At 12:35 PM 3/30/2005, Stephen Bird typed:
A reboot approach might be limited by an encrypted MBR

NO, NO, NO, NO, NO

If I reboot to another device other than the HD the encrypting the MBR means absolutely NOTHING as I can do anything I want to that system. I can do an emergency backup or destroy all the data. What you propose is like leaving your front door open while only locking your bedroom door. It makes no sense at all as I can kick in that door even easier than I could the front door. You can tell me that it's better than nothing & my only reply is that it's not much better & I certainly would NOT pay good money for such a scheme.

and/or encrypted partitions.

Now you've added another layer of security that wasn't mentioned before. Security is best applied in layers but if one is going to use a single method of securing a machine it had better be a damned good one & NOT a Screen Saver Pwd & NOT a Encrypted MBR because those are the easiest to get around & I certainly would NOT waste good money on a POS security scheme & that's all an Encrypted MBR is. Why spend money when a bios selected pwd is more secure than an Encrypted MBR is? You're also endangering the data because what happens if the Encrypted MBR become corrupt? I'll tell you. You could very easily lose ALL your DATA.


Don't mess with the MBR. Add a Screen Saver password, make sure one is operating from a limited acct & using a better pwd than GOD or something else equally silly, require a CAD to even log into the OS, encrypt files on a more secure file system, require a pwd to boot the machine but don't mess with the MBR & that would be even if the app were free which I know it is not.

----------+----------
Wayne D. Johnson
Ashland, OH, USA 44805
<http://www.wavijo.com>


--
               ----------------------------------------
ALL messages to the list MUST include a descriptive subject.
To Change your email Address for this list, send the following message:
CHANGE  WIN-HOME  your_old_address  your_new_address
to:  [EMAIL PROTECTED]
Note carefully that both old and new addresses are required.

Reply via email to