1
00:00:06,660 --> 00:00:07,860
- Let's round out this lesson

2
00:00:07,860 --> 00:00:09,810
with a little laptop security,

3
00:00:09,810 --> 00:00:10,650
and we're talking more

4
00:00:10,650 --> 00:00:13,110
of the physical security of the laptop.

5
00:00:13,110 --> 00:00:15,420
We'll get more into security

6
00:00:15,420 --> 00:00:18,150
as we get into the 220-902 course.

7
00:00:18,150 --> 00:00:20,250
That's a separate course altogether.

8
00:00:20,250 --> 00:00:23,580
So because of the threat of theft,

9
00:00:23,580 --> 00:00:27,270
you should really consider
physical security methods

10
00:00:27,270 --> 00:00:28,260
for your laptop.

11
00:00:28,260 --> 00:00:29,670
It costs you a lot of money.

12
00:00:29,670 --> 00:00:31,710
It might have very important data

13
00:00:31,710 --> 00:00:34,950
or pictures or music that's
important to you as well,

14
00:00:34,950 --> 00:00:37,260
so you wanna be real careful with that.

15
00:00:37,260 --> 00:00:42,260
And some examples you can use
physical locks or cable locks.

16
00:00:42,300 --> 00:00:44,580
If you're worried about
your laptop being stolen,

17
00:00:44,580 --> 00:00:46,560
consider physical security,

18
00:00:46,560 --> 00:00:49,770
an actual locking cable for your laptop

19
00:00:49,770 --> 00:00:52,710
similar to a locking cable for a bicycle.

20
00:00:52,710 --> 00:00:56,190
You can use these on
just about any laptop,

21
00:00:56,190 --> 00:00:57,630
and there's upgrades that you can get

22
00:00:57,630 --> 00:01:00,570
for these laptops from all
different manufacturers.

23
00:01:00,570 --> 00:01:05,220
So consider security cable
locks for your laptop.

24
00:01:05,220 --> 00:01:08,400
The thing is a lot of laptops are stolen

25
00:01:08,400 --> 00:01:10,740
when a person just
walks away for a minute,

26
00:01:10,740 --> 00:01:11,730
and they're gone.

27
00:01:11,730 --> 00:01:13,620
So you can use a physical lock,

28
00:01:13,620 --> 00:01:15,120
and I'll show an example here.

29
00:01:16,140 --> 00:01:18,930
Here's an example of a Toshiba lock,

30
00:01:18,930 --> 00:01:23,760
and this connects to the
special little connector

31
00:01:23,760 --> 00:01:24,593
on the laptop,

32
00:01:24,593 --> 00:01:27,540
which I'll show in a
second if you have one,

33
00:01:27,540 --> 00:01:30,930
and basically it has a four-digit pin code

34
00:01:30,930 --> 00:01:32,340
that you can select here,

35
00:01:32,340 --> 00:01:33,960
but there's 10,000 combinations.

36
00:01:33,960 --> 00:01:36,990
So it's gonna be hard for
somebody to figure this out.

37
00:01:36,990 --> 00:01:39,900
And this button releases this,

38
00:01:39,900 --> 00:01:41,580
but only if the right code is on there.

39
00:01:41,580 --> 00:01:45,270
So you set your code, connect it, lock it,

40
00:01:45,270 --> 00:01:46,770
and then change the code.

41
00:01:46,770 --> 00:01:49,530
You know, move those
rollers, and, you know,

42
00:01:49,530 --> 00:01:52,620
this way nobody's gonna
be able to get into that.

43
00:01:52,620 --> 00:01:54,360
But the only way for this to work

44
00:01:54,360 --> 00:01:55,800
is if it's cabled properly.

45
00:01:55,800 --> 00:01:57,990
You could loop this to something,

46
00:01:57,990 --> 00:02:00,360
but really the proper way to use this,

47
00:02:00,360 --> 00:02:02,730
it's kind of like a giant lanyard.

48
00:02:02,730 --> 00:02:05,280
The proper way to use this is

49
00:02:05,280 --> 00:02:08,490
to run this around the leg of a desk

50
00:02:08,490 --> 00:02:11,790
or around something that's immobile,

51
00:02:11,790 --> 00:02:14,943
and then loop this through here,

52
00:02:16,200 --> 00:02:19,920
and then connect this to
the laptop security port.

53
00:02:19,920 --> 00:02:21,510
So that's the proper way to do that,

54
00:02:21,510 --> 00:02:22,680
'cause, you know, nobody's gonna be able

55
00:02:22,680 --> 00:02:23,700
to cut through these.

56
00:02:23,700 --> 00:02:25,350
You're not gonna be able
to use a cutter basically

57
00:02:25,350 --> 00:02:26,463
to get through this.

58
00:02:27,900 --> 00:02:30,150
And if this is just looped over something,

59
00:02:30,150 --> 00:02:31,860
it's easy to remove it.

60
00:02:31,860 --> 00:02:36,310
You wanna loop it in twice
basically if possible

61
00:02:37,170 --> 00:02:39,330
or around something that doesn't move,

62
00:02:39,330 --> 00:02:42,420
and always run this
through the eyelet here

63
00:02:42,420 --> 00:02:44,433
before you connect this to the laptop.

64
00:02:45,660 --> 00:02:49,350
You know, run this around the
leg of a desk once or twice,

65
00:02:49,350 --> 00:02:51,150
then run this through that,

66
00:02:51,150 --> 00:02:53,040
then connect that to the laptop.

67
00:02:53,040 --> 00:02:55,200
The way that most people get these

68
00:02:55,200 --> 00:02:57,840
is they'll smash him
with a hammer right here,

69
00:02:57,840 --> 00:02:59,610
and that may or may not work.

70
00:02:59,610 --> 00:03:01,710
This is a pretty good device for that.

71
00:03:01,710 --> 00:03:05,100
Let's show the connection
on the laptop real quick.

72
00:03:05,100 --> 00:03:06,900
So here's the port on the laptop.

73
00:03:06,900 --> 00:03:09,390
This is a real close up of this.

74
00:03:09,390 --> 00:03:11,760
This is just a basic little connector,

75
00:03:11,760 --> 00:03:13,560
and there's really not much to it.

76
00:03:13,560 --> 00:03:15,990
You connect the cable
lock right into here,

77
00:03:15,990 --> 00:03:17,970
and it'll click right into place.

78
00:03:17,970 --> 00:03:20,370
Again, only after you've run the cable,

79
00:03:20,370 --> 00:03:23,883
and tethered the lock through the eyelet.

80
00:03:24,990 --> 00:03:27,720
But you'll see a connector like this,

81
00:03:27,720 --> 00:03:30,480
usually on the corner towards
the back of the laptop,

82
00:03:30,480 --> 00:03:31,830
and you'll see a little icon here.

83
00:03:31,830 --> 00:03:34,050
It's the locking security icon.

84
00:03:34,050 --> 00:03:35,580
So you'll know what that is.

85
00:03:35,580 --> 00:03:37,140
And Toshiba uses, you know,

86
00:03:37,140 --> 00:03:38,580
you wanna go with the manufacturer,

87
00:03:38,580 --> 00:03:40,560
Toshiba uses their own type of cable.

88
00:03:40,560 --> 00:03:42,660
All the manufacturers like HP and so on,

89
00:03:42,660 --> 00:03:44,520
they'll have their own cable for that.

90
00:03:44,520 --> 00:03:47,160
So make sure you run that cable lock.

91
00:03:47,160 --> 00:03:49,383
That's a great way of
securing that laptop.

92
00:03:50,490 --> 00:03:53,250
So another possibility is
a locking case or a bag.

93
00:03:53,250 --> 00:03:56,400
You know, you don't wanna get
a real expensive looking bag

94
00:03:56,400 --> 00:03:57,630
also for your laptop.

95
00:03:57,630 --> 00:03:58,920
Keep it simple,

96
00:03:58,920 --> 00:04:00,600
but you could use something that locks,

97
00:04:00,600 --> 00:04:03,510
so that way it would
be harder to get open.

98
00:04:03,510 --> 00:04:04,890
But really it's the look of the bag.

99
00:04:04,890 --> 00:04:06,870
that's gonna help you with that.

100
00:04:06,870 --> 00:04:08,430
And going beyond this,

101
00:04:08,430 --> 00:04:10,383
consider the following safeguards.

102
00:04:11,370 --> 00:04:13,110
USB biometric devices.

103
00:04:13,110 --> 00:04:15,930
These, when you install them,

104
00:04:15,930 --> 00:04:17,400
they need your fingerprint

105
00:04:17,400 --> 00:04:20,100
in order to allow access to the system.

106
00:04:20,100 --> 00:04:21,780
So this is a real nice feature,

107
00:04:21,780 --> 00:04:23,433
and here's an example of one.

108
00:04:24,450 --> 00:04:27,153
Here's a fingerprint
reader, connects via USB.

109
00:04:28,170 --> 00:04:30,270
And if we look at the tech specs on that,

110
00:04:30,270 --> 00:04:32,580
you can do 2.0 ports.

111
00:04:32,580 --> 00:04:35,580
You don't even need a 3.0 port with this.

112
00:04:35,580 --> 00:04:38,070
And one of the things you wanna
check is the type of sensor.

113
00:04:38,070 --> 00:04:39,900
This is a decent sensor,

114
00:04:39,900 --> 00:04:42,210
and also the resolution that's being used.

115
00:04:42,210 --> 00:04:43,920
You want the resolution to be decent,

116
00:04:43,920 --> 00:04:47,400
a pretty high level around five, 600 DPI.

117
00:04:47,400 --> 00:04:50,133
Otherwise it could be faked pretty easily.

118
00:04:51,540 --> 00:04:52,920
Now one of the problems with these

119
00:04:52,920 --> 00:04:57,513
is if someone steals the whole package,

120
00:04:58,470 --> 00:05:03,470
your fingerprint is probably
on the laptop itself somewhere,

121
00:05:04,350 --> 00:05:08,070
either on the touch pad or
just on the laptop's plastic,

122
00:05:08,070 --> 00:05:11,340
and a person could lift
that pretty easily.

123
00:05:11,340 --> 00:05:13,500
So you can go even farther beyond this.

124
00:05:13,500 --> 00:05:15,900
First of all, you can
get into biosecurity,

125
00:05:15,900 --> 00:05:18,090
your UEFI or your BIOS.

126
00:05:18,090 --> 00:05:22,650
And some laptops offer
chassis intrusion protection,

127
00:05:22,650 --> 00:05:27,000
and all UEFI and BIOS programs
have password security.

128
00:05:27,000 --> 00:05:29,880
So set an admin password on the BIOS

129
00:05:29,880 --> 00:05:34,140
and for protection for your data,

130
00:05:34,140 --> 00:05:37,443
set a power on password
or a user password.

131
00:05:38,310 --> 00:05:39,360
This way, you know,

132
00:05:39,360 --> 00:05:41,550
someone can't even get into the Windows.

133
00:05:41,550 --> 00:05:44,070
They gotta get past the
BIOS password first,

134
00:05:44,070 --> 00:05:46,890
and that's if they can get
past your USB biometric device

135
00:05:46,890 --> 00:05:49,380
and your physical lock and blah blah.

136
00:05:49,380 --> 00:05:52,530
Also a lot of computers,
especially laptops,

137
00:05:52,530 --> 00:05:53,730
are coming with LoJack.

138
00:05:53,730 --> 00:05:57,660
You can have LoJack running
on within your UEFI BIOS.

139
00:05:57,660 --> 00:05:59,790
So if someone steals it

140
00:05:59,790 --> 00:06:01,590
and you've paid for the service,

141
00:06:01,590 --> 00:06:03,600
you can, you know, locate that guy.

142
00:06:03,600 --> 00:06:07,320
You could also have GPS
running on the on the laptop.

143
00:06:07,320 --> 00:06:09,360
And moving beyond that into Windows,

144
00:06:09,360 --> 00:06:11,820
you may want to encrypt your data.

145
00:06:11,820 --> 00:06:15,780
You might want to use EFS in
Windows to encrypt the data.

146
00:06:15,780 --> 00:06:18,150
You can encrypt individual
files, you know.

147
00:06:18,150 --> 00:06:21,780
For example, if you have
passwords in a file or taxes or,

148
00:06:21,780 --> 00:06:26,160
you know, any personal
identifying information, PII,

149
00:06:26,160 --> 00:06:28,590
encrypt those, right
click 'em, encrypt them

150
00:06:28,590 --> 00:06:31,470
and that'll show the file name in green.

151
00:06:31,470 --> 00:06:35,850
Or if you have one of the more
advanced editions of Windows,

152
00:06:35,850 --> 00:06:38,820
you can do full disc encryption.

153
00:06:38,820 --> 00:06:41,040
And you could do that with BitLocker,

154
00:06:41,040 --> 00:06:42,750
and you wanna make sure there's a TPM,

155
00:06:42,750 --> 00:06:45,990
a trusted platform module
chip on the computer,

156
00:06:45,990 --> 00:06:48,810
or use a USB device
that has the proper key.

157
00:06:48,810 --> 00:06:49,800
Windows passwords,

158
00:06:49,800 --> 00:06:53,430
make sure you have a strong
complex password on the device.

159
00:06:53,430 --> 00:06:57,450
And you may wanna look
into remote wipe programs.

160
00:06:57,450 --> 00:06:59,910
And as I mentioned before, GPS,

161
00:06:59,910 --> 00:07:02,160
so you could track the device.

162
00:07:02,160 --> 00:07:03,240
And if it is stolen,

163
00:07:03,240 --> 00:07:05,760
you could initiate a
remote wipe from your PC

164
00:07:05,760 --> 00:07:09,510
or from another system just
to wipe out the whole laptop,

165
00:07:09,510 --> 00:07:11,550
so that the person cannot get your data

166
00:07:11,550 --> 00:07:13,860
or most likely cannot get the data.

167
00:07:13,860 --> 00:07:15,690
So a lot of safeguards there,

168
00:07:15,690 --> 00:07:17,790
but really you don't
wanna lose the laptop.

169
00:07:17,790 --> 00:07:18,870
So you wanna think

170
00:07:18,870 --> 00:07:21,690
about basic physical security precautions.

171
00:07:21,690 --> 00:07:24,630
You know, never leave your
laptop sitting around,

172
00:07:24,630 --> 00:07:27,780
always lock the door to your office.

173
00:07:27,780 --> 00:07:32,780
Very often, laptops are
stolen in the office,

174
00:07:32,940 --> 00:07:35,547
and quite often for
people that you work with.

175
00:07:35,547 --> 00:07:36,600
Can you believe that?

176
00:07:36,600 --> 00:07:38,370
It happens, it's true.

177
00:07:38,370 --> 00:07:42,030
Or someone who is, you know,
doing social engineering,

178
00:07:42,030 --> 00:07:44,460
and acting as a particular service person,

179
00:07:44,460 --> 00:07:47,460
but is actually there to grab laptops.

180
00:07:47,460 --> 00:07:50,010
So always lock up your laptop,

181
00:07:50,010 --> 00:07:53,550
lock your door, use the cable lock.

182
00:07:53,550 --> 00:07:56,940
Use passwords in Windows,

183
00:07:56,940 --> 00:08:01,530
and then have your screensaver
set to require the password,

184
00:08:01,530 --> 00:08:03,060
if you're doing it that way.

185
00:08:03,060 --> 00:08:05,430
Or if the screen is set to turn off,

186
00:08:05,430 --> 00:08:08,340
make sure it's set to lock.

187
00:08:08,340 --> 00:08:11,670
You want the system to lock
if the display turns off,

188
00:08:11,670 --> 00:08:13,890
so that the password's required.

189
00:08:13,890 --> 00:08:16,440
The best thing to do whenever
you leave your system,

190
00:08:16,440 --> 00:08:17,820
hit the Windows and L key.

191
00:08:17,820 --> 00:08:19,470
Just Windows L, Windows L.

192
00:08:19,470 --> 00:08:22,290
Keep thinking that way and
press that right when you leave,

193
00:08:22,290 --> 00:08:25,410
so that it automatically
goes to the locked mode

194
00:08:25,410 --> 00:08:28,560
and you have to put
your password in there.

195
00:08:28,560 --> 00:08:31,140
There's various policies
and programs out there,

196
00:08:31,140 --> 00:08:34,230
stop programs that companies have.

197
00:08:34,230 --> 00:08:37,350
If a company uses a mobile
device management system,

198
00:08:37,350 --> 00:08:39,300
they might be able to just stop all access

199
00:08:39,300 --> 00:08:40,920
to your laptop remotely.

200
00:08:40,920 --> 00:08:42,720
Your administrator might
be able to do that.

201
00:08:42,720 --> 00:08:45,330
So make sure your computer's
running that or, you know,

202
00:08:45,330 --> 00:08:48,060
check in, check with your organization

203
00:08:48,060 --> 00:08:51,030
to see if it actually has that policy

204
00:08:51,030 --> 00:08:52,830
for those types of programs.

205
00:08:52,830 --> 00:08:54,780
If you bring your laptop in the car,

206
00:08:54,780 --> 00:08:56,790
always put it in the trunk,

207
00:08:56,790 --> 00:08:57,720
make sure it's covered.

208
00:08:57,720 --> 00:08:59,130
Make sure the bag is covered.

209
00:08:59,130 --> 00:09:01,560
Use a basic bag, you know,

210
00:09:01,560 --> 00:09:04,710
stow your laptop in just
a very basic looking bag.

211
00:09:04,710 --> 00:09:05,970
You might even use a backpack.

212
00:09:05,970 --> 00:09:09,660
They make backpacks that can store laptops

213
00:09:09,660 --> 00:09:10,800
with nice cushioning,

214
00:09:10,800 --> 00:09:13,650
but doesn't even really
look like a laptop bag.

215
00:09:13,650 --> 00:09:16,350
Or it's a dual feature
bag where it's a backpack,

216
00:09:16,350 --> 00:09:18,300
and, you know, you can
put clothes in there

217
00:09:18,300 --> 00:09:20,100
or whatever and your laptop.

218
00:09:20,100 --> 00:09:21,810
So look into that type of thing as well.

219
00:09:21,810 --> 00:09:23,310
And also it should lock,

220
00:09:23,310 --> 00:09:26,220
but a lock that is not conspicuous.

221
00:09:26,220 --> 00:09:27,870
You know, you want it to be inconspicuous.

222
00:09:27,870 --> 00:09:29,550
You don't want people to be like, oh wow,

223
00:09:29,550 --> 00:09:31,680
look at that amazing lock on that bag.

224
00:09:31,680 --> 00:09:34,380
But lock the bag and try to think about

225
00:09:34,380 --> 00:09:36,300
all this basic physical
security precaution,

226
00:09:36,300 --> 00:09:39,480
'cause you definitely don't
wanna lose that laptop.

227
00:09:39,480 --> 00:09:41,280
So there's a little bit
about laptop security,

228
00:09:41,280 --> 00:09:43,890
and that rounds out the lesson

229
00:09:43,890 --> 00:09:45,690
and I'll see you at the next lesson.