I've been using Truecrypt for a couple of years in Traveller mode, but a change in IT policy means that all users will have their local Admin rights removed, which means I won't be able to use Truecrypt any more - anybody got any suggestions for anything that doesn't have this restriction? If anything needs to be set up with Admin rights, I can do that at home, but I need to plug my flash drive into a PC where I don't have Admin rights and work away???

I'd be surprised if there was anything out there which didn't require Admin Rights to do this sort of encryption.

Of course, you could always nag your IT Policy makers to roll out encryption for everyone, throwing in some stats about the frequency of laptop theft...

Rob.

I could probably get away with password-protecting folders TBH as there's nothing particularly sensitive; I just want to ensure that if I were to lose my flash drive, its contents would be safe from the eyes of the casual passer-by. Files would remain encrypted at home when I'm working there, it'd just be a means of protecting files when 'in transit'...

Does the USB drive not have U3?

Many run the encryption directly from the drive.

Does the USB drive not have U3?

Many run the encryption directly from the drive.

I had to go to PC World to get a case for the departmental projector last night anyway, so picked up a new flash drive with U3 on it at the same time!

Although I don't doubt someone could get at the stuff inside if they really wanted to, I presume it provides a similar sort of level of protection as Windows so I reckon it'll be fine for what I need it for!

Is there not a windows equivalent to FileVault like there is on a mac?

This encrypts everything inside your user folder so id be surprised if there isnt anything for windows that does the same

This encrypts everything inside your user folder so id be surprised if there isnt anything for windows that does the same

Yeah, Windows has EFS (Encryption File System) which allows you to use built-in Windows encryption on files and directories...it's alright but isn't watertight if someone's determined to get at it...

Rob.

Bum thats no good then :(

Why didnt they just copy the apple implementation which is all open source anyway IIRC ahh well

Yeah, Windows has EFS (Encryption File System) which allows you to use built-in Windows encryption on files and directories...it's alright but isn't watertight if someone's determined to get at it...

Rob.

The only way to crack EFS is to get your logon password. Possible, but difficult even with RT if you choose a good password.

The problem is that I need to protect a flash drive, not a 'My Documents' folder on the C: drive, hence the previous use of TrueCrypt.

Anyway, sorted now!

The only way to crack EFS is to get your logon password. Possible, but difficult even with RT if you choose a good password.

Depends which versions of Windows you're using...

Rob.

I had to go to PC World to get a case for the departmental projector last night anyway, so picked up a new flash drive with U3 on it at the same time!

Although I don't doubt someone could get at the stuff inside if they really wanted to, I presume it provides a similar sort of level of protection as Windows so I reckon it'll be fine for what I need it for!

My Sandisk Cruzer has an option to kill the drive and data after x attempts.

A little scarey when the PC you use has a duff keyboad and you're on the last attempt with no backup!

Have you tested if U3 works without local admin rights? Last time I played with flash drive encryption, with a Lexar stick, it needed admin rights to run the program that it used to let you access your data.

Steve

Have you tested if U3 works without local admin rights? Last time I played with flash drive encryption, with a Lexar stick, it needed admin rights to run the program that it used to let you access your data.

Steve

U3 doesn't mount a virtual drive, which was the problem with TrueCrypt w.r.t. admin rights; the 'secure' portion of the stick comes up as Removable Media once the password's been supplied. Only time will tell, but I'm fairly confident as there's no caveat on the destructions to that effect, unlike TrueCrypt which had it plastered everywhere!

I don't think the secure portion is encrypted either, so presumably someone who had the means to bypass the software and access the secure portion directly could read what's on the stick (don't know how you'd do that, but there are some links to hacker sites if you Google it that suggest it's possible.) But as I think I've already said, the stuff's nothing that can't be sent on paper through the post, so I'm only bothered about keeping out the casual nosey-parker...

RSA public/private key the data first and then save it to an unencrypted flash drive.

Eg folder on PC which you put all your stuff in. Write something small that when you copy to the flash drive the data is all encrypted and then copied as it.

Once copied put your public key on there. Done

So will that work on-the-fly (which is the other - as yet unmentioned - requirement?)

So will that work on-the-fly (which is the other - as yet unmentioned - requirement?)

Can do if you write the programme to keep the two folders (local and flash one) in Synch.

Done similar before as it is the most universal and safest way to do it via linux/Windows PC's IMHO.

Can do if you write the programme to keep the two folders (local and flash one) in Synch.

Hmm, programming something like that's a bit beyond my skills, I think! :eek:

Hmm, programming something like that's a bit beyond my skills, I think! :eek:

I'll see if I can find my old code somewhere. It's not anywhere as bad as you think either as the RSA encryption stuff is all done for you in tools like PGP or in Linux.

If you could, that'd be useful - but don't sweat it if it doesn't turn up immediately 'cos I'm happy with the U3 password for the time being...

Been recommended this:

Rohos Mini Drive

by a colleague - could be the answer...