Re: [Fed-Talk] Looking for encrypted hard drives
Re: [Fed-Talk] Looking for encrypted hard drives
- Subject: Re: [Fed-Talk] Looking for encrypted hard drives
- From: Michael Pike <email@hidden>
- Date: Sun, 9 Apr 2006 15:30:16 -0600
On Apr 6, 2006, at 11:42 PM, Amanda Walker wrote:
Does anyone know of good solutions for encrypting data at rest on
Macs (preferably the entire drive)? Unlike my last job, "throw the
drive in a GSA Class 5 safe when you leave the room" is not an
option for me at the moment.
What about just an encrypted drive image? If you have a 160 GB
drive, make two 80GB AES128 encrypted images and mount them as
needed? I know old Filevault had problems, but I've used it since it
came out, and even with poweroutages and everything else, never lost
anything with FileVault as of 10.3.9 on up to 10.4.6.
I've seen fingerprint-protected drives, but I haven't found any
substantial security analyses of them, so I have no way to evaluate
them against my threat model.
I was talking about this last week to our rent-a-cop, I mean, ISSO of
our agency. I think the biometric thing is a mistake. If I'm a
terrorist, I'll cut off your finger and carry it around with me, even
if I get caught, it's an assault charge. He fired back, "Well in
Japan they are developing a fingerprint reader that will take the
finger's temperature as well"... ok, 1) that's Japan, it will take us
15 years to catch up... 2) how hard do you think it is to heat a
finger up? Drug users have been heating urine for years before drug
screening to make their urine the correct temperature when using fake
urine. 3) right now my hands are freezing, you cannot measure a
temperature by using a finger because it is an extremity, and your
body cuts blood circulation to extremities almost immediately if you
get cold, it's the first thing to go with "frostbite".
Iris scanning isn't much better, because they can cut out your eye.
Amanda Walker
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
40gmail.com
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden