Tuesday, February 17, 2015

Laptop Theft and a Honeypot Account


As someone who drinks a lot of coffee, I have to get up and use the bathroom pretty frequently. When working in the library on campus, there is always the possibility of theft, should I choose to leave my laptop and other stuff out where I was working.
If my laptop were stolen, I would be dealing with two main consequences: The thief having more than enough of my personal information for identity theft, and the loss of my janky souped up laptop which I've grown emotionally attached to. (Data loss is not a concern)


Prey comes with the option to use a guest account as a honeypot. I was concerned if using this added any additional security risks, but I think anyone who can break out of the guest account's NTFS permissions could easily take my drive out and copy my data anyway. The real concern is my lack of full-drive encryption, because I haven't yet implemented a system that works across multiple operating systems.


One problem I noticed on Windows 8 is that the user-switching is shockingly unintuitive. If I was the last person to use my account, it only shows my login window and a tiny arrow (no text) that will go to the user select window. A honeypot is no good if my ideal dumb thief doesn't see it, so I changed my user picture to display the text "click arrow for guest account".
An easy target!


Here's where the fun project starts- I wanted to be notified whenever somebody logs into my guest account, whether prey thinks my laptop is stolen or not. Perhaps someone who's not a thief decides to snoop through the laptop while it's unattended?

My original idea was to run a script on startup that posted any useful information to my PHP server. It is easy to send HTTP requests with wget and a batch script. The server can be configured to send an email when the query matches my criteria.

Problems to solve: 1) Protect the email-triggering link from the rest of the web and 2) Have this work if internet connectivity comes some time after login.

10 comments:

  1. That said, their 1xbet roulette video games are good, offering American and European versions with betting ranges a bit narrower than different finest on-line roulette casinos. It is an effective choice for risk-averse players who may be tempted to play on-line roulette making a $10,000 wager if given an opportunity. The finest roulette on-line casinos supply wonderful bonuses to actual money players. Second of all, there are some very innovative variations obtainable at on-line roulette casinos that you simply won’t find at any land-based on line casino. Then there are the information that the betting limits are means larger and there are some choices that may enhance your expertise even additional.

    ReplyDelete
  2. Novamaker, mannequin processing, printer management and monitoring, all in one. We are large fans of the Creality Ender three, which we profile next. But we now have to replace the Ender three's Top Pick slot from our last update with the Elegoo Neptune 2, which is everything the Ender three is, however less expensive and with usually smoother prints. To be sincere, we see Elegoo and Anycubic running neck-and-neck phrases of|in relation to} quality printers. When you click on by way of from our website to a retailer and purchase a product or service, we may earn affiliate commissions. This helps support our work, however doesn't result on} what Goggle we cowl or how, and it doesn't result on} the price you pay.

    ReplyDelete
  3. That mentioned, such an oversaturated market is bound to be filled with each hits and duds. The finest live roulette UK remains considered one of our most sought-after picks, and we don’t intend to cease giving our recommendations. With LiveCasinos, one of the best live on line casino UK is all the time right at your fingertips. Games 점보카지노 are broadcast from modern studios with tables, handsome interiors, and actual tools.

    ReplyDelete
  4. ” Well, the Jacks or Better half refers to the fact that|the truth that} you won’t win anything from the 솔카지노 machine except you've have} at least of|no much less than} a pair of Jacks. To make it much more complicated, not only are there different machines, however every of these machines can have a special pay schedule for a similar hand. Naturally, the higher your hand, the higher the quantity the machine pays you back.

    ReplyDelete