security Archives

Home » security » Page 67

Intel’s and Sandforce’s AES-128 encryption is useful, but not for what you think

Dave Farquhar Hardware, security April 2, 2011April 3, 2025AES, anandtech, intel, ocz, passwords, TrueCrypt

I spent some time this week with a coworker looking into the AES-128 encryption in current Sandforce and upcoming Intel 320 SSDs, and we’ve concluded it’s no substitute for software full-drive encryption.

This is important, so we’ll talk about it further.

Dave Farquhar

David Farquhar is a computer security professional, entrepreneur, and author. He has written professionally about computers since 1991, so he was writing about retro computers when they were still new. He has been working in IT professionally since 1994 and has specialized in vulnerability management since 2013. He holds Security+ and CISSP certifications. Today he blogs five times a week, mostly about retro computers and retro gaming covering the time period from 1975 to 2000.

dfarq.homeip.net

SSDs and built-in encryption–and how to enable it

Dave Farquhar Hardware, security March 28, 2011April 3, 2025AES, anandtech, intel, passwords, performance penalty, Top Secret

Update: This entry was based on preliminary information that turned out to be incorrect. Please see the following update.

One of the last knocks on SSD performance is that they don’t perform well with full-drive encryption. But on Sandforce 1200- and 2200-based drives, and the next-generation Intel 320 drives introduced today, that’s not an issue anymore. Encryption happens on the drive, in hardware, with no performance penalty.

The problem was that nobody talked about how it works. I found the details buried in Anandtech‘s review of the Intel 320 drive. The takeaway is this: If you set your BIOS password, the drive will be unreadable if you remove it and put it in another system. Update: No it won’t. But you can add ATA password support, under some circumstances.
Read more

Dave Farquhar

dfarq.homeip.net

How to check your downloaded files’ integrity

Dave Farquhar security, Windows March 14, 2011March 17, 2024

On some web pages offering programs to download, you may have seen something called an MD5 near the program link, consisting of a long, weird code like 6cbfd919baa7c9e03c8471ae4d8f8bb.

You can use that code to make sure the file you downloaded is what the author intended you to get and wasn’t corrupted during the download process or, worse yet, booby-trapped by someone else. Here’s how.

Dave Farquhar

dfarq.homeip.net

The tyranny of consumerization is real

Dave Farquhar security March 5, 2011December 4, 20181990s, 3com, android, apple, CIO, computerworld, dell, excel, hp, IBM, ipad, mainframe, micron, Packard Bell, RIAA, Token Ring, usb port, windows nt

Computerworld cites the Ipad 2 and increasing demand by end users to use such consumer devices in corporate environments as “The tyranny of consumerization.”

This has happened before. And if history repeats itself, the future will be better than today, but the road there is going to involve some pain.
Read more

Dave Farquhar

dfarq.homeip.net

How to audit your PC’s software for updates

Dave Farquhar security February 20, 2011February 20, 2011antivirus, Information Assurance, psi, symantec, vulnerability

Sometimes you like to use backdated software, perhaps to avoid bloatware. But perhaps you have some old software you’ve forgotten about. If you want to know, Secunia has a free product called PSI that will scan your system and alert you to any outdated software you may have. Then you can either update it, if it’s something you use and want to keep up to date, or uninstall it. Read more

Dave Farquhar

dfarq.homeip.net

You network guys…

Dave Farquhar security February 4, 2011cissp, troubleshooting

One of my clients has a problem. We’ll call him Melvin, because I like changing names when I tell stories.

Melvin doesn’t like network guys, and takes every possible opportunity to tell anyone within earshot. “You network guys don’t understand what’s going on over that wire, and you don’t want to.”

We do understand, but not the way he thinks network guys should. Melvin is wrong.

Dave Farquhar

dfarq.homeip.net

Misguided security, episode 14

Dave Farquhar security, War Stories January 27, 2011January 27, 2011cisco, VOIP, WAN

I was working in a data center, where we had a couple of Cisco VOIP phones. I don’t know who put them in or when–it’s possible they predated me. We never got them working, but nobody ever really tried, either.

The idea was that two guys working on servers in different datacenters across the WAN might need to talk. The reality was that we didn’t do that very often and usually had other ways to do it–a cellphone being the most obvious option. Our networking guys always had much more pressing issues than getting the VOIP phones working, so the phones just sat there and looked pretty. Until the wrong guy noticed them one day, that is.

Dave Farquhar

dfarq.homeip.net

Read this if you use ICQ

Dave Farquhar security January 25, 2011antivirus, malware, Malware Domains

If you still use ICQ for some reason, there’s fake antivirus malware being distributed through it. The story is making its way through various news sources.

You basically have two options, beyond not clicking on anything that claims to be an antivirus warning while ICQ is running. Stop using ICQ, or do the malware domains hosts file hack.

Dave Farquhar

dfarq.homeip.net

The circulating privacy threat warnings miss the boat

Dave Farquhar security January 23, 2011January 23, 2011business relationship, pc magazine, profiles, real estate, spam, Street View

This week I’ve had multiple people send me warnings they saw on Facebook about a new privacy threat, which, after I read about it, really appears just to be something that aggregates information already available about you.

Perhaps not coincidentally, PC Magazine has a piece telling you what you need to do if you’re really concerned about privacy and really want to disappear. http://www.pcmag.com/article2/0,2817,2376023,00.asp
Read more

Dave Farquhar

dfarq.homeip.net