Great Circle Associates Firewalls
(September 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Security of Laptop Computers
From: "H. Morrow Long" <morrow . long @ yale . edu>
Date: Sat, 20 Sep 1997 08:56:30 -0400 (EDT)
To: grey @ highway1 . com, vin @ shore . net
Cc: firewalls @ greatcircle . com

From: "Donald R. Martin" <grey @
 highway1 .
 com>
>My day timer was also stolen - ught, so I bought a Newton.  It's password
>protected, but I wonder if anyone on the list knows any Newton hacks?

1.	If you ever forget the password to your Newton, Apple
	can unlock it for you (for a fee).  I doubt that a thief
	would wish to expose themself by going this route but some
	have real chutzpah.

2.	Be aware that if you back up your Newton to a Mac or PC that the
	files are transferred in the clear and stored on the Mac or PC
	unencrypted (and the same on any backup tapes made from the Mac
	or PC) so that your Notes, Names and Calendar entries are all
	visible.

So, in addition to passwording my Newton I use NDCrypt on my Newton to
encrypt confidential Notes.  You can find it at better Newton shareware
sites.

I also have an (MD4 flavor) S/Key application on my Newton so that I
can travel and have an S/Key calculator that I brought with me and can
trust so that I can use public terminals and PCs at trade-shows such as
InterOp to connect back to home base securely.  I don't want to type in
my secret password on public keyboards to untrusted apps...  Win/CE
should have S/Key (ie. Opie/OTP in MD4, MD5 or SHA1 flavors) as well,
if not now, then soon.

I don't have to put the Newton on the security conveyor belt and it is
easy to turn on and demonstrate to the curious security guard.

I often FedEx ship ahead Notebook PCs and associated paraphenalia (LCD
projectors, network gear, etc.) when I travel just to avoid the
security and theft problems with them (and the loss of overhead or foot
carry-on space).  Just make sure to pay extra for the insurance.

One big problem is what to do with them if you bring a PC with you on vacation.
On a business trip you will likely have it with at all times (I even bring
my notebook PC to nice restuarants for lunch).  But (and this is a real
situation) what do you do in Orlando?  Leave the PC in the hotel room?
Lock it in the trunk of an obvious rental car in the theme park parking lot
(where the temperatures get into the 100s)?  Bring it into the theme park?
In some cases I've given the PC to the hotel front desk for safekeeping,
in others I've locked the notebook in the rental lockers at the theme park
(presuming that no one would ever think that anyone would lock anything so
valuable into the cheesy -- but very public-hide-in-plain-sight -- lockers).

H. Morrow Long, Yale Univ IT ISO -Info Technology Services Info Security Officer
175 Whitney Avenue, New Haven, CT 06520-8276, (203)432-1248(voice) 432-0593(FAX)
INET: http://pantheon.yale.edu/~long/ mailto:Morrow .
 Long @
 yale .
 edu
PAGE: (203)370-3081, (800)347-2574,   mailto:1165469 @
 pager .
 mcb .
 com  PIN# 1165469
PGP 1024/54F9FD69 1997/08/25 fp 97 ED E7 9D 41 8A 90 8C  4D 7C 22 56 80 BA 84 09

Indexed By Date Previous: re: stuff
From: harley @ icrf . icnet . uk
Next: NT communication sub-system diagram
From: Itai Dor-on <silicom @ netvision . net . il>
Indexed By Thread Previous: Re: Security of Laptop Computers
From: "Donald R. Martin" <grey @ highway1 . com>
Next: Re: Auto: Firewalls-Digest V6 #449
From: john . ritchie @ teldta . com (John Ritchie)

Google
 
Search Internet Search www.greatcircle.com