Ready to be published? LXer is read by around 350,000 individuals each month, and is an excellent place for you to publish your ideas, thoughts, reviews, complaints, etc. Do you have something to say to the Linux community?
Crypto filesystems keep your data safe – even if someone steals your computer.Linux offers a number of encrypted filesystem options – each with a different approach to the encryption problem.Encrypted filesystems may be overkill for family photos or your résumé, but they make sense for network-accessible servers that hold sensitive business documents, databases that contain credit-card information, offline backups, and laptops.
Good story. Well written, well researched, chock full of good advice. She toes the Bruce Schneier party line.
"My theory is vendors are not interested in anything that gives control to the user; they want big fat expensive centrally-controlled systems, which is not an attractive proposition to most folks."
Aka., "Active Directory" / LDAP. Oh yeah! Those things work great! :-P
Okay, there's something to be said for LDAP, but have you ever met anyone doing AD correctly, in a *usable* configuration? I haven't.
I don't much approve of randomized sshd ports, despite the fact it (generally speaking) helps. Better question is, do you actually need sshd running? If not, turn it off. I have no need to get at my home box from work. Why would you? Do you really think the typical doofus MCSE coporate admin is going to respect your privacy? Think keystroke loggers, CCTV, "Corporate owned systems ... You have no right to privacy while using OUR equipment."
Thanks. Worth logging in to post a review. :-) Not wizardly "rocket science" stuff, but good common sense advice. Write your pwords on a sticky note, and put it in your wallet. When you lose it, you know it's time to change pwords (assuming you can still login). Maybe a backup (paper copy) of the sticky note stored in a book @home and @work would be a good thing too. That's another "security through obscurity" angle. Which book is it in? Which sticky note in which book describes valid, current paswords? Go ahead, fibbies, try them all. Heh, heh, heh. :-)
BTW, Schneier is also hawking a free tool called PasswordSafe; free, "Open Source", available for many OS flavours, yada yada.
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
"My theory is vendors are not interested in anything that gives control to the user; they want big fat expensive centrally-controlled systems, which is not an attractive proposition to most folks."
Aka., "Active Directory" / LDAP. Oh yeah! Those things work great! :-P
Okay, there's something to be said for LDAP, but have you ever met anyone doing AD correctly, in a *usable* configuration? I haven't.
I don't much approve of randomized sshd ports, despite the fact it (generally speaking) helps. Better question is, do you actually need sshd running? If not, turn it off. I have no need to get at my home box from work. Why would you? Do you really think the typical doofus MCSE coporate admin is going to respect your privacy? Think keystroke loggers, CCTV, "Corporate owned systems ... You have no right to privacy while using OUR equipment."
Thanks. Worth logging in to post a review. :-) Not wizardly "rocket science" stuff, but good common sense advice. Write your pwords on a sticky note, and put it in your wallet. When you lose it, you know it's time to change pwords (assuming you can still login). Maybe a backup (paper copy) of the sticky note stored in a book @home and @work would be a good thing too. That's another "security through obscurity" angle. Which book is it in? Which sticky note in which book describes valid, current paswords? Go ahead, fibbies, try them all. Heh, heh, heh. :-)
BTW, Schneier is also hawking a free tool called PasswordSafe; free, "Open Source", available for many OS flavours, yada yada.