Know How... (Video)
Know How... (Video)
TWiT
KH 373: The Secrets of Geek Travel - Part II - Securing your data and devices, business travel, office VPNs, Encrypted USB Debices, SSDs with Bitlocker
1 hour 12 minutes Posted Mar 15, 2018 at 6:00 pm.
0:00
1:12:11
Download MP3
Show notes

Protect my Data on the Road!




"I'm a TWiET listener who just started watching Know How. On a TWiET episode several years ago, you and Cheebert talked about traveling securely with your data in "hostile" countries. What would you recommend for a traveler who needs to access sensitive data offline? I won't have my office VPN and need a solution that can carry just under 50GB of data. It's ok if the device is destroyed as long as no 3rd parties can read it. Ideally, I need a solution that works well with my company-issued Dell laptop running Windows 10 Enterprise and my home desktop running Windows 10 Home. The office will pay for a solution up to $200 without me having to ask for special permission. Love the show!" - Martin P (New York, New York)



Encrypted Flash Drive

Kingston Digital DT2000 $100-$160

  • USB 3.0
  • AES 256 Bit Encryption
  • 6-Number PIN (Automatically locked when removed from a Computer)
  • Encryption Key deleted after 10 failed attempts
  • FIPS 197 (Required for Enterprise Standard Security)
  • Win 10, 8, 8.1, 7 // Mac OS 10.9+ // Linux 2.6+ // Chrome OS // Android
  • Unlike some other "Encrypted" USB drives that are really secured controllers, there is actually an encryption/decryption engine on the drive itself. This means that All data on the NAND flash itself is encrypted. (Vs. Just having the controller allow/deny access to unencrypted data on the Flash)
  • Has Read-Only and Timeout locks (Activated by Keypad)

BitLocker

  • Logical disk encryption tool built into certain versions of Windows
    • - Vista Ultimate and Enterprise
    • - Windows 7 Pro and Enterprise
    • - Windows 8/8.1 Pro and Enterprise
    • - Windows Server 2008 and Later
    • - Windows 10 and Enterprise
  • Uses AES 128 or 256

Enabling BitLocker on a Storage Device

  1. Open "This PC"
  2. Right-click the icon of the drive you want to encrypt
  3. Select "Turn on BitLocker"
  4. Use a password or Smart Card for Authentication (Or Both - smartcard will still require a PIN) * NEXT*
  5. Choose if you want to back up your Key * NEXT*
    • You can choose to save it to your MS account, a file that YOU keep, or print it
    • Whatever you choose, make sure you understand the consequences!
    • If you save it to your account, anybody who has access to your account will get your key
    • If you save it to a file, you need to protect the storage device that has that file
    • If you print it, treat the printout as a Top Secret document
    • If you chose either of the latter options, DON'T KEEP THE BACKUP WITH YOUR STORAGE DEVICE!
  6. Encrypt the entire drive on only the space that has been used. * NEXT*
  7. Choose your Encryption Mode *NEXT*
    • "New Encryption" is what I prefer if I'll be using the storage device with a SINGLE computer
    • "Compatible Mode" is what I use if I'll be moving from computer to computer (all have to support BL)
  8. "Start Encrypting"

Important Note:

  • You CAN'T create a BitLocker encrypted volume on Windows 10 Home (You need Pro/Enterprise for that)
  • However, you CAN read a Bitlocker Encrypted Volume (Read Only)

Around the World




Know It Alls,



"I'm a second-year Communications student at Santa Clara University. This summer I'll be backpacking around Europe with a group of 5 friends, documenting our travel. We're packing light: Only what we can put in a backpack that must be able to fit in an airplane overhead bin. My load out is currently using about 2 squarea

I

These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/know-how/episodes/373

Hosts: Fr. Robert Ballecer, SJ and Jason Howell