33 reputation
15
bio website
location
age
visits member for 1 year, 7 months
seen Mar 14 at 18:45

Feb
28
comment automatic connection from LSASS to different IPs. Is this the usual behavior?
Agreed. I think the same.
Feb
15
comment automatic connection from LSASS to different IPs. Is this the usual behavior?
checksum is ok.
Feb
15
revised automatic connection from LSASS to different IPs. Is this the usual behavior?
added 89 characters in body
Feb
15
revised automatic connection from LSASS to different IPs. Is this the usual behavior?
deleted 1 characters in body
Feb
15
asked automatic connection from LSASS to different IPs. Is this the usual behavior?
Nov
26
awarded  Notable Question
Jun
18
awarded  Popular Question
Jan
20
awarded  Scholar
Jan
20
accepted How easily could be truecrypt and EFS cracked in this scenario
Jan
18
comment How easily could be truecrypt and EFS cracked in this scenario
I already asked this to christian but I'm asking it to you in case your not following the updates of this question. this could sound foolish but.. I wonder how much protection it'll add if i just follow an advice and work only with a non-administrative rights account and just change it to admin or even log a different admin account just for those situations that I have to. (I don't usually install things in my office so it won't be a big proble for me). That way an average user couldn't install a keylogger, and since the files are encrypted with EFS they can copy them but no open them.
Jan
18
comment How easily could be truecrypt and EFS cracked in this scenario
@CristianDobre: this could sound foolish but.. I wonder how much protection it'll add if i just follow an advice and work only with a non-administrative rights account and just change it to admin or even log a different admin account just for those situations that I have to. (I don't usually install things in my office so it won't be a big proble for me). That way an average user couldn't install a keylogger, and since the files are encrypted with EFS they can copy them but no open them.
Jan
18
comment How easily could be truecrypt and EFS cracked in this scenario
Thanks. I think the security scheme that u describe provides a good protection to the files but probably not in this particular scenario. "Never let that USB stick leave your physical presence," it would be the more difficult to implement. Altho I think the virtual keyboard is one thing ill try to implement to type part or all the password.
Jan
18
awarded  Supporter
Jan
18
comment How easily could be truecrypt and EFS cracked in this scenario
@CristianDobre about the sonar solution, sadly , It didn't work in my laptop. but keylemon seems like a very stable program with plenty of important customers like fujitsu , toshiba and others. I'll test it to see if I pay for the paid edition (that one has the windows lock option while the free doesn't). I think im going to post an update to tell what options I'm going to implement so others in the same situation can check it out
Jan
18
comment How easily could be truecrypt and EFS cracked in this scenario
@Cristian Dobre thanks for your answer. Yes , must keyloggers are detected, but other posing as a "legit" programs aren't. an attacker willing to perfom such attack could spend 1 hour or 2 checking the right one. I use Windows+L nearly every time i left , but there's the human factor...for example, you need to go to the other side of the office in a hurry...in 5 months there's a chance to forget to do windows+L a couple of times so I can't depend on it only. on the other hand your advice about TMP sounds quite good. I didn't know it but i'll look into it.
Jan
18
comment How easily could be truecrypt and EFS cracked in this scenario
@Deer Hunter: forgot to mention that the laptop harddrive was formatted. read the "weaknes " part as I addressed the hibernation/sleep (or lock windows) part. I don't agree that people should quit and find another job because they don't trust their co-workers, but deal with it instead. about the PS. That's a good question but the answer is simply because sometimes I need to use those files while I'm in the office.
Jan
18
revised How easily could be truecrypt and EFS cracked in this scenario
more info
Jan
18
revised How easily could be truecrypt and EFS cracked in this scenario
added 1 characters in body
Jan
18
revised How easily could be truecrypt and EFS cracked in this scenario
more info
Jan
18
awarded  Student