Follow that car

According to a recent survey, Black Cab passengers in London have left more than 60,000 devices ranging from mobile phones, MP3 players, USB memory sticks, and even laptops in cabs in the past six months.

Quite a shocking statistic, particularly as many of those devices carry personal information and it would be extremely easy for a identity thief to extract the information. But what can be done to guard against such losses when we are all forced to carry around a plethora of devices such as mobile phones, laptops and USB memory sticks and flash cards?

After each one of the data slip ups mentioned earlier, a word was bandied about quite frequently – encryption.

Ciphers

Encryption works by scrambling the information stored on a device so that it can only be decrypted using a specific password. These days encryption is so advanced that unless the thief/discoverer has a couple of supercomputers lying around their home, they aren’t going to be able to access your encrypted information.

Encryption isn’t just reserved for spies and military types there are plenty of free, military grade encryption utilities out there that are simple enough for anyone to use.

For those who use USB memory sticks or even SD memory cards or microSD memory cards, I would even go as far as saying encryption is a necessity.

Misplaced information

People often underestimate the dangers of carrying around USB memory sticks (also known as Pen Drives) and flash cards, as this expert points out:

“If it gets into the wrong hands of a criminal, hacker or opportunist, losing your mobile device can have serious implications, so our advice is always encrypt it and password protect it to stop it ever being accessed by anyone other than yourself.”
BBC News | Michael Callahan – Credant Technologies

One of the easiest ways of encrypting your information is to use a piece of software like TrueCrypt. This free and open source software allows you to encrypt an entire hard drive, USB memory sticks or flash cards.

Simply download and install the software, insert your USB flash memory stick or flash memory card and open the software. When presented with a choice of what drives to encrypt, just select your chosen USB memory stick or flash memory card and then the type of encryption, ranging from the standard US NSA quality encryption to even tougher encryption.

The software has a Traveller Mode, which, once set up, allows you to then use the device in another PC. It also works on-the-fly so you can use the USB stick or memory as normal, the software will encrypt/decrypt as necessary.

The software is amazingly easy to use, a step by step tutorial can be found here. All this of course begs the question, if it were that easy, why doesn’t (or didn’t) the Government use encryption?

Tip of the tongue

There are downsides to using encryption. With most applications if you forget the password you can simply click the ‘Forgot Password’ link or reset it. If you encrypt a USB memory drive or flash card and forget the password, well, then you have just lost all the information on that drive, permanently. There is no way to get the information back without the password.

It isn’t the end of the world though, you can also re-format the drive or delete the container, and start again, this time using a password that is memorable. Avoid using something that seems memorable at the time, but when needed you can’t for the life of you recall it.

This could be where a site such as Password Chart comes in handy, it allows the creation of completely random and seemingly meaningless passwords from memorable words. For instance using Horizon and Memory we are able to create the password – jD_6jD4c8@n^P

Apart from the inconvenience of losing access to your own information, and feeling like a bit of an idiot for forgetting your own password, there is another reason why you may not want to forget your encryption password.

The long arm of the law

Since 1st October 2007 it became an offence to fail to hand over encryption passwords to the police, if they request them. Being unable to remember the password is not classed as a plausible defence.

Of course the average person is unlikely to have their USB memory stick or Flash memory card confiscated by the police, but the two year prison sentence mean that it is worth bearing in mind.

Better safe…

Most people will probably assume that they do not need to use encryption, or even that it is too much hassle. But like using car alarms and house alarms, a minor inconvenience can quickly become part of an everyday routine.

Your information and privacy are extremely important, once they are out there in the hands of criminals and hackers, there is no way to get that information back again. The safest bet is to make sure that the information that falls into their hands is unusable, and the only way to do that is encryption.