> Would some people like to review disk encryptors that they are 
> familiar with?

I use the Digital Persona U.are.U system.  It is a fingerprint biometric
access system which includes (if you get the Deluxe version) the Private
Space disk encryption software.  You actually reserve up to 900 MB of
disk space for your "private space," which is then encrypted with
128-bit Blowfish encryption.  It a timeout feature, whereby the space is
automatically closed after a user-configurable time period.  You can
turn off password overrides, thereby reducing the threat of attack by
keyboard sniffer.  Caveats: source code is not available for inspection,
and it might be possible for someone to lift a latent fingerprint from
your work area and make a rubber finger.  The device supposedly has some
type of "live finger" detector though.

You also need to be concerned with various "droppings" in your Windows
environment.  For example, if you visit sensitive web sites, trails of
where you've been will be all over your hard drive.  A product called
Window Washer will take care of this.  Then there's the ever-present
temptation to save things to "My Documents."  You might want to edit
your registry and change all occurances of "C:\My Documents" to "S:\My
Documents", where S: is your secure drive.  Then make your C:\My
Documents read only.

I think the optimum solution, short of someone writing a secure OS, is
to have a small boot drive that only has the OS installation on it.
Install everything after the initial configuration to your secure drive.
Periodically run Find Files by date to search for stuff that rogue
programs may have deposited on your C:\ drive.

Then there's the registry...

--PH
__________________________________________
Get Your Free Email from http://www.hotml.com

Reply via email to