RE: Protect folder data.

From: <Bent.Mathiesen(at)swisscom.com>
Date: Fri Mar 28 2003 - 09:49:21 EST

Also, from what I have read earlier, EFS can also easily be unencrypted.

So, like Langa, I would recommend some proven reliable tools/systems.

/Bent

-----Original Message-----

From: Langa Kentane [mailto:langa@kentane.net] Sent: Thursday, March 27, 2003 8:24 AM
To: 'Rick Darsey'; security-basics@securityfocus.net Subject: RE: Protect folder data.

Excel spreadsheet passwords can be easily unencrypted. There are utilities out there that can do this for you in the click of a button. Don't fall for that one.

Secondly, you must be careful when you deploy EFS. A must is to deploy it only if it's domain wide. Otherwise it's not very secure. I read a paper on this last year sometime. Can't find the link anymore but I will send it to the list when I do. It's also very easy to misconfigure EFS, then you think you're secure when you're not.

Thirdly, why not just buy PGP 8.0. I bought a copy in December for US$39. Comes with PGP Disk. Exactly what you need. Otherwise you can just get the freeware version, this will only encrypt individual files though.

Lastly, there are a couple of these products out there, some of them are free. I used one on 2000/2001. I just can't remember what the name was, I think it was ScramDisk. It was free but only works in Win9x. There are quite a few others as well, for instance DriveCrypt, BestCrypt, StrongDisk.

With all that said, I'd go with a reputable, tried and trusted product: PGPDisk.

Ciao

-----Original Message-----

From: Rick Darsey [mailto:rdarsey@aims1.com] Sent: 26 November 2002 16:04
To: security-basics@securityfocus.net
Subject: RE: Protect folder data.

What format is the data in? Excel will let you password protect a workbook.

You can also turn on encryption in Windows 2000. You have to be running NTFS. If you setup encryption on your system, and password protect the Admin user, the the only way someone can open the file is to set them up with rights to the file, or as a Encrypted File Recovery Agent on your local system. Depending on your network security, this may work. If the Network Admin has set the domain to override local policies, he may still have access to it. If this is not the case, then he would have to have Administrative rights to your system.

Rick

-----Original Message-----

From: Shane Lahey [mailto:s.lahey@roadrunner.nf.net] Sent: Friday, November 22, 2002 12:29 PM To: tony572000@hotmail.com; security-basics@securityfocus.net Subject: RE: Protect folder data.

Why not try Blowfish Advanced CS , available at http://come.to/hahn This should do exactally what you want.

-----Original Message-----

From: Tony - CIA;CISA;CDP;CPA;MBA [mailto:tony572000@hotmail.com] Sent: November 18, 2002 8:00 PM
To: SECURITY-BASICS@SECURITYFOCUS.COM
Subject: Protect folder data.

Hi,

I have some highly confidential data that I frequently access on in a folder that is on my desktop computer (ie win2k). I want to make sure no one but me will able to see this data. Does anyone know of any freeware\shareware that will 1) en-crypt the data in the folder and/or 2) require a password to open up the folder? I need to make sure a person like our lan admin or desk top support person can not figure out a way to get to the data.

Tony CIA,CISA,CDP,MBA

---

MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus

---

Incoming mail has been scanned for viruses and is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02

---

This email has been scanned for viruses and is considered Virus-Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02

---

SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1

---

SurfControl E-mail Filter puts the brakes on spam, viruses and malicious code. Safeguard your business critical communications. Download a free 30-day trial: http://www.surfcontrol.com/go/zsfsbl1 Received on Sat Mar 29 09:37:39 2003