Network Security While Traveling?

truesaer writes "I'll be spending all of next year backpacking through South America. In the past I've used Internet cafes while away, but this time I plan to bring a netbook and rely primarily on Wi-Fi hotspots. I'll be facing the same issues and risks that business travelers in hotels and airports face, as well as those encountered by millions of other backpackers, gap-year travelers, and students. Since my trip is so long I'll have no choice but to access my banking, credit card, and investment accounts on public networks. I will not have a system at home to connect through. Other than an effective firewall, a patched system, and the use of SSL, what else should I do to protect my information? Keep in mind that many places have very poor bandwidth and latency."

Comments

Good starting point

[MrKaos]

Use Linux.

Run screaming away from Windows

[steveha]

Install Linux on your netbook. Do not trust Windows.

That's my top tip for you right there.

I also use NoScript because I don't trust Javascript. The problem with Noscript is that so many web pages require Javascript to be enabled, so you need to use the Noscript control to permit Javascript. The usual sequence is: Why is this page acting funny? Why is the search feature broken? Oh yeah, it probably requires Javascript; enable it, then wait for the page to reload. So, Noscript is really a bit of a pain. But I use it anyway because I don't trust Javascript.

On my netbook (an Acer Aspire One with a 10.1" screen, 512MB of RAM, 160GB hard drive) I'm using Ubuntu 9.10 and it works great. The only issue I have noted is that if it goes into sleep mode it doesn't wake up; I need to power it down and then up. One of the cool features of Ubuntu 9.10 is that you can have an encrypted home directory; that would be nice for your credit card numbers and other personal data. I installed with this option and I have not noticed any slowdown in using the computer.

To install Linux, get a (cheap!) 1GB USB flash drive, and use Unetbootin to make a bootable installer for your chosen Linux distro. Ideally, you should use a flash drive with a physical write-protect switch; these are not common but do exist. Then, after you have set up the netbook, pack that flash drive in your luggage; if you ever need to you can re-install Linux from scratch. Or if your laptop is lost, stolen, or destroyed, you can get a new one and set it up again with Linux. But you will know the Linux installer on that USB key is a trustable Linux, especially if you have it write-protected.

By the way, when you set up Linux, be sure to put your data files one a separate partition from everything else. In other words, have two partitions: "/" (for everything but your data files) and "/home" (for your data files). If you ever do need to re-install your whole OS (due to horrible crash, or somehow getting 0wned) it is really fast to just say "go ahead and wipe the whole / partition, but don't format /home". You can completely re-install Linux in this way, losing no data, faster than you can run the Windows installer in "recovery" mode to try to fix a broken/0wned Windows install.

As others have suggested, you might want to keep your data "in the cloud", such as by using a webmail client. The major advantage is that if your laptop is lost or stolen, your data is all still where you left it; you just need a new netbook/laptop.

I'm sure you will bring a digital camera. A 160 GB hard disk can store a whole bunch of photos, and when you are in an area with good WiFi, you can backup your photos to the cloud somewhere. In future years you will treasure those photos. Looking over your photos you will say "Oh wow, I forgot all about that day; but this photo just reminded me!" Unless you tirelessly record everything in a diary, the photos will be crucial to reminding you of your trip. (And the netbook can record your diary, either by you typing it, or by you talking to the microphone. A netbook is handy no matter how you look at it.)

If you ever use a computer in a cyber cafe, just assume that a keylogger is recording your password, credit card numbers, etc. (It doesn't even need to be a software keylogger, it could be hardware!) Bringing your own computer is a good move. Using Linux to avoid your computer being 0wned is also good move.

steveha