Security Basics mailing list archives

RE: Laptop Encryption & Hibernation


From: "Philip Wagenaar" <p.wagenaar () accon nl>
Date: Fri, 24 Sep 2004 09:15:06 +0200

Bios password protection is just a something that will slow down someone
trying to access the data for only a few minutes. Bios passwords can be
easily reset, so they should never be used as realistic securitymeasure.

I would think that PGP dekstop would work well with Windows XP and
hibenation.


Met vriendelijke groet,
 
Philip Wagenaar
Junior Projectleider ICT
 
AccoN Accountants & Adviseurs
ICT Project Bureau
Postbus 5090
6802 EB Arnhem
The Netherlands
 
tel.: +31 (0)26-3842384
fax.: +31 (0)26-3630222
mobile: +31 (0)6-25388935
MSN/E-Mail: p.wagenaar () accon nl
http://www.accon.nl

-----Oorspronkelijk bericht-----
Van: Kevin Snively [mailto:kevinsnively () comcast net] 
Verzonden: woensdag 22 september 2004 1:58
Aan: James McGee; Security Basics[List]
Onderwerp: Re: Laptop Encryption & Hibernation

How about something as simple as a bios password? Works for me.

reguards,
Kevin Snively
The HelpDesk Inc R
615-781-1922 (office)
615-582-0877 (Mobile)

----- Original Message -----
From: "James McGee" <J.McGee () syn-tec com>
To: "Security Basics[List]" <security-basics () securityfocus com>
Sent: Sunday, September 19, 2004 10:28 AM
Subject: Laptop Encryption & Hibernation


Hi

We are trying to find a centrally manageable solution that we can deploy
to 2000 Laptop users.

The majority of our users also make frequent use of the hibernation
function within WinXP.

The problem lies with the fact that we can't seem to get a hard drive
encryption tool that will enable users to continue to use the
hibernation function.

We have 2 options that I can recommend; bin the hibernation
functionality or use a file and folder level encryption product, neither
of which are the ideal solution for the situation.

I am sure we are not the first to come across this problem, so I was
wondering how anyone else has overcome it.

Apparently the people who make entire hard-drive encryption products are
aware of the issue and are working with MS to get it sorted, but how
long that will take is anyone's guess.

Any help or advice is appreciated..

Thanks



JM



---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.766 / Virus Database: 513 - Release Date: 9/17/04


---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------


__________ NOD32 1.876 (20040924) Information __________

This message was checked by NOD32 antivirus system.
http://www.nod32.com



##################################################################

Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde.
De informatie hierin is vertrouwelijk, zodat het derden niet is
toegestaan om daarvan kennis te nemen of dit te verstrekken aan
andere derden. Indien u dit e-mail bericht ontvangt terwijl het
niet voor u bestemd is, verzoeken wij u contact op te nemen met
de afzender en de informatie te verwijderen van iedere computer.
Bij voorbaat dank. 

==================================================================

The information transmitted in this e-mail is intended only for
the person or entity to which it is addressed and contains
confidential information. Any review, retransmission or other
use by persons or entities other than the intended recipient is
prohibited. If you received this in error, please contact the
sender and delete the material from any computer. Thank you. 

##################################################################

#####################################################################################
This e-mail message has been scanned for Viruses and Content and cleared 
by MailMarshal
#####################################################################################

---------------------------------------------------------------------------
Computer Forensics Training at the InfoSec Institute. All of our class sizes
are guaranteed to be 12 students or less to facilitate one-on-one
interaction with one of our expert instructors. Gain the in-demand skills of
a certified computer examiner, learn to recover trace data left behind by
fraud, theft, and cybercrime perpetrators. Discover the source of computer
crime and abuse so that it never happens again.

http://www.infosecinstitute.com/courses/computer_forensics_training.html
----------------------------------------------------------------------------


Current thread: