5 ms·

Yes I do (since a few months): - http://agilewebsolutions.com/knox http://agilewebsolutions.com/knox (one vault per client) on Mac OS X, including all db data

Yes I do (since a few months): - http://agilewebsolutions.com/knox http://agilewebsolutions.com/knox (one vault per client) on Mac OS X, including all db data if any - http://agilewebsolutions.com/products/1Password http://agilewebsolutions.com/products/1Password for all small-sized sensitive data (eg: production access, passwords etc), with an automated crypted backup I'm looking for a reliable and as seamless solution for Windows at my pace (not a big need). Something I'm also looking at is a way to securely erase all the free space on Mac OS X (to remove past data), as well as something that really works to find sensitive data (where I could define what sensitive means).

Cockbrand 16y ago
There's a "securely erase free space" feature in Disk Utility, which does crash on me when I use it though, making a reboot necessary. Otherwise, you might simply use a one-liner like dd if=/dev/zero of=/tmp/free_space_eater; rm /tmp/free_space_eater This overwrites all unused space on the disk with zeroes. You'll temporarily run out of free diskspace with either option, so it's a good idea to do this when you're not working on your computer.
- thibaut_barrere 16y ago
  Thanks for both tips. I didn't even think it could be built in! Mac OS kind of amazes me on a regular basis.
- Cockbrand 16y ago
  Looking at it again, it's probably a good idea to extend that one-liner a little bit by throwing in a sync command, just to make sure that all zeroes get written to disk before deleting the fill-up file: dd if=/dev/zero of=/tmp/free_space_eater; sync; rm /tmp/free_space_eater
tptacek 16y ago
I like Knox (which is just a wrapper around OS X's encrypted DMG functionality --- but a really good wrapper), but Knox isn't a full-disk encryption solution. The point of full-disk encryption is not having to constantly inventory your files and remember which ones need to be protected, and Knox doesn't save you from that. Knox is handy if you already do full-disk encryption, because it lets you segregate data further (personal financials, client work, etc), so that even if you lose your computer while it's (say) on, an attacker will still need the key to yet another encrypted volume to get that data. I find it extremely useful for things I know I'm not going to need to access often; I also use it for my mail spool.

Cockbrand 16y ago

There's a "securely erase free space" feature in Disk Utility, which does crash on me when I use it though, making a reboot necessary. Otherwise, you might simply use a one-liner like dd if=/dev/zero of=/tmp/free_space_eater; rm /tmp/free_space_eater This overwrites all unused space on the disk with zeroes. You'll temporarily run out of free diskspace with either option, so it's a good idea to do this when you're not working on your computer.

thibaut_barrere 16y ago
Thanks for both tips. I didn't even think it could be built in! Mac OS kind of amazes me on a regular basis.
Cockbrand 16y ago
Looking at it again, it's probably a good idea to extend that one-liner a little bit by throwing in a sync command, just to make sure that all zeroes get written to disk before deleting the fill-up file: dd if=/dev/zero of=/tmp/free_space_eater; sync; rm /tmp/free_space_eater

tptacek 16y ago

I like Knox (which is just a wrapper around OS X's encrypted DMG functionality --- but a really good wrapper), but Knox isn't a full-disk encryption solution. The point of full-disk encryption is not having to constantly inventory your files and remember which ones need to be protected, and Knox doesn't save you from that. Knox is handy if you already do full-disk encryption, because it lets you segregate data further (personal financials, client work, etc), so that even if you lose your computer while it's (say) on, an attacker will still need the key to yet another encrypted volume to get that data. I find it extremely useful for things I know I'm not going to need to access often; I also use it for my mail spool.