Tag Info

New answers tagged


When you boot off a USB, the only files that are running are the ones on your flash drive. But, you might have to worry about the possibility of malware that can infect your CPU or RAM BIOS.


A combination of two USB drives and a hub might be a good solution Use the write-protected USB drive for any data that you dont want to get sabotaged and the other USB drive for anything you want to save and take with you home.


If you are only concerned about write operations, you could buy a cheap SD card and a USB reader. SD cards have a physical "Write protect" switch on the side. You may be able to find physically write-protectable USB drives too. If all fails, use a good ol' DVD.


Seems pretty obvious that you could just disconnect the network cable. Plug in the USB, Dump/Upload files, eject the USB, then reconnect to the network. This should prevent them from having any kind of access to the drive (read or write) Unless they own the computers AND have some mechanism to download everything on any connected usb device (which is ...


You effectively can't. If you're on somebody else's machine and they have administrative rights to it, then that's the game. The quite fancy answer be mandatory access control systems like SELinux which hold a concept higher than root that would at least require a reboot and direct system access to change the settings.


You’re misunderstanding what BitLocker is supposed to protect against. The goal of BitLocker is to protect your data from cold boot attacks (as explained in a Technet blog entry). When you unlock a volume protected by BitLocker, the system gains access to the keys necessary to decrypt the drive and behaves as if it was a regular drive. That is necessary to ...


Once you enter your password the drive behaves just like any other unencrypted drive, as the encryption becomes transparent to the OS. If you share your drive and other users/computers have the required permissions to access it, they will be able to do so and won't even know the drive was encrypted. Full disk encryption is designed to protect from offline ...


I use programs in my computer such as the commercial Faronics Anti-Executable and the free version of NoVirusThanks EXE Radar. These programs whitelist all the existing programs in your computer at setup and then for every new program that executes they ask you for permission to allow execution. In other words you have control over the future program ...

Top 50 recent answers are included