Securing Your Laptop - Hardware and Paranoia

In January 2004, I was shooting the Michael Jackson arraignment in Santa Barbara for Reuters and the courthouse was an absolute zoo with photographers, fans, protesters, and tv crews everywhere. I was sitting next to another photographer in an outside area at the courthouse where we transmitting photos after Jackson had left. People were walking back and forth all around us. I had my cameras at my feet. He had his cameras at his side on the bench we were sitting on while we were both working away, completely focused on our laptops.

After we both finished and started packing up, he looked over at me and asked if I knew what happened to one of his camera bodies and his 16-35mm lens. He has set it down next to his other body with a 70-200 zoomer on it and his camera bag which were still sitting right next to him, but the one body and wide zoom were gone. It appears that while we were working, someone just walked up and picked up his camera and walked away. Neither of us the wiser until much later when the poor victim started looking for it. But where it was siting next to him, he couldn't actually see it when he was looking at the laptop. By luck, I had my gear by my feet where I could see it, because there was no more room on the bench.

This is one of quite a few stories I know of first hand where laptops, 400mm lenses, camera bodies, hard drives, entire camera bags and lighting kits have seemingly disappeared without a trace.

All of these stories made it clear that the easier something of value is to steal (and the more inattentive the owner is,) the more likely that someone will steal it. So make sure that you keep things secured so that they are not easy to walk away with... this goes for laptops, cameras, gps units and all that type of stuff that is easy to swipe and put on ebay. Unfortunately, if you are a photographer, you are a constant target carrying all of this type of equipment around.

I travel just about everywhere with one of my laptops. I am a photographer who is shooting 95% of my work digitally, so the laptop is a critical piece of getting the images off the compact flash card and to the paying client in a timely manner.

One of the challenges I face with dragging a laptop around all the time is how to keep it secure... especially in the times when I need it up and running so the client has remote access to the images, but I'm not right there next to it.

First thing I do is use a laptop cable lock... even when I am nearby. Keyed cable locks are not the greatest solution for security. In fact, they are pretty easy to defeat with a ball-point pen or cardboard toilet paper tube (this link is to a 8mb .wmv file that shows how easy it is to do.) Combination locks are a little better, but are not terribly hard to defeat if the criminal really wants your laptop.

Most of the time, thieves strike where they can take something and get away quickly. The fact that your laptop is secured to something, even if it is just a combo cable lock makes it harder for someone to make off with your computer without increasing the risk of being caught because they have to fiddle with defeating the lock, increasing their chance of being noticed.

If you are in a situation where there are other laptops present (like a photographer media room at a football game) it means that a thief who is looking for an easy target, will pass on your laptop if it is locked to the table and go for one that is unsecured. I also try to set up as far from the doorway as possible so that the thief will have to travel the longest distance away from their potential escape route (the door) to try to take my stuff. If there are going to be other people (editors) working in the room the whole time, I also try to set up near them (or at the same table) so that no one will mess with my stuff because someone would be right there if they tried to take it.

I also secure my laptop bag through the cable lock. Since most photographer carry card readers, extra batteries, backup hard drives and all the other expensive bits and pieces with their laptop, most laptop bags, without the laptop, still have $100-$500 worth of goodies inside and the bag with or without the computer is another common target of thieves.

I also use a zipper lock (like in the photo) on the zipper of my laptop bags. These locks are not super secure, but again, it deters the thief who is just looking for a easy target. It isn't going to be worth it to try to break into the lock to see what's inside the bag that is attached to the computer's cable lock... the thief will look elsewhere for easy pickings.

Protecting your thumb drive

How many thumb drives (jump drives, usb drives) do you have? Where are they? What is on them?

Thumb drives are a great tool for dragging stuff back and forth between different computers, but since they are so easy to use, most people end up putting all sorts of stuff on them that could be trouble if it fell into the wrong hands. I can't tell you how many times someone has handed me one of these usb drives with something on it I need and when I open it up, this person's entire life is on this little device.... files like creditcard_numb.doc, passwords.doc, adobe_serial_numbers.doc, banking.doc, and clientlist.doc are all sitting right on the top level of the drive.

Fortunately for these trusting souls, I am honest, but if they ever left the drive sitting in a Starbucks somewhere, how much damage could someone do to your life with all that info you carry around on there? It's a pretty scary thought.

And while many people take advantage of password protecting files like these, that is only good to deter the causal snooper... it will do nothing to prevent a committed crook from accessing your data.

Here is a video that shows how to break a Microsoft Word password in less than two minutes.

Here are the results of a Google search for "break ms password" Page after page of hacks and software to break into any MS document. Feeling concerned?

I've even met people who take pride in not having any personal info in their laptop, "In case it gets stolen," but keep all this data on a little jump drive. To me, this makes little sense since it is much easier to keep track of your laptop (I bet you know excactly where it is right now) vs. one or more little usb thumb drives (as you pat your pockets and look in your laptop bag.)

Here is what I would suggest...

A. Keep only what you need on your jump drive. After you have moved something from one machine to the other, delete the files. Just because you purchased a 2GB jump drive doesn't mean you have to keep 2GB of stuff on it.

B. Encrypt the drive so that is unreadable. I really like Knox which allows you create "vaults" on your jump drive or on portions of your hard drive. It uses Apple's File Vault for the encryption so it is Mac native, very secure (and works on both 10.4 and 10.5.)

Since it is a Mac-only program, if someone sticks it in their PC and tries to get anything off of it, they are not going to have any luck, but when you use Knox, it also installs the app on the jump drive its self so that when you plug it into another Mac that doesn't have Knox installed, it will automatically run the program so you can unlock the vault with the password.

You can turn the entire drive into a vault or you can just set it up so part of the drive is in the open for transferring files to other people's computer, or getting files from them (but see the next section below about doing that.)

C. Since thumb drives have become incredibly cheap, have one with your data on it, and have a second throw-away one that you only use for moving files back and forth with other computer users. That way, if you forget to get it back, you haven't lost access to your data, you are just out the $10 drive until the next time you see the person.

I find that having a few extras is always a good idea since my son like to pretend they are phones, guns, missles, walkie-talkies or any number of other imaginary items. I have also found a couple of them in odd places like in the sand box in the back yard and in the shower... but no one has come forward to take responsibility for putting them there.

Here are some other options for encryption programs (this is on the Apple website under software downloads in the network and security section.) Make sure anything that you download is compatible with your OS and the hardware you plan to use it with.

Avoid the malls! Stay home and download freeware!

May this blog be your solace in the flood of "After Christmas Sales."

No claims of best deals ever. These offers do not expire at midnight, nor do they require you to line up in a parking lot outside a store at 3am because this offer is not limited to stock on hand.

Here is a short list of free apps for your Mac. They are all things that I use and like (and all of them should work under Tiger or Leopard.. but don't take my word for it, please read release notes and I always suggest you have good backups before installing anything on your computer.)

Happy Holidays!

(The photos are of Nick opening some last minute Christmas presents this morning. )

1. EXIF Viewer - When you just want to look at the exif data from an image you shot. It works with jpegs, and doesn't seem to work with RAW files too well (at least not Canon CR2 files.) I use it a lot when someone asks how did you shoot that, what ISO were you using, etc.

It is also handy when you are getting ready to sell a camera and buyers always want to know how many actuations there are on the camera. It will share how many frames have been shot at the time you took the photo (for most cameras) (10.4 and 10.5 friendly)


2. Chax - A freebie that allows you to make some helpful modifications to iChat. It can switch you to "away" when your screen saver turns on, it allows you to modify the size and style of the font in the contacts window (really handy on laptops - my favorite feature) and you can set it up to auto-accept text, file, AV chats and screen sharing. It does even more, but there are the highlights. (10.4 and 10.5 require different versions of Chax. Both are located at the link above.)

3. MenuMeters 1.3 - A series of menu extras that will show you hard drive activity, the load on your CPU(s), a breakdown of how your RAM is being used, and a meter that shows network activity (how fast you are sending or receiving data.) The meters show up on the menu bar at the top of your Mac (on the right side, just to the left of the date & time, airport icon, etc.)

I've found this to be handy to see what's going on with your computer and if you suddenly see big spikes in CPU usage that don't match what you are doing on the machine, it can alert you to potential trouble or an app that has crashed and is using up lots of CPU resources. The network meter is nice when you are sending photos, to be able to see the quality of your connection in real time. (It definitely works in 10.4 and all indications are that it works in 10.5 just fine. I haven't had any Leopard related issues with it. I would recommend reading the latest notes before installing it in 10.5, just to be safe.)

4. Adium - Adium is an instant messaging app that works with just about every chat format under the sun. It will log you in simultaneously to all the different chat formats that you subscribe to and is very customizable. There are quite a few sound and icon sets and "styles" that you can use to change the look of Adium. It does not offer any video or audio conferencing so it is not a complete replacement for iChat, but offers quite a lot for free. (10.4 and 10.5 friendly)

5. Enemy Territory - Return to Castle Wolfenstein - having fun on your Mac is important. I love games and this is a great one... and free at that! It is a network version of Return to Castle Wolfenstein. One of the original OS X games that showed what the OS could do. It is a first-person-shooter, so it you aren't fond of shooters, I'd skip the 250mb download (broadband connection advised) (10.4 and 10.5 friendy.)

6. Carbon Copy Cloner - Make bootbable backups of your mac, synchronize folders or drives, and even back up to networked drives. This is a pro level app that is given away for free. The only thing that Mike Bombich (the guy who wrote it) asks is that you consider making a PayPal donation to him. It's well worth it.

Expect another similar list here in the near future as more of my favorite freebies are updated for Leopard.

Securing your Mac -- A good read

The good folks over at TUAW (The Unauthorized Apple Weblog) have a whole series on securing your Mac.

This was published a while ago but since it is still something good to take a look at and bookmark-worthy. While Macs are still less troubled by security issues than PC's, there are still some things you can do (and things to look out for) to keep safe.

While you are there, don't miss the link to increasing your safety while surfing on unsecured wifi networks. I personally avoid "free" wifi networks because of privacy concerns... you never know who is watching as your check email and do your online banking and keeping track of your info...

I hope you have a great Christmas... it' time to go unwrap presents with the kids... woohoo!