bitunlocker

So you’ve got a Mac or a Windows box with disk encryption and you’re feeling pretty good about your data’s safety. Bitlocker on Vista and File Vault (developed for the Depart of Defense even) on OS X put you at ease with its promises of using some super hard encryption scheme to defeat. The only way anyone’s getting in is via a key. Guess what? Hackers now can get that key.

A video on YouTube demonstrates just how easy it is to retrieve the very key that unlocks your hard drive. From start to finish, the video shows the retrieval of a laptop, the sniffing of a key, and then the opening of all the “protected” files. Just like that.

Now granted, the hacker will need physical contact with your computer in order to grab your key; however, this isn’t that reassuring if you think about it. In recent months, there has been a slew of reports of lost laptops from not just business professionals, but from government agencies such as the FBI, CIA, and of those in Congress. These laptops are in danger of losing very important and highly classified data. If enemies of the state are able to obtain such a nugget, it’s no telling what could result from the breach.

Again, the video does demonstrate a small window of opportunity in data retrevial; however, in our busy lives, it is easy to lose track of our laptops for a few minutes. That’s just enough time for someone to simply walk by and grab it without you even knowing.

The easiest and best way to protect yourself is to insure your laptop is OFF and not in standby when in public. Make sure it has been off for at least 30 minutes prior to placing yourself in a vulnerable situation. These two measures alone will greatly reduce the chance of the key residing in your memory and thus keep your data safe.


One Response to “Encrypted Mac, Windows, and Linux Hard Drives Are Not Safe From Thieves Prying Eyes”

  1. clarus Says:

    I don’t use system wide encryption. Instead I put sensitive data into encrypted disk images, one for each project. From what I can tell an attacker would, at most, be able to retrieve passwords for images that had been opened in the current session. All others would remain secure.