Re: The VA Stolen Laptop - Lessons Learned

["Saqib Ali" <docbook.xml () gmail com>]

Hello,

If you don't mind can I have the name of the company?

There are other vendors that produce such solutions in form of a IDE
card which is not suitable for a notebook drive.

ce-infosys has a PCMCIA card that performs Full Disc Encryption and be
used in a notebook:
http://www.ce-infosys.com.sg/CeiProducts_CryptCard.asp


On 9/20/06, intel96 <intel96 () bellsouth net> wrote:
> I just meet with a company in Washington, DC with a company from Canada
> that has developed a hardware-based encryption module for computer
> systems.  They are a start-up but have hooks into some of the laptop
> manufactures, which plan to offer the device to customers as a option.
> I have not tested the equipment,, but plan too soon.  The device uses
> AES-256 or 3-DES.  It also creates a mirror of the drive, which can be
> used for failover operations.    There is even a self-destruction piece
> being added.
>
> Saqib Ali wrote:
> > Clement,
> >
> > I just checked the True Crypt's website and it says that it only
> > supports partition but NOT the whole disc encryption. With whole disc
> > encryption everything including the OS is encrypted regardless of the
> > partition layout.
> >
> >
> >
> > On 9/20/06, Clement Dupuis <cdupuis () cccure org> wrote:
> >> Wikipedia unfortunately is not always up to date
> >>
> >> Truecrypt will do full disks and even allow you to have an encrypted disk
> >> without any partitions on it.
> >>
> >> Take care
> >>
> >> Clement
> >>
> >>
> >> -----Original Message-----
> >> From: listbounce () securityfocus com
> [mailto:listbounce () securityfocus com] On
> >> Behalf Of Saqib Ali
> >> Sent: Wednesday, September 20, 2006 12:35 AM
> >> To: security
> >> Cc: security-basics () securityfocus com
> >> Subject: Re: The VA Stolen Laptop - Lessons Learned
> >>
> >> Caution: TrueCrypt is NOT a Full Disc Encryption (FDE) utility. I can
> >> encrypt partitions but not the whole Disc. See:
> >> http://en.wikipedia.org/wiki/FDE
> >>
> >> On 9/18/06, security <security () xentek net> wrote:
> > TrueCrypt (http://www.truecrypt.org/) is the one I recommend to
> > clients. Its Open-Source and supports Linux and Windows.
> >
> > -em
> >
> >
> >
> >
> > On Sep 17, 2006, at 10:27 PM, MandommGmail wrote:
> >
> > > There are many free whole disk encryption softwares that are
> > > around. Please google for CompuSec. I am personally using it. It is
> > > free for commercial and personal usage.
> >
> > > I believe its just right for my usage.
> >
> > > Alex
> > > ----- Original Message ----- From: "George Toft"
> > > <george () georgetoft com>
> > > To: <security-basics () securityfocus com>
> > > Sent: Saturday, September 16, 2006 1:42 AM
> > > Subject: Re: The VA Stolen Laptop - Lessons Learned
> >
> >
> > >> There are many whole-disk encryption products that make this a
> > >> trivial exercise.  Even at $100-150 per seat, the price is cheaper
> > >> than a lawsuit and bad publicity.
> > >>
> > >> George Toft, CISSP, MSIS
> > >> My IT Department
> > >> www.myITaz.com
> > >> 480-544-1067
> > >>
> > >> Confidential data protection experts for the financial industry.
> > >>
> > >>
> > >> evb wrote:
> > >>>  :1. Encrypt all data on mobile computers/devices which
> > >>> carry :agency data unless the data is determined to be non-
> > >>> sensitive, :in writing, by your Deputy Secretary or an individual
> > >>> he/she :may designate in writing : And does "data" include
> > >>> operating system files, log files, cab files,
> > >>> drivers, etc., or does it only include eg xls, doc, pdf and wpd
> > >>> files, etc.?
> > >>> How has Bush defined "data"?  Thx,
> > >>>
> > >>> Eric
> > >>> --------------------------------------------------------------------
> > >>> -------
> > >>> This list is sponsored by: Norwich University
> > >>>
> > >>> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > >>> The NSA has designated Norwich University a center of Academic
> > >>> Excellence in Information Security. Our program offers
> > >>> unparalleled Infosec management education and the case study
> > >>> affords you unmatched consulting experience. Using interactive e-
> > >>> Learning technology, you can earn this esteemed degree, without
> > >>> disrupting your career or home life.
> > >>>
> > >>> http://www.msia.norwich.edu/secfocus
> > >>> --------------------------------------------------------------------
> > >>> -------
> > >>>
> > >>>
> > >>>
> > >>
> > >> ---------------------------------------------------------------------
> > >> ------
> > >> This list is sponsored by: Norwich University
> > >>
> > >> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > >> The NSA has designated Norwich University a center of Academic
> > >> Excellence in Information Security. Our program offers
> > >> unparalleled Infosec management education and the case study
> > >> affords you unmatched consulting experience. Using interactive e-
> > >> Learning technology, you can earn this esteemed degree, without
> > >> disrupting your career or home life.
> > >>
> > >> http://www.msia.norwich.edu/secfocus
> > >> ---------------------------------------------------------------------
> > >> ------
> >
> >
> > > ----------------------------------------------------------------------
> > > -----
> > > This list is sponsored by: Norwich University
> >
> > > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > > The NSA has designated Norwich University a center of Academic
> > > Excellence in Information Security. Our program offers unparalleled
> > > Infosec management education and the case study affords you
> > > unmatched consulting experience. Using interactive e-Learning
> > > technology, you can earn this esteemed degree, without disrupting
> > > your career or home life.
> >
> > > http://www.msia.norwich.edu/secfocus
> > > ----------------------------------------------------------------------
> > > -----
> >
> >
> > >> >
> > >> >
> > >>
> > ---------------------------------------------------------------------------
> > This list is sponsored by: Norwich University
> > >> >
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The NSA has designated Norwich University a center of Academic Excellence
> > in Information Security. Our program offers unparalleled Infosec
> > >> management
> > education and the case study affords you unmatched consulting experience.
> > Using interactive e-Learning technology, you can earn this esteemed
> > >> degree,
> > without disrupting your career or home life.
> > >> >
> > http://www.msia.norwich.edu/secfocus
> > >> >
> > >>
> > ---------------------------------------------------------------------------
> > >> >
> > >> >
> > >>
> > >>
> > >> --
> > >> Saqib Ali, CISSP, ISSAP
> > >> Support http://www.capital-punishment.net
> > >> -----------
> > >> "I fear, if I rebel against my Lord, the retribution of an Awful Day
> > >> (The Day of Resurrection)" Al-Quran 6:15
> > >> -----------
> > >>
> > >>
> > ---------------------------------------------------------------------------
> > >> This list is sponsored by: Norwich University
> > >>
> > >> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > >> The NSA has designated Norwich University a center of Academic
> > Excellence
> > >> in Information Security. Our program offers unparalleled Infosec
> > management
> > >> education and the case study affords you unmatched consulting
> > experience.
> > >> Using interactive e-Learning technology, you can earn this esteemed
> > degree,
> > >> without disrupting your career or home life.
> > >>
> > >> http://www.msia.norwich.edu/secfocus
> > >>
> > ---------------------------------------------------------------------------
> > >>
> > >>
> > >>
> > >>
> >
> >


--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15
-----------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------