Here’s a Mac OS X tip. Maybe applicable to your Windows setup, too.
Mac OS X has a security feature called FileVault. FileVault basically turns a user directory it into one big encrypted file. It’s actually a mounted encrypted disk image.
But the point here is that if you log in as that user, you can manipulate your files to your heart’s content, and when you log back out they’ll be AES-128 encrypted.
Now, the real problem with FileVault is that when you log out, everything in your user directory is now one single file. If that single file dies a horrible death somehow, then everything’s gone. So make backups, right?
Well sure. But in addition to that:
You could create different users for different purposes. On my MacBook, I have a general-use user and a more-secure FileVaulted user for banking and other financial transactions. This means I can just store a text file with account information on it. This information is thus only at risk while I’m logged in as that user. I could use another layer of security for this, with more encryption software.
Other precautions: Safari has a setting called ‘Private Browsing,’ which is available in the Safari menu at the top of the screen. This basically turns off caching. This is something I’d never do with my general-purpose user, but with the secure user, that kind of paranoia is the whole point. ![]()
In fact, the biggest gap in security in this system is the ‘blog entry you are reading right now.
But I thought it might be useful to someone other than criminals.
But most of all, it’s interesting to me how my perspective changes when I change user accounts. The secure user is purposeful, so I do my work and log back out. The general-use user is the opposite, which is why I’m sitting at the computer right now.