Slashdot Mirror
Just How Paranoid Are You?
An anonymous reader writes "We all understand the need for security in a corporate environment. Personal computers, however, typically don't have nearly the amount of sensitive information (or it's at least less damaging if found). How far do you go to protect your computer? I recently went overboard on securing my information (at least as secure as Windows XP can be). I have a hardware firewall (GTA GB500), 30 character password, and all remotely personal information stored on a 256bit AES encrypted volume. How far do you go to protect your information against 'Big Brother' or even your family/friends?"
I lock the door to my house when I leave home
did you forget to take your meds?
Is there any point in trying to protect against BIG Brother really? I mean, if they WANT to get in, they could just storm your house and take away your PC. If the want they could slience you too. So why go so over the top?
Another idea is to make sure any sensitive infomation doesn't have any means of escape, hell build a machine with no network, and no floppy drive or cd writer. Take out the usb slots too, then maybe a passer by wont be able to access it.
30char password? Whats the point? I mean you can still brute force it, and even without doing this, theres still methods such as removing the hdd drive, mounting it under anther computer and 99% time, you got instant access to everything.
People need to learn, senstive data is only protected in ONE place, inside our minds.
Keep it there and no one can snoop it.
- http://www.milkme.co.uk
The only things I really consider private on my computer are financial information. Receipts, credit card numbers etc. So yes I do go to some trouble protecting that, but for the most part I couldn't care less if my information was read illegally. There's just nothing of consequence there.
If someone actually compromised and trashed my PC on the other hand, I'd lose time in rebuilding it. HoweverI do back up my information regularly, so that's no issue either except being annoyed at the loss of time. (If someone made subtle changes to the information I'd still have older backups, so it would be painful but not unrecoverable).
If you truely need a private information store, it may be worth buying a PC that isn't net connected and that is physically secured. For the average person unless you're doing something illegal or have sensitive work material at home (arguably not a good idea anyway), why would you need a super-unbreakable encrypted PC?
These posts express my own personal views, not those of my employer
Paranoia Quotes
... ?
I was walking home one night and a guy hammering on a roof called me a paranoid little weirdo. In morse code. -Emo Phillips
No matter how paranoid I get, it's never enough to keep up.
The question is not whether I'm paranoid, it's whether I'm paranoid enough.
The truly paraniod are rarely conned.
Doesn't matter if I'm paranoid - they're still after me.
I sincerely believe people talk about me. Mine would be a pretty meaningless existance if they didn't.
Why are some people terrified of "black helicopters" and don't even notice that they are being monitored almost constantly by the whole network of obvious surveilance cameras, credit cards, ATMs, EZpass, company ID/access cards, magazine subscriptions, SSNs, taxes, fees, video rentals, Internet firewall recording, 'cookies',
Paranoia: the belief that someone cares.
Paranoia is the belief in a hidden order behind the visible.
When everyone is out to get you, paranoia is only good thinking.
"Paranoia is knowing all the facts." - Woody Allen
"Paranoia is just another word for longevity." - Laurell K. Hamilton, The Laughing Corpse
"Perfect paranoia is perfect awareness."
"Paranoia is reality seen on a finer scale." - Philo Gant, Strange Days
"The issue is not whether you are paranoid, the issue is whether you are paranoid enough." - Max, Strange Days
"Why are you so paranoid, Mulder?"
"Oh, I don't know. Maybe it's because I find it hard to trust anybody." - Scully & Mulder, The X-Files, "Ascension"
Paranoia strikes deep / Into your life it will creep / It starts when you're / always afraid. You step out / of line, the man come and / take you away.
"I don't agonize over decisions as much these days. The criteria of what's important to me is clear. The insecurity that you feel, and the paranoia that you feel, have been around for a long time -- you know it's a liar because it's been lying to you all along -- every time you start something new. You get used to it, and you sort of go, 'Oh, you're showing up again, well f*** you.'" - John Cusack
Freedom is just a hallucination created by a pathological lack of paranoia.
Paranoia doesn't mean the whole world really isn't out to get you.
If you ever wanted to know what a person with acute paranoia looks like, just keep watching.
I have the power to channel my imagination into ever-soaring levels of suspicion and paranoia.
Paranoia is heightened awareness.
Paranoia is a social disease--you get it from screwing other people.
"Paranoia is the delusion that your enemies are organized." - Arthur D. Hlavaty.
"This is the Nineties, Bubba, and there is no such thing as Paranoia. It's all true." - Hunter S Thompson
"There are two kinds of paranoia: Total, and insufficient. I am both, because if you think you are sufficiently paranoid, you're not." - Guildenstern, Rosencrantz and Guildenstern are Dead
"The truly paranoid are clever enough to not *act* paranoid." - Q, Star Trek: The Next Generation
"When everyone _is_ out to get to you, being paranoid isn't going to help." - Q, Star Trek: The Next Generation
"When did you get so paranoid?"
"When they started plotting against me." - The Paper
"Paranoia is only the leading edge of the discovery that everything in the world is connected." - `The Illuminatus Trilogy'
When you've been through everything I have, paranoia is merely a precaution!
Paranoia is not the belief that everybody's out to get you -- they are. Paranoia is the belief that everybody's conspiring to get you.
The greater the concentration of power, the greater the paranoia it generates about its need to destroy everything outside itself.
I love this job. Nothing like paranoia and neurosis. Who needs a Coke habit? I've got journalism!!
There's something inherently American about paranoia. Given the i
Can we get a "-1 Wrong" moderation option?
Generally, a "hardware firewire" simply means a device dedicated to working as a firewall whereas a "software firewall" means a program running on the computer to be protected. It does not imply that a hardware firewall does not have a software component.
I run both a hardware and a software firewall. If one is compromised the potential intruder finds yet another. My sensitive data is also all encrypted, so even if the intruder breaks the second one he/she isn't likely to get much of value.
Life is short: void the warranty.
This type of discussion really worries me for "single owner" systems.
You have setup a system that will keep people away from the data unless you and only you try to access this. What happens if something happens to you. Your family might need your account numbers if you die, have a stroke, etc.
If you are protecting your child porn stash, then maybe this is the best solution. For things like credit card numbers, on-line banking, etc. you should "escrow" your passwords somewhere so that others can get to them if needed. This could be as simple as a printout of your passwords/accounts in your safe deposit box to having information kept by your lawyer.
Remember that bad things can happen beyond just hackers trying to get data.
And I am not just trolling for karma. My wife just had a friend die suddenly and one of the first questions from the family was "how do we get his laptops password". My anser was, "it depends, if he really secured it well, you are pretty much out of luck".
Good topic. I wish there were more serious posts so the rest of us could gleam some knowledge from the replies instead of the geeks trying to be funny.
We had a couple people leave work recently and they had some data in the computer that we needed to get ahold of. Since my company requires passwords and restrictive permissions on all Windows systems my team was worried that we might never get the docs off the systems.
A co-worker got out the Knoppix security tools distribution ( http://www.knoppix-std.org/ ) CD and was able to bypass the Windows passwords very easily. And it read the hard drive ignoring windows permissions.
If someone wanted a secure system. The Knoppix STD CD could be a good tool to use. Try and see if you or a trusted friend could get in to your PC.
- Bruzer (trying to be constructive)
"Tempt not a desperate man" - Willy S.
Here are some simple policies I practice: /think/ that you /might/ just run a web server.
/does not/ imply encrypt.
1. Unless currently being used, the computer remains at an "off" state.
2. Change your passwords often - how often is up to you, but be reasonable. I suggest 30 to 60 days for medium/low security, and 7 days for higher security. Remember, however, that any password can be breeched - it's just a matter of time.
3. Segregate your network (if you have one) into zones. For Instance - You should not put your wireless access point straight off your network, instead, come off of your firewall in a new "wireless" zone. Terminate all wireless connection into your firewall via ipsec. Do not rely on WEP/WPA.
4. Block all outbound and inbound ports on your firewall, until you need them. I.E, don't just open up port 80 because you
5. Virus scanner.
6. Password protect
Anyway, these are just some basic concepts that are OS independent, and if your average user followed some of these guidelines, we'd all be in a better position.
http://www.accelerateglobalwarming.com