Can someone just remove my hard disk and copy the contents?

Can someone just remove my hard disk and copy the contents?

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Can someone just remove my hard disk and copy the contents? myahact 01-21-2006
Posted by on January 21, 2006, 1:54 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

Suppose I leave my laptop at work for the weekend, couldn't someone
unscrew the hard-disk panel, remove the hard-disk, plug into it some
gizmo and copy all my data? If so, would that leave a physical trace
like a broken seal or something, or perhaps a system log entry where
the date and time would be written?


Posted by nemo_outis on January 21, 2006, 2:58 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
myahact@yahoo.ca wrote in news:1137869689.171283.136540
@o13g2000cwo.googlegroups.com:

> Hello,
>
> Suppose I leave my laptop at work for the weekend, couldn't someone
> unscrew the hard-disk panel, remove the hard-disk, plug into it some
> gizmo and copy all my data?

Yes (for most brands - a few have encryption interlocks tied to the BIOS)

> If so, would that leave a physical trace
> like a broken seal or something, or perhaps a system log entry where
> the date and time would be written?

Probably not.

Regards,

PS Although it's far better practice to take the damned thing with you
(physical security through continuous control and custody is the bedrock)
you could use numbered tamper-indicating seals yourself to make it more
difficult to open the case undetected.

Be aware thouigh that this will not stop the truly skilled or determined.
The group at LANL has done extensive studies on such matters and almost all
seals can be defeated fairly easily - even expensive sophisticated ones.

PPS Any laptop **should** use full OTFE HD encryption if it contains
anything beyond the most unimportant and trivial.


Posted by Notan on January 21, 2006, 3:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
nemo_outis wrote:
>
> myahact@yahoo.ca wrote in news:1137869689.171283.136540
> @o13g2000cwo.googlegroups.com:
>
> > Hello,
> >
> > Suppose I leave my laptop at work for the weekend, couldn't someone
> > unscrew the hard-disk panel, remove the hard-disk, plug into it some
> > gizmo and copy all my data?
>
> Yes (for most brands - a few have encryption interlocks tied to the BIOS)
>
> > If so, would that leave a physical trace
> > like a broken seal or something, or perhaps a system log entry where
> > the date and time would be written?
>
> Probably not.
>
> Regards,
>
> PS Although it's far better practice to take the damned thing with you
> (physical security through continuous control and custody is the bedrock)
> you could use numbered tamper-indicating seals yourself to make it more
> difficult to open the case undetected.
>
> Be aware thouigh that this will not stop the truly skilled or determined.
> The group at LANL has done extensive studies on such matters and almost all
> seals can be defeated fairly easily - even expensive sophisticated ones.
>
> PPS Any laptop **should** use full OTFE HD encryption if it contains
> anything beyond the most unimportant and trivial.

When you say , "... almost all seals can be defeated fairly easily,"
are you referring to hard drive passwords?

If so, care to share some references?

Thanks!

Notan

Posted by nemo_outis on January 21, 2006, 3:24 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
>> PS Although it's far better practice to take the damned thing with
>> you (physical security through continuous control and custody is the
>> bedrock) you could use numbered tamper-indicating seals yourself to
>> make it more difficult to open the case undetected.
>>
>> Be aware thouigh that this will not stop the truly skilled or
>> determined. The group at LANL has done extensive studies on such
>> matters and almost all seals can be defeated fairly easily - even
>> expensive sophisticated ones.
>>
>> PPS Any laptop **should** use full OTFE HD encryption if it
>> contains anything beyond the most unimportant and trivial.
>
> When you say , "... almost all seals can be defeated fairly easily,"
> are you referring to hard drive passwords?
>
> If so, care to share some references?
>
> Thanks!
>
> Notan
>


Nope, I'm talking about physical seals and such (e.g., stick-on numbered
seals that self-destruct, reveal the word "tamper," etc. when someone
attempts to remove and replace them.)

LANL does research and publishes a journal on such matters (they got their
start doing high-end assessment on secure shipping of nuclear materials).
Ross Anderson references ther work in Security Engineering. Unfortunately,
many online articles are no longer available for download but they will
send you them on CD.

http://pearl1.lanl.gov/seals/downloadable_papers.htm

Regards,








Posted by Jim Watt on January 21, 2006, 5:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>> When you say , "... almost all seals can be defeated fairly easily,"

When I was in the freight business we had a shipment of watches
that changed into sand in transit, the security seals were intact.
--
Jim Watt
http://www.gibnet.com

Similar ThreadsPosted
how do you remove an ata hard disk password? February 4, 2006, 4:28 pm
hard disk recovery software June 19, 2008, 11:11 pm
Old copy of Novel Netware August 10, 2006, 3:52 pm
Software copy protection March 1, 2006, 5:12 am
software copy protection reviews? November 11, 2006, 11:18 am
A Proposal for a Copy Optimized DVD Audio Format September 7, 2005, 1:17 am
Sony BMG's copy-protection problems grow November 20, 2005, 2:46 pm
Evidence of file copy to external device on Windows 2000 / FAT 32 April 19, 2006, 4:05 am
disk wiping April 5, 2006, 1:46 am
Kill Disk April 1, 2008, 8:29 pm

The site map in XML format XML site map

Contact Us | Privacy Policy