maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   N900 Security (https://talk.maemo.org/showthread.php?t=33292)

texaslabrat 2009-10-22 16:26

Re: N900 Security
 
Quote:

Originally Posted by corsac (Post 355248)
Good idea, not only the thief gain access to your device, but to all your private network too :)

Only if you are an idiot in how you set up the openvpn server.

RevdKathy 2009-10-22 20:01

Re: N900 Security
 
I'm not worried about security. Once I'm gone, you can steal my n900. But the only way you'e gonna get it is by prizing it out of my cold, dead paw. You think I'll let it out of my sight?

(Knifepoint challenge: n900 or dishonour?)

Laughing Man 2009-10-22 21:10

Re: N900 Security
 
Quote:

Originally Posted by corsac (Post 355248)
Good idea, not only the thief gain access to your device, but to all your private network too :)

Your average thief is not going know anything about the OS, much less how a virtual private network works. And if it really comes down to that, just setup specific firewall rules.

Quote:

Originally Posted by allnameswereout (Post 354928)
Yeah, give the thief access to your mother ship by routing all the data through them honeypots!! :D probably won't work. First he will do is refresh, second is getting rid of it ASAP by selling.

Check oiut thrrad abou truecrypt and luks ..

Well first the user has to figure out how to reflash (I wonder if it's possible to lock people out of that.. would be worth investigating or making it hard enough that unless he/she is a Linux pro with the command line they couldn't do it). And secondly I think that you can still get stolen goods back with the help of the police (sucks for the guy who bought it though). So as long as you could provide the police (if they were helping) with GPS info and proof that it's in X location. But unlikely if it's being sold say out of state.

Powerputer 2009-10-22 21:47

Re: N900 Security
 
does the n97 have remote lock built in any one?...what security features does the n900 have? though the technology isnt nearly as close as maemo's but being both nokias there may be alot of the same stuff

dantonic 2009-10-22 23:09

Re: N900 Security
 
I have a question, excuse my gross ignorance.

In regards to security, assuming the N900 never gets stolen from me :)
Are there ways to make it more secure over a 3G network or wireless network?
Is it easy for some expert user to hack their way into my device for example when I'm connected through 3G or public wifi, and get private information etc...?

thanks

Laughing Man 2009-10-22 23:19

Re: N900 Security
 
You can tunnel all traffic through SSH. Though with cellphones bluetooth hacking is the usual problem (so turn off bluetooth when not using it). If using public wifi, someone can tap your traffic if they're smart enough. So always use certificates (not always reliable) and use https instead of http when logging in.

dantonic 2009-10-22 23:38

Re: N900 Security
 
Quote:

Originally Posted by Laughing Man (Post 355992)
You can tunnel all traffic through SSH. Though with cellphones bluetooth hacking is the usual problem (so turn off bluetooth when not using it). If using public wifi, someone can tap your traffic if they're smart enough. So always use certificates (not always reliable) and use https instead of http when logging in.

I'll look into all that as I'm not sure how to do any of it. Is there no way to secure a bluetooth connection?
Thanks for the tips!

allnameswereout 2009-10-22 23:45

Re: N900 Security
 
Quote:

Originally Posted by Laughing Man (Post 355902)
Well first the user has to figure out how to reflash (I wonder if it's possible to lock people out of that.. would be worth investigating or making it hard enough that unless he/she is a Linux pro with the command line they couldn't do it).

5 minutes Googling, convenient to do with Windows.

Quote:

And secondly I think that you can still get stolen goods back with the help of the police (sucks for the guy who bought it though). So as long as you could provide the police (if they were helping) with GPS info and proof that it's in X location. But unlikely if it's being sold say out of state.
Ah, well, here lies the problem: they don't give a rat. :D They rather want to fine you for not wearing your ID. Because that earns them money.

dantonic, you want some kind of VPN implementation. E.g. OpenVPN.

pinsh 2009-10-22 23:46

Re: N900 Security
 
Does maemo 5 support encrypted partitions using LUKS? I would like to have an AES encrypted partition for my home directory. This way if I loose the device (assuming the session is locked) the finder wont have access to my personal data on the device*. Has someone tried this? I'm wondering how the performance is.


*I assume the finder will reboot the device when trying to use/unlock it. I know that the encryption keys are in RAM when the partitions are mounted.. but I'm not paranoid enough to assume that the finder is sophisticated enough to somehow access them (i.e. gaining root access without rebooting or reading out the RAM via some kind of hardware adapter).

Laughing Man 2009-10-22 23:54

Re: N900 Security
 
Quote:

Originally Posted by allnameswereout (Post 356005)
5 minutes Googling, convenient to do with Windows.

Ah, well, here lies the problem: they don't give a rat. :D They rather want to fine you for not wearing your ID. Because that earns them money.

dantonic, you want some kind of VPN implementation. E.g. OpenVPN.

That's why I was wondering if it was possible to actually change the device so you couldn't flash the device without using Linux and a commandline. Sure they could still Google it but it's alot harder now if you gotta use Linux and a commandline. Not to mention it'll probably just bring them right here. And won't that look suspicious if a brand new user is trying to ask for help?

And true most of the time the police won't help. Though you could always get it back yourself, provided you got enough buddies. :D (yay for having military friends). And if they then decide to call the police you can point out that they possess your stolen device lol.


All times are GMT. The time now is 23:26.

vBulletin® Version 3.8.8