Re: The VA Stolen Laptop - Lessons Learned

["Saqib Ali" <docbook.xml () gmail com>]

Clement,

I just checked the True Crypt's website and it says that it only
supports partition but NOT the whole disc encryption. With whole disc
encryption everything including the OS is encrypted regardless of the
partition layout.



On 9/20/06, Clement Dupuis <cdupuis () cccure org> wrote:
> Wikipedia unfortunately is not always up to date
>
> Truecrypt will do full disks and even allow you to have an encrypted disk
> without any partitions on it.
>
> Take care
>
> Clement
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Saqib Ali
> Sent: Wednesday, September 20, 2006 12:35 AM
> To: security
> Cc: security-basics () securityfocus com
> Subject: Re: The VA Stolen Laptop - Lessons Learned
>
> Caution: TrueCrypt is NOT a Full Disc Encryption (FDE) utility. I can
> encrypt partitions but not the whole Disc. See:
> http://en.wikipedia.org/wiki/FDE
>
> On 9/18/06, security <security () xentek net> wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > TrueCrypt (http://www.truecrypt.org/) is the one I recommend to
> > clients. Its Open-Source and supports Linux and Windows.
> >
> > - -em
> >
> >
> >
> >
> > On Sep 17, 2006, at 10:27 PM, MandommGmail wrote:
> >
> > > There are many free whole disk encryption softwares that are
> > > around. Please google for CompuSec. I am personally using it. It is
> > > free for commercial and personal usage.
> > >
> > > I believe its just right for my usage.
> > >
> > > Alex
> > > ----- Original Message ----- From: "George Toft"
> > > <george () georgetoft com>
> > > To: <security-basics () securityfocus com>
> > > Sent: Saturday, September 16, 2006 1:42 AM
> > > Subject: Re: The VA Stolen Laptop - Lessons Learned
> > >
> > >
> > >> There are many whole-disk encryption products that make this a
> > >> trivial exercise.  Even at $100-150 per seat, the price is cheaper
> > >> than a lawsuit and bad publicity.
> > >>
> > >> George Toft, CISSP, MSIS
> > >> My IT Department
> > >> www.myITaz.com
> > >> 480-544-1067
> > >>
> > >> Confidential data protection experts for the financial industry.
> > >>
> > >>
> > >> evb wrote:
> > >>>  :1. Encrypt all data on mobile computers/devices which
> > >>> carry :agency data unless the data is determined to be non-
> > >>> sensitive, :in writing, by your Deputy Secretary or an individual
> > >>> he/she :may designate in writing : And does "data" include
> > >>> operating system files, log files, cab files,
> > >>> drivers, etc., or does it only include eg xls, doc, pdf and wpd
> > >>> files, etc.?
> > >>> How has Bush defined "data"?  Thx,
> > >>>
> > >>> Eric
> > >>> --------------------------------------------------------------------
> > >>> -------
> > >>> This list is sponsored by: Norwich University
> > >>>
> > >>> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > >>> The NSA has designated Norwich University a center of Academic
> > >>> Excellence in Information Security. Our program offers
> > >>> unparalleled Infosec management education and the case study
> > >>> affords you unmatched consulting experience. Using interactive e-
> > >>> Learning technology, you can earn this esteemed degree, without
> > >>> disrupting your career or home life.
> > >>>
> > >>> http://www.msia.norwich.edu/secfocus
> > >>> --------------------------------------------------------------------
> > >>> -------
> > >>>
> > >>>
> > >>>
> > >>
> > >> ---------------------------------------------------------------------
> > >> ------
> > >> This list is sponsored by: Norwich University
> > >>
> > >> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > >> The NSA has designated Norwich University a center of Academic
> > >> Excellence in Information Security. Our program offers
> > >> unparalleled Infosec management education and the case study
> > >> affords you unmatched consulting experience. Using interactive e-
> > >> Learning technology, you can earn this esteemed degree, without
> > >> disrupting your career or home life.
> > >>
> > >> http://www.msia.norwich.edu/secfocus
> > >> ---------------------------------------------------------------------
> > >> ------
> > >
> > >
> > > ----------------------------------------------------------------------
> > > -----
> > > This list is sponsored by: Norwich University
> > >
> > > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > > The NSA has designated Norwich University a center of Academic
> > > Excellence in Information Security. Our program offers unparalleled
> > > Infosec management education and the case study affords you
> > > unmatched consulting experience. Using interactive e-Learning
> > > technology, you can earn this esteemed degree, without disrupting
> > > your career or home life.
> > >
> > > http://www.msia.norwich.edu/secfocus
> > > ----------------------------------------------------------------------
> > > -----
> > >
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.3 (Darwin)
> >
> > iD8DBQFFDzm4j8o5VXXdUSwRApAlAKC0bInXTiPEynMgG0ZAU3gKCv85DgCgoULH
> > WWHDAaemhW9Ht0nHDUpztyc=
> > =iLC3
> > -----END PGP SIGNATURE-----
> >
> >
> ---------------------------------------------------------------------------
> > This list is sponsored by: Norwich University
> >
> > EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> > The NSA has designated Norwich University a center of Academic Excellence
> > in Information Security. Our program offers unparalleled Infosec
> management
> > education and the case study affords you unmatched consulting experience.
> > Using interactive e-Learning technology, you can earn this esteemed
> degree,
> > without disrupting your career or home life.
> >
> > http://www.msia.norwich.edu/secfocus
> >
> ---------------------------------------------------------------------------
> >
> >
>
>
> --
> Saqib Ali, CISSP, ISSAP
> Support http://www.capital-punishment.net
> -----------
> "I fear, if I rebel against my Lord, the retribution of an Awful Day
> (The Day of Resurrection)" Al-Quran 6:15
> -----------
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> ---------------------------------------------------------------------------


--
Saqib Ali, CISSP, ISSAP
Support http://www.capital-punishment.net
-----------
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15
-----------

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------