I find I am needing to store more and more 'sensitive' data safely.
When I needed to save just PINs and such I kept them in my PDA in a neat little application called ReadThis! which encrypted data kept in the normal databases, so I just encrypted the necessary bits of Address Book (for Bank stuff mostly) and had some Memos for storing other stuff.
However this became impractical as I needed access on-line more often (for online banking etc.) so I currently use the KeyRing plugin for JPilot. This gives me easier access as I can run JPilot remotely but I'm beginning to find this is a bit limiting as well now.
What do others here use for this sort of 'sensitive data' storage? I have all sorts of data, PINs, passwords, Web site logins and so on and so forth.
On Sat, 2006-02-04 at 19:41 +0000, Chris Green wrote:
What do others here use for this sort of 'sensitive data' storage? I have all sorts of data, PINs, passwords, Web site logins and so on and so forth.
I use a loopback mounted encrypted filesystem image, with a script that prompts for the passphrase and mounts/umounts as and when I need it.
That way you can store the information however you want, using any system you want.
The only problems with it are....
If I want to access it remotely I have to ssh into my machine (or keep another copy on my laptop)...of course if you are going to have to trust the system you access it from (keylogger on the client could capture the steps you take to access it....passphrase for crypt etc) and ssh (although that is pretty strong)
You have to define the size of the filesystem before you start using it..so far I have found no way to grow it afterwards.
When mounted (and if the correct steps aren't taken when umount'ed) the crypt is only as secure as your machine i.e. If the machine has already been compromised then it is possible that someone else could be looking at the mounted system. Remember to tie down the permissions of the mount...but even then it doesn't save you if your box has been rooted.
If you want to go that route then I found this (and some advice from other ALUGers, so search the archives) pretty helpful
-
Chris Green -
Wayne Stallwood