What do you do to protect your laptop’s data on open networks and in case of theft?

September 28, 2009 at 7:58 pm
by Gina Trapani

Public Twitter replies to @ginatrapani's tweet:


VerbalKint: also 4 Mac: set login to "Display login window as name & pass" in sys prefs. That way at login I can use Yubikey as 2nd factor
VerbalKint: 4 physical exposure (theft, loss, tampering, etc) I use TrueCrypt entire drive encryption for my PC and FileVault on my Mac...
Annaleen: Always use SSL for logging into services. But if I'm being really paranoid, like at a hacker con, I do everything over SSH.
kwestin: http://www.gadgettrak.com/products/pc/
incanus77: I use a SOCKS proxy via my app Meerkat using an SSH account with my web host. SysPref change makes Safari use it.
declan: vpn for open networks (like the one at this hotel) and Windows protection for theft and not keeping sensitive data
norcross: I use Laptop Lock, and don't save anything 'private' directly to the machine
pfinette: On the Mac - simply use an encrypted DMG for your data. Works perfectly, is free and pretty darn secure. :)
ubuntutweets: RT: I use linux (ubuntu). I also have a SSH server at hope and will use a SOX proxy through it. http://bit.ly/2Mh0kk
ChrisKubica: Thanks so much for saying "For a blog post". I was the guy who got crabby at u the other day about "disclosure" :)
pmhesse: make sure everything sensitive goes over SSL - email, web, etc. and full disk encryption - truecrypt / pgp / etc.
stevenhaddox: I have FileVault enabled for my MBP as well as utilize the iPredator VPN when I'm not on my own WPA2 network. #paranoid
halophoenix: On my PC laptop: VPN in open networks, whole disk encryption. On my Mac: VPN, FileVault. Hope I don't forget the master PW!
mattmanuel: PGP encrypt the entire hard drive to protect from theft
sarat: Aint doing anything to protect my data.I think OS and AV program should block intruders, we're paying them 4 security as well
danielzev: theft of your laptop or theft of your data?
strawp: I use https for google apps and facebook, also a heavy ssh user anyway
foltaggio: ssh tunnel
VikiTech: Something from Personal experience.Disable the feature to connect to WiFi Hot-Spots, automatically-Only manual conn's allowed.
jtimberman: https/ssl, vpn, secured proxy, encrypted data, leverage cloud services for external storage (gmail, github)
jvdgoot: Honestly? Nothing other than password-protecting my shared folders.
warrenfree: I protect my laptop with which if I ever lost my laptop would eradicate all the data :)
k_nitin_r: I carry my laptop with the shoulder strap of the case at all times to prevent theft. I don't have a plan B though :-(
Penguirl: I use OS X FileVault on my notebook for theft security, keep firewall on and sharing services off for network security.
jimbergman: For public networks I use a firewall locked down, make sure I use https sites, and VPN home and out again if I have to.
alpha1beta: limitedly. just any important documents. homework and blogs posts who cares really. Always have backups too.
mediumguy: truecrypt - it worth visiting the site even if you don't use it for the sheer level of tech paranoia in their methods
kristibarrow: Nothing - that's prob really bad huh...
kyleslattery: I just make sure not to log into any bank sites, and I try to avoid unsecured networks.
jwithy: Re: wifi, avoid banking sites and cross my fingers. I also rarely save passwords in browsers, etc., on my laptop.
david_o_connell: Mozy for backup in case of theft..
loudandskittish: Nothing. Anyone raids my laptop, all they're going to find is evidence of how boring I am
ted_avery: I rely on Win 7's "Public" network setting, locks everyone out. Friend uses a laptop erasing/tracking prog, forget name though.
rowelld: encrypt your data!
clayben: I use TrueCrypt and have all my important work stuff on a truecrypted volume, and lock the computer with a strong password.
Heinlein_Fan: for open network just having a firewall and only putting passwords into/using SSL sites usually is enough.
Heinlein_Fan: whole disk encrypt (pgp disk, truecrypt) for theft/loss, open network can do SSH tunnel, but overkill unless truly paranoid
najeebmirza: will need more than 140 chars, drop me an email at naj@jeebz.com and I'll give you some ideas on... http://ff.im/8TuUy
najeebmirza: will need more than 140 chars, drop me an email at naj@jeebz.com and I'll give you some ideas on security :-)
hockeybrad: My protection against data loss with a laptop theft is that I use a 16Gig flash drive for all documents, settings, bookmarks.
Lauren_Hamburg: sadly...nothing :(
bithaze: Nothing, actually. Bad, I know, but it's rare I'm on a public network. Backup: Slowly implementing a NAS I built this summer.
scottgagon: Comodo personal firewall and don't leave it alone
ravik: For open networks, I've started using an ssh tunnel to my home router over port 443. Here's a guide: http://bit.ly/35wL8H
flamsmark: Though security 'tips' are legion: TrueCrypt, HTTPS, VPN, SSH, Tor, GPG; above all: don't be dumb, and use a good threat model.
patrichards: truecrypt whole drive encryption
sublimal: only store data in the cloud, ie: use a laptop as a dumb terminal
glaeven: dont send anything worth stealing on an open network. Never let your laptop out of sight. simplicity rules.
dkblinux98: to protect laptop on open networks VPN to a secure network and send Internet through the VPN. Use whole hard drive encryption.
ultrafredde: Encryption of the harddisk, firewall only allowing ssh-in with keys when neeeded - of course on a Linux/Mac laptop, no Windows.
AndreAguiar: I VPN back to my he router running dd-wrt firmware. Atleast this way my wireless connection is secure
GuyBoazy: firewall.clean websites and prayer
beeare: For security I use Hotspot Shield http://tr.im/A4ul. Don't have a plan for loss or theft :(
jcenters: Keep all private data in Truecrypt containers. Unsecured dummy account with Prey installed to track if stolen.
cronosin: In case of theft, I have a laptop lock, and for data on open networks, I just don't do anything that involves personal data.
awaddell: http://www.truecrypt.org/ for disks http://www.openvpn.net/ and Viscosity client for Mac for all traffic
dman92: Not store things on my laptop. My desktop has 2TB of storage, my laptop has 100 gb. Just use Dropbox for essentials. Encrypt.
individual8: S3
davidamcclain: "What do you do to protect your laptop's data on open networks and in case of theft?" Abstinence!
419onscene: Encrypt the HD with TrueCrypt. Use a VPN to a secure home net, Google's VPN in SF http://is.gd/3LOqw
gamefreak613: In case of theft, I use LoJack for Laptops. Data wise I back up online and encrypt what's on the HD
ninjahippie: Sensitive info encrypted with truecrypt. Network connections either SSL, IP/sec or SSH tunnel.
JGBlake: I set the firmware password (on Mac) and also keep all confidential data on a Truecrypt volume.
bobatchison: theft protection = Truecrypt whole disk & preboot encryption. Open networks I pray ;-) (or avoid)
enigma_0Z: (3) STRONG passwd http://bit.ly/2gdZiW (4) Don't lose sight of the laptop (5) watch for shoulder surfers http://bit.ly/3i7gpH
enigma_0Z: (1) use SSL anywhere possible on the web. (2) AES encrypt personal data in office documents (Built into openoffice.org)
Cheese_Rat: Keeping personal data either on the Google cloud or on my home network. Only have what I need on my portable devices.
DamianManning: in case of theft I use TrueCrypt for whole drive encryption
ttrygveRO: Have backups & hope I don't need them. Anything more is just overkill for me, though obviously not for everyone.
PabloZ: i keep the firewall on and when in doubt, i use a VPN like ipredator, or the corporate VPN in my work laptop.
triados: truecrypt whole drive... Just don't tell IT
jasontm1: Important files in an encrypted DMG. Create an alias of regularly used files outside of the dmg..will prompt for pw when needed
Phaelon74: software firewall, anti-spywware software, white listing and green zones.
talung: I use linux (ubuntu). I also have a SSH server at hope and will use a SOX proxy through it.
barleyguy: I store my documents directory on a USB key, and only insert it when I feel like it's a somewhat secure environment.
mariano_axicom: Hotspot Shield + Orbicule
01bitbybit01: Truecrypt locally, VPN for open networks. That's my theoretical answer anyway. Just got back from a 2 month roadtrip w/only G1!

Since no one mentioned it: Hamachi. That, TrueCrypt, and KeePass keep all my data safe. Also, if I’m feeling very secretive, I’ll forgo Wi-Fi, and tether to my phone instead.

Mike Cerm [+18]
Sep 28 09 at 8:37 pm

I don’t tweet, so I guess I’m too untimely to participate in your survey. I don’t feel like going through another epicycle in the evolution of the Intertubes, as Twitter recapitulates every triviality like increasing noise-to-signal, trolls, spambots, reputation-inflation, buying followers (aka “hits”), and gaming Twitter search engines. Give me the Usenet flame wars!

Kent [+2]
Sep 28 09 at 9:35 pm

@Kent: You’re not too untimely, you’re participating by just commenting here! Forgive me, I’m testing out ways to run quick surveys via Twitter and publish the results here for posterity’s sake AND for 140+ further discussion in the comments

Gina Trapani [+139]
Sep 28 09 at 10:15 pm

I know this doesn’t answer the question, but I’m a big fan of using web apps, and NOT carrying around your entire life on a laptop. My workflow is to have a home computer, with good security software, hard data on secondary drives, not system drives, frequent backups via Syncback. All sensitive data in Keepass. Dropbox & LogMeIn for access to my entire computer on the go. If I’m using another PC, I’ll always use LogMeIn to visit important websites, like banking/webmail, using my home PC.

Jason Barone
Sep 30 09 at 8:28 pm
Comments are closed. Thanks for reading!