the FBI brute forced it in less than a week. ... -----Original Message----- From: Bent.Mathiesen () swisscom com [mailto:Bent.Mathiesen () swisscom com] Sent: Friday, March 28, 2003 9:49 AM To: langa () kentane net; rdarsey () aims1 com; security-basics () securityfocus net Also, from what I have read earlier, EFS can also easily be unencrypted. So, like Langa, I would recommend some proven reliable tools/systems. /Bent -----Original Message----- From: Langa Kentane [mailto:langa () kentane net] Sent: Thursday, March 27, 2003 8:24 AM To: 'Rick Darsey'; security-basics () securityfocus net Subject: RE: Protect folder data. Excel spreadsheet passwords can be easily unencrypted. There are utilities out there that can do this for you in the click of a button. Don't fall for that one. Secondly, you must be careful when you deploy EFS. A must is to deploy it only if it's domain wide. Otherwise it's not very secure. I read a paper on this last year sometime. Can't find the link anymore but I will send it to the list when I do. It's also very easy to misconfigure EFS, then you think you're secure when you're not. Thirdly, why not just buy PGP 8.0. I bought a copy in December for US$39. Comes with PGP Disk. Exactly what you need. Otherwise you can just get the freeware version, this will only encrypt individual files though. Lastly, there are a couple of these products out there, some of them are free. I used one on 2000/2001. I just can't remember what the name was, I think it was ScramDisk. It was free but only works in Win9x. There are quite a few others as well, for instance DriveCrypt, BestCrypt, StrongDisk. With all that said, I'd go with a reputable, tried and trusted product: PGPDisk. Ciao -----Original Message----- From: Rick Darsey [mailto:rdarsey () aims1 com] Sent: 26 November 2002 16:04 To: security-basics () securityfocus net Subject: RE: Protect folder data. What format is the data in? Excel will let you password protect a workbook. You can also turn on encryption in Windows 2000. You have to be running NTFS. If you setup encryption on your system, and password protect the Admin user, the the only way someone can open the file is to set them up with rights to the file, or as a Encrypted File Recovery Agent on your local system. Depending on your network security, this may work. If the Network Admin has set the domain to override local policies, he may still have access to it. If this is not the case, then he would have to have Administrative rights to your system. Rick -----Original Message----- From: Shane Lahey [mailto:s.lahey () roadrunner nf net] Sent: Friday, November 22, 2002 12:29 PM To: tony572000 () hotmail com; security-basics () securityfocus net Subject: RE: Protect folder data. Why not try Blowfish Advanced CS , available at http://come.to/hahn This should do exactally what you want. -----Original Message----- From: Tony - CIA;CISA;CDP;CPA;MBA [mailto:tony572000 () hotmail com] Sent: November 18, 2002 8:00 PM To: SECURITY-BASICS () SECURITYFOCUS COM Subject: Protect folder data. Hi, I have some highly confidential data that I frequently access on in a folder that is on my desktop computer (ie win2k). I want to make sure no one but me will able to see this data. Does anyone know of any freeware\shareware that will 1) en-crypt the data in the folder and/or 2) require a password to open up the folder? I need to make sure a person like our lan admin or desk top support person can not figure out a way to get to the data. Tony CIA,CISA,CDP,MBA _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus --- Incoming mail has been scanned for viruses and is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02 --- This email has been scanned for viruses and is considered Virus-Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02 ------------------------------------------------------------------- SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1 ------------------------------------------------------------------- SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1 ------------------------------------------------------------------- SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.securityfocus.com/SurfControl-security-basics
Current thread:
- RE: Protect folder data. Nero, Nick (Apr 04)