Perfectly Protected USB Flash Drive

Discussion in 'other security issues & news' started by pandlouk, Nov 5, 2008.

Thread Status:
Not open for further replies.
  1. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,562
    USB Flash drives are great for moving around our data, sharing photos, documents etc. with friends and colleges but unfortunately if we plug them in an infected machine they can get infected too.

    Here is a tip to immunize your Flash Drive.

    1. First you must go to "folder options" and disable the "simple file sharing" feature.

    pandlouk-1-83802039ks8.jpg
    http://img378.imageshack.us/img378/873/83802039ks8.jpg

    2. Then you must format your flash as ntfs. If the windows do not allow you to do it, you must change the hardware policy of the flsh drive to “optimise for performance”. After that windows will allow you to format it as ntfs.

    pandlouk-2-15724342dr3.jpg
    http://img440.imageshack.us/img440/223/15724342dr3.jpg

    3. Then right click the flash drive and select the "Security" tab. There you must eliminate all the group and user names. This will allow us to make our extra secure custom permissions.

    pandlouk-3-76750712iu7.jpg
    http://img530.imageshack.us/img530/8821/76750712iu7.jpg

    4. Now we must go to the "advanced" security settings

    pandlouk-4-98637629rs5.jpg
    http://img530.imageshack.us/img530/8654/98637629rs5.jpg

    5. Select the "Owner" tab and replace the owner with your account name. Select apply and ok.

    replace5-168089576_5_122_442lo.jpg
    http://img440.imageshack.us/img440/6053/81735187jp4.jpg (expired)

    6. Enter again at the advanced settings and at the "Permissions" tab you should see your account name. Select it, check the “replace permissions entries…” and apply your settings.

    pandlouk-6-11328201mw9.jpg
    http://img262.imageshack.us/img262/21/11328201mw9.jpg

    7. Now select “add”

    pandlouk-7-22009142jg6.jpg
    http://img120.imageshack.us/img120/625/22009142jg6.jpg

    8. At the new window select “advanced”, “find now”, select “Everyone” and press OK.

    pandlouk-8-8atw0.jpg
    http://img440.imageshack.us/img440/3070/8atw0.jpg

    pandlouk-9-8bpk7.jpg
    http://img530.imageshack.us/img530/1471/8bpk7.jpg

    replace8-3-168091936_8.3_122_406lo.jpg
    http://img440.imageshack.us/img440/9934/8cki2.jpg (expired)

    9. Check the “Allow” column at the "Read Attributes" for “Everyone”.

    pandlouk-11-9ame1.jpg
    http://img530.imageshack.us/img530/2518/9ame1.jpg

    replace9-2-168095715_9.2_122_493lo.jpg
    http://img440.imageshack.us/img440/9577/9bju4.jpg (expired)

    10. Return at the generic Security tab and give Full Control at your account.

    pandlouk-13-10du5.jpg
    http://img440.imageshack.us/img440/4103/10du5.jpg

    11. For “Everyone” select allow only for the “Read & Execute” attributes.

    pandlouk-14-11yv7.jpg
    http://img80.imageshack.us/img80/4170/11yv7.jpg

    12. Now your flash drive is immune against all attacks. (Only raw access on the disk will bypass your protection).

    If you want you can also create a folder with write permissions for “everyone”. This way you can easily copy files to your flash drive when it is not connected at your pc.


    Panagiotis
     
    Last edited by a moderator: Feb 26, 2009
  2. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    Excellent guide!
    Thanks for sharing

    SRP for flash drives:cool:
     
  3. KIMW

    KIMW Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    2
    Hi, Can anyone explain me how I can see the images together with the text in this threado_O
     
  4. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,875
    Location:
    New England
    You can't. pandlouk didn't upload the images to the forum, so, they can't be displayed inline within the thread. Also, 3 of the images appear to have expired from imageshack, so they are no longer available from there either.

    Edit: All set. pandlouk regenerated the missing images and I have localized the others to display inline within the thread.
     
    Last edited: Feb 26, 2009
  5. KIMW

    KIMW Registered Member

    Joined:
    Feb 25, 2009
    Posts:
    2
    !!!THANK YOU SO MUCH!!!

    It was my first post in this forum and I see that you LowWaterMark are very fast for answering and you pandlouk very fast for acting. Thank's both of you!!!

    I have been looking around for a solution to protect my USB drive efficiently and this way seems to be the best. Pandlouk this tutorial is great and so helpful! Nevertheless, I have a question... My actual USB drive is FAT32 and if I format it in NTFS is it going to work as fast as in FAT32...?
     
  6. pandlouk

    pandlouk Registered Member

    Joined:
    Jul 15, 2007
    Posts:
    2,562
    You are welcome :)

    Thanks to LowWaterMark now my tutorial appears as it should. :-* :thumb:

    - I can't tell if it's the best way for protecting a usb drive; but is the most secure.

    - Yes, it is, almost, as fast as fat32. Only pay attention not to use ntfs on small drives(<1gb) because it will limit a lot the free space of the drive. And to always use the eject button.

    Panagiotis

    ps.The windows xp home users must download and install the freeware FaJo XP File Security Extension (XP FSE) for being able to to view/change the access rights.
     
Loading...
Thread Status:
Not open for further replies.