| Member with 4,437 posts. | | | |
There are several things you can do for physical security.
1) install a dead bolt on your room door. Room doors generally open inwards toward the room, and the sliding bolt can be opened by inserting a credit card. A dead bolt is bettter.
2) put a password in the BIOS so that a password is required during boot. Although this is weak protection, it is one more obsticle.
3) Buy a usb stick if you don't have one. Insert it, and right click on Computer, choose Manage. Go to Disk Management. Right click on the USB drive, choose 'Change Drive Letter and Path'. Click 'Change' button. Make the USB drive label 'A'. Now run 'syskey', click on the Update button. Select 'Store startup key on floppy disk' Click OK button. The startup key will be written to your USB stick. The startup key contains the encryption key to decrypt Windows passwords for the system. When you boot your PC, you will be prompted for floppy A, insert the USB and click OK, then it will continue bootup. If you don't have the USB stick, the system won't boot. This is pretty good 2 factor authentication of sorts, what you have (the USB startup key) and what you know ( your long passphrase ).
4) Now for the Windows account password. Use a passphrase. For example the phrase "James T Kirk is the captain of the USS Enterprise 1701", using the first letters of each word, will give you "JTKitcotUSSE1701". Add some symbols and you will have "JTK!itcot?USSE1701" which is complex enough. Password length is very important, the longer the passphrase is, the longer it will take to crack. This kind of passphrase will foil dictionary attacks and make brute force attacks not worth while.
Last edited by lunarlander; 21-May-2012 at 05:30 PM..
|