• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Multiple Encryption Layers?

Blu_Haze

Limp Gawd
Joined
Mar 3, 2005
Messages
173
I'm in the process of ordering a batch of Lok-It flash drives for my department, and in addition to that I was curious if adding TrueCrypt to each drive was also a good idea.

I won't pretend that I'm responsible for a fortune 500 company, or that we stand to lose billions from information leaks, however even though it wouldn't be so significant it would still be a loss of revenue should certain files be unsecured if the drives were lost or stolen.

From what I've seen so far of the Lok-It drives I'm fairly confident in their ability to keep things secure. They won't be compromised by software based attacks due to it not even being accessible by a computer until it's decrypted, and brute force attacks are out of the question because 10 wrong PIN numbers and all the data is erased. The case also seems to be able to help protect against outside tampering with the epoxy covering the memory modules.


I'm no security expert though, far from it. Which is why I've come to you for a second opinion: Is adding TrueCrypt software to the already hardware encrypted drives a smart additional layer of security, or just an unnecessarily redundant hassle?
 
First, I would ask myself if having the files on a thumb drive is a good idea to begin with. If it's used on unsecured computers, then you can have many layers of hardware, software, biometric security, it won't matter.

I use TruCrypt, but it's only really effective (in the context of "enemies" wanting your data) if you're sure the computer you're using it on is not compromised.
 
Back
Top