Please subscribe to the mailing list before posting a message. To
subscribe please send an email to: [EMAIL PROTECTED] or
visit http://www.quantumcrypto.de
--- Begin Message ---
I'm not currently a Mac user, but it seems to me you have two choices
depending on whether you want to back up in plaintext or ciphertext:
1) Plaintext: Create a second FileVault image on the backup drive and mount
it when you need to make a backup of your home folder. Thus, you copy the
plaintext of your protected files into a different FileVault, then dismount
it.
2) Ciphertext: Dismount the FileVault volume on your laptop and copy it to
the backup disk in encrypted form. This would seem to require performing the
backup from a different account if you've chosen to elegantly encipher the
contents of your Home folder (unless the Mac lets you use your account in
that state, but I wouldn't know).
Another popular software solution is TrueCrypt (http://www.truecrypt.org/).
Finally, you could use FileVault on the Mac and back up to an external drive
with hardware encryption, such as a RocStor RocSecure:
http://www.rocstor.com/Products/products-search.cfm?category=Mobile-Encrypte
d
Any combination of the above is possible in general; the security method
used for the external drive need not be exactly the same as for the laptop
drive. If your external is a "bootable clone" of your Mac's drive, then
shouldn't any FileVault volume be cloned intact?
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> On Behalf Of Simson Garfinkel simsong-at-acm.org |Donald Welker|
> Sent: Wednesday, May 14, 2008 12:14 AM
> To: ....................
> Subject: Re: [FDE] Traveler's User Case: Backup vs. Security?
>
> I travel with a MacBook Pro using FileValut. FV is great. The backup
> is accessible if you boot from a backup drive; you just need to mount
> it and enter your FV password. Normally that is the same as your login
> password.
>
> You can also create an encrypted image on your external bootable drive
> using Disk Utility.
>
> On May 13, 2008, at 6:58 PM, Carta Diem wrote:
>
> > I've been doing a lot of traveling, and I've been looking for a
> > storage solution that suits my needs. I don't seem to be able to
> > find an ideal solution, and I don't think I'm in the minority -
> > although I could be wrong.
> >
> > Here is what I need:
> >
> > I travel with a notebook computer.
> > That is also my main computer.
> > Everything on it is critical.
> > Everything on it needs to be secure.
> > If the notebook fails for any reason, I need immediate, secure
> > access to that information.
> >
> > Luckily, I use a Macbook Pro, so I can create a bootable clone on an
> > external 2.5" drive that I can boot any Mac from, wherever I may
> > be. All I need to do is carry a small 2.5" firewire drive with me.
> >
> > The problems are:
> > (1) The MacBook Pro is not really secure. I don't use FileVault
> > (their internal encryption solution), even though it elegantly only
> > encrypts the contents of my Home folder, because it creates a
> > separate disk image that could become corrupt during backup and
> > that, apparently, you cannot access from a backup drive.
> >
> > (2) The external bootable drive has no security at all. None. So
> > although it is bootable from any Mac (and I would have to
> > authenticate at boot, using any Mac), to my knowledge it is still
> > completely readable from any PC or Mac, should I simply connect it
> > using a firewire or USB. That is unacceptable.
> >
> > Am I missing something? Do you guys have a solution in the works?
> > It would seem to me that many travelers have the same needs as me,
> > but maybe in the corporate world they use thin clients or don't
> > travel around with critical information. (And the truth is, I'm not
> > carrying any state secrets. I just don't want my personal
> > information to fall into anyone's hands, full stop!)
> >
> > Thanks in advance...
--- End Message ---
_______________________________________________
FDE mailing list
[email protected]
http://www.xml-dev.com/mailman/listinfo/fde
