Recent Topics
Let's Talk Porsche 911
by john_pifer - 02/21/20 02:51 AM
CLEARANCE ALERT O'Reilly's Mobil Super Oil
by GMguy84 - 02/21/20 01:27 AM
No more poulan / weedeater at walmart.
by jakewells - 02/21/20 12:44 AM
1991 Land Cruiser FJ80
by CCI - 02/20/20 09:57 PM
Gas price spread
by Chris142 - 02/20/20 09:28 PM
Need an Ecoboost Oil
by kstanf150 - 02/20/20 08:47 PM
2007 sedona
by macdole99 - 02/20/20 08:29 PM
USB-C, USB 3.0, 3.1Gen1, 3.1Gen2 Confusion.
by SubLGT - 02/20/20 08:12 PM
Apple Air Pro 2 tablet, How to send a link by email
by JLawrence08648 - 02/20/20 07:56 PM
Needed A Truck
by MParr - 02/20/20 07:21 PM
Battery Charger/Desulfator
by DBMaster - 02/20/20 06:45 PM
STP 0W-16 found in NC Autozone
by mv6845 - 02/20/20 06:20 PM
Cats
by Anduril - 02/20/20 06:12 PM
Are Onan oil filters now Fleetguard?
by atikovi - 02/20/20 05:57 PM
Car overheating under different conditions.
by MichaelRS - 02/20/20 04:39 PM
2008 CR-V AT Question
by Gebo - 02/20/20 04:18 PM
2019 Sienna
by s2krunner - 02/20/20 04:01 PM
Newest Members
onuryas, vidirola, CharlotteB, Grennx, coverage
70766 Registered Users
Who's Online Now
78 registered members (alarmguy, avi1777, AndyB, aba4430, aquariuscsm, 4WD, 8 invisible), 1,666 guests, and 20 spiders.
Key: Admin, Global Mod, Mod
Forum Statistics
Forums67
Topics301,732
Posts5,201,646
Members70,766
Most Online4,538
Jan 20th, 2020
Donate to BITOG
Print Thread
Hop To
Page 1 of 2 1 2
Physical security for home PC #5344468 02/08/20 09:58 AM
Joined: Mar 2004
Posts: 23,835
D
Donald Offline OP
OP Offline
D
Joined: Mar 2004
Posts: 23,835
How much do you worry about physical security for your PC that never leaves home?

My kids are grown and living on their own. Just my wife and dogs. Dogs have shown little interest in my PC. Wife has her own. No secrets from wife on my PC.

So I have a screen saver lock. I use LastPass with a password and Yubico YubiKey. But the YubiKey is next to my PC. No one is breaking into my house to steal my PC or my passwords. I have a house full of general house stuff like most people.

When my memory goes I will probably write my password on a sticky and paste it on side of computer. Something I would never do at work, but do not see an issue at home with no kids.

How do others feel?


2015 Ford F-250 w/Powerstroke
2016 Subaru Crosstrek CVT (wife's)
Re: Physical security for home PC [Re: Donald] #5344475 02/08/20 10:01 AM
Joined: Apr 2010
Posts: 3,972
A
atikovi Offline
Offline
A
Joined: Apr 2010
Posts: 3,972
I don't think anyone breaking into your house will be playing around with your computer trying to transfer money into their bank account if that's what your mean.

Re: Physical security for home PC [Re: Donald] #5344479 02/08/20 10:06 AM
Joined: Mar 2014
Posts: 4,443
L
Leo99 Online Content
Online Content
L
Joined: Mar 2014
Posts: 4,443
I should get my passwords more secure from thieves and easier to access for my wife should I meet an untimely demise. Thanks for reminding me.


Without data you're just another person with an opinion. W. E. Deming

2003 Corolla 250,000 miles (RIP)
2004 Corolla 125,000 miles
2004 Rav4 392,000 miles
2015 Camry 90,000 miles
Re: Physical security for home PC [Re: Donald] #5344486 02/08/20 10:12 AM
Joined: Nov 2008
Posts: 15,475
S
supton Online Content
Online Content
S
Joined: Nov 2008
Posts: 15,475
That's a good question. I'd have to say, not very worried.

We do keep a printed list of passwords, but haven't gotten around to finding a good place to keep it under lock and key.


2011 Toyota Camry, base, 2.5L/6MT, 201k, hers
2010 Toyota Tundra DC, 4.6L/6AT, 157k, ours
1999 Toyota Camry LE, 2.2L/4AT, 223k, his
Re: Physical security for home PC [Re: Donald] #5344493 02/08/20 10:16 AM
Joined: Jun 2002
Posts: 7,273
D
doitmyself Offline
Offline
D
Joined: Jun 2002
Posts: 7,273
Originally Posted by Donald
When my memory goes

LOL, what do you mean "When" ?????? LOL

Re: Physical security for home PC [Re: atikovi] #5344520 02/08/20 10:43 AM
Joined: Jun 2014
Posts: 2,393
V
Vern_in_IL Offline
Offline
V
Joined: Jun 2014
Posts: 2,393
Originally Posted by atikovi
I don't think anyone breaking into your house will be playing around with your computer trying to transfer money into their bank account if that's what your mean.



Yeah they will just TAKE IT, and MAYBE play around with it later.

It's easier for the thieves to sit in a van near your home and steal from a unsecured WiFi..... So I would setup a secure wifi just for you PC, and make sure you got your lockscreen active. Some people have no lock screen and you can just go right on in.

Re: Physical security for home PC [Re: Donald] #5344625 02/08/20 12:44 PM
Joined: Apr 2017
Posts: 3,222
H
hallstevenson Offline
Offline
H
Joined: Apr 2017
Posts: 3,222
Put it on a post-it note and stick it on your monitor. If someone is in your house to find that, you've got bigger things to be concerned about.

Re: Physical security for home PC [Re: Donald] #5344652 02/08/20 01:15 PM
Joined: May 2014
Posts: 4,529
Yah-Tah-Hey Offline
Offline
Joined: May 2014
Posts: 4,529
Security what? ???

Re: Physical security for home PC [Re: Vern_in_IL] #5344658 02/08/20 01:24 PM
Joined: Mar 2004
Posts: 23,835
D
Donald Offline OP
OP Offline
D
Joined: Mar 2004
Posts: 23,835
Originally Posted by Vern_in_IL
Originally Posted by atikovi
I don't think anyone breaking into your house will be playing around with your computer trying to transfer money into their bank account if that's what your mean.



Yeah they will just TAKE IT, and MAYBE play around with it later.

It's easier for the thieves to sit in a van near your home and steal from a unsecured WiFi..... So I would setup a secure wifi just for you PC, and make sure you got your lockscreen active. Some people have no lock screen and you can just go right on in.


My WIFI is secure and my house is several hundred feet down my drive in the woods. Dogs would bark at a van in driveway. I suppose the thief could climb up a tree and try to hack my WIFI. Again dogs would notice.


2015 Ford F-250 w/Powerstroke
2016 Subaru Crosstrek CVT (wife's)
Re: Physical security for home PC [Re: Donald] #5344673 02/08/20 01:41 PM
Joined: Nov 2018
Posts: 2,154
S
Skippy722 Offline
Offline
S
Joined: Nov 2018
Posts: 2,154
My MacBook is password protected, linked to iCloud, and encrypted with AES 256.


2016 Chrysler 300S v6
2018 Dodge Grand Caravan GT

Slight Mopar obsession
Re: Physical security for home PC [Re: Skippy722] #5344748 02/08/20 03:55 PM
Joined: Mar 2009
Posts: 2,969
X
xxch4osxx Offline
Offline
X
Joined: Mar 2009
Posts: 2,969
Originally Posted by Skippy722
My MacBook is password protected, linked to iCloud, and encrypted with AES 256.


I thought AES-256 was for encrypting radio traffic?:


2015 RAM SXT Crew Cab 5.7 with 6 speed tranny.

2008 Mazda 3 GS Sport Hatchback 5sp MT (Girlfriend's car)

Re: Physical security for home PC [Re: xxch4osxx] #5344795 02/08/20 05:27 PM
Joined: Apr 2017
Posts: 3,222
H
hallstevenson Offline
Offline
H
Joined: Apr 2017
Posts: 3,222
Originally Posted by xxch4osxx
I thought AES-256 was for encrypting radio traffic?:

It's just a measure of the "strength" of encryption. It can be used for almost anything.

Re: Physical security for home PC [Re: Donald] #5344837 02/08/20 06:39 PM
Joined: Oct 2019
Posts: 106
S
Saabist Offline
Offline
S
Joined: Oct 2019
Posts: 106
I use full disk encryption with a fairly long, complex pass phrase. Computers are left turned off when no one is home, so unless it's the NSA pulling a black-bag job (we're not interesting enough for that) it is very unlikely anyone will be able to retrieve any information. Backup drives are likewise encrypted.

Re: Physical security for home PC [Re: Donald] #5344924 02/08/20 09:09 PM
Joined: Aug 2014
Posts: 1,457
3
3800Series Offline
Offline
3
Joined: Aug 2014
Posts: 1,457
Respectfully putting a password on a PC is 100% pointless in this case it's security through absurdity in this type of situation. The best security is a clean system once compromised reset the PC fully (format the hard drives) and start from scratch hoping there are no BIOS infections. To skip all the reset damage is done at the instance of infection removing a virus/malware will not often revert the damage it causes, they typically try to comprise the system for easier infection down the road and most software will not fix this once the infection has occurred. Two factor keys are handy, and they do work, but they are not perfect I believe folks have been able to clone them before. They are mostly intended for "absolute security" and if they can be cloned there is nothing absolute about them beyond pointless as they have failed to do the job they were intended for.

Not wanting to start a long debate or argument about it really not but at the end of the day if the device can be compromised its functional goal has been defeated. As for password managers they have had a lot of exploits in the past and will continue to do so in the future, their biggest design flaw is letting you open them. The moment they are loaded into memory (once the master password has been entered) anything can read them in ram as plain text. Any malware can do this and it has been a common problem but sadly there really isn't a good workaround for this as it needs to be in memory to send the password/information to a form/log in. With a 2FA key this is helped a lot and can prevent most compromises but really that is only a solution on your end you still have to rely heavily on the websites and programs not to be stupid and reset the password over phone (once again has happened) generally security is only as strong as the weakest link.

As for sign in to Windows a password there is completely pointless, you can clone the account and once you have the password to the clone can be removed through software (available by Microsoft) so anyone with knowledge of software and security will already know this (typically the ones to target users). If you want to put a password on a system the best would be to encrypt the boot drive they really can't get around that unless the encryption algorithm ends up compromised (kinda like SHA1 has recently). Many folks like to password protect the bios but this can be easily removed in many cases by jumping pins to clear the CMOS or removing the battery from the motherboard and waiting 10 or so mins.

Security is really a myth, no system is perfect, every program has some flaw if it's not one thing it's something else never ends really. The best advice would be to make your information time-consuming to access as no security is perfect but generally folks go after weak targets so if you can annoy them enough you really don't have to worry all that much. Regardless of what ever system you put in place there is always a work around to bypass this, you could have a password on your BIOS, hard drive, Windows, etc just excellent security and it can still be bypassed fairly easily via something like Intel's Management Engine. If this is compromised nothing you do can prevent it or mitigate it, no way to detect it, can be used to access information on your PC while off, etc I'm sure you get the point.

Nothing is perfect, nothing will ever be perfect, and trying to achieve perfect will just ruin your day to day "quality of life" experience with the device.

Re: Physical security for home PC [Re: Donald] #5345024 02/09/20 01:20 AM
Joined: Nov 2018
Posts: 2,154
S
Skippy722 Offline
Offline
S
Joined: Nov 2018
Posts: 2,154
3800Series is, albeit sadly, absolutely correct. Anyone who truly wants your data will get it. I’ve been on a DEFCON/Blackhat speech binge lately, it’s kind of scary how insecure “secure” systems are!

Watched one about TSA scanners... you could type in a user name and password, literally whatever you wanted, and it would throw an error message and then log you in anyway! In another, a guy figured out how to turn on tornado sirens whenever he wanted.


2016 Chrysler 300S v6
2018 Dodge Grand Caravan GT

Slight Mopar obsession
Page 1 of 2 1 2
Previous Thread
Index
Next Thread

BOB IS THE OIL GUY® Powered by UBB.threads™