Gyula Kovacs · 2022-10-28 07:11
What would a hacker do if they had physical access to a stolen computer and what script could you execute (remotely or inbuilt based on some trigger) if you knew they had access. I have some ideas but just wondering what elite-level cybsec people would do as I am new to the sphere.
Please expound on any and all ideas.
Sabo Engle · 2022-10-28 14:23
>>20424
My recommendation is:
1) Backup all your data (I like to use mksquashfs but rsync (https://cheat.sh/rsync) works). If you want encryption, I recommend using a .tar file and gpg --symmeric , instead.
2) If you can, update the UEFI firmware/BIOS.
3) Physically disconnect your backup drive and use DBAN to nuke all your disks (If you aren't that paranoid, you can also use Debian installer (or dd) to nuke your disks).
4) Install GNU/Linux (or OpenBSD, check out the FAQ) with full-disk encryption. Don't create swap partition. Debian/Devuan installer can automatically create a LUKS setup. But you can follow ArchWiki guide on other distros: https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system (I recommend using LUKS on a regular partition) Tests this using VirtualBox/Qemu first.
5) (optional) Add UEFI/BIOS password (this doesn't add much security, however)
Also:
* Always clear web browser cache and cookies when you close the browser (or always use "private" browsing mode). You can use something like Bleachbit to do this (but your browser should have this functionality).
* Always use 2-factor authentication if you can.
* Don't use Windoze. But if you must, use TrueCrypt or VeraCrypt. Don't trust M$ BitLocker.
* If you need a password manager, use Keepassxc (backup the password db!)
* Have backups (multiple if you can!) that are up-to-date.
Mentat · 2022-10-28 18:30
>>20427
hey cool thanks for your response!
i still dont understand though, how would a hacker proceed to make use of a laptop they have physical access to, as in its stolen. would they run it up or not at all? if they did run it up, is there anything we can do remotely to stop them/expose their location/nuke the harddrives? how do location services work? google wasnt helpful in figuring out the real nuances of location services, but i looked for only 5 minutes it was 5 am in the morning.
Spooky · 2022-10-28 18:41
>>20427
all these are great though and i sincerely appreciate your effort to explain how you would protect your laptop though!
Nanashi No Gombe · 2022-10-28 19:51
>leave laptop in your car
>laptop and car stolen
>remote drive car into wall
>accident lol
t. Michael Hastings & CIA inc.