HOME Calendar Join / Renew PC Alamode About Us HELP Sponsors
Reviews Columns Features Theme Issues   Archives Other  


 Preventive Maintenance

Securing your System
April 2001

Russell James is Operations Manager at BJ Associates of San Antonio. They are an authorized service center for Toshiba and Sony systems. They are the laptop specialist and also handle system builds and parts for desktops. They can take care of any IBM compatible hardware or software problem that you have.


How do you protect your system and more importantly, the information that you store on your system? If you only knew how easy it is for me to get by most of the passwords that you can set on your system, it would amaze you. I have to do it for my customers that lose or forget their passwords. There are other people that know how to get around the safeguards that are available to you that do not have your best interest at heart. These are the type of people that are trying to use your system at work to go places and not get themselves in trouble. You will be the one that gets the reprimand since it is your system. It is up to you to secure your system. If it is your computer at work, it could mean your job. Some of the items that we will discuss are things that you will not have any control over at work unless you help with the setup and maintenance of the computers. Others could help you at work as well as with your home computer. 

The first thing that needs to be secured is the physical pieces of the computer. Some of you might have used a computer at one of the schools or libraries in your neighborhood and wondered what the padlock was doing on the back of the computer. You may be surprised to know that without the locks on the computers, some of the systems have had parts stolen out of them while still on the desks. The newer tower type systems are being made easier to get in to in order to accommodate the computer user of today that does a lot of their own upgrades and computer servicing. There are systems on the market that have a plastic tab on the back of the case that releases the side panel of the computer system. From there you have access to the memory, CPU and all of the add-in cards in the system. A thief could have the insides of a computer in his coat pocket in about a minute and no one would know any different unless the were standing behind him. This is the reason for the padlock. 

The padlock is also needed to keep the software secure. You have the option to have a password setup on your system in a number of different areas. The first would be the CMOS or Bios of the computer. You can set a password for the Bios as well as the system. This would mean that anyone turning on your computer would have to enter a password before being able to access the Bios or before the software for the system would load. This is one of the best ways to secure your computer. There is usually a jumper on the motherboard that will allow you to clear the password and this is the main reason for the padlock. If they can't get the back off of the computer, then they won't be able to change the jumper and bypass the CMOS or System password. 

Another type of security for your computer is a software program that protects the system from being accessed or changes being made to the system configuration. Fortres is one of the software programs that I have seen at a number of the schools in the area. The program is available for purchase for the home for $29.95 as a download. This program will monitor the users actions from the time the system is turned on and based on the setting will allow or deny access to everything on the system. You can place restrictions on browsing of files, floppy drive access, and virtually anything on the system. The schools place the icons that they use on the desktop and everything else is off limits to the users. There is no chance that one of the students can make changes or delete files because access has not been granted to them. When the system boots up you have to enter a specific keystroke to bring up a password prompt that will allow you to turn off the program. By configuring the computer to boot directly from the hard drive you will have cut off just about any chance for someone to get into places that you do not want them to be or to bypass the software.. You have the option to give access to as little or as much as you choose within the settings of the program. You can set up the system so that all the files and icons are accessible but changes cannot be made to the configuration of the system. This would be good for a family with growing and inquisitive children that like to fix things.

Windows also has a password file that stores all of your online user names and passwords that you have asked to be remembered. This means that if someone cancels out of the Windows logon password, they would not be able to use any of these stored passwords. This is about the only security that this password helps with. If you leave the system on or if you have a program that will enter the password for you, this password really does not help. After you get into Windows you have the option to set up a screen saver to turn on after a period of time. You can set the screen saver to require a password before you can go back into Windows. Microsoft has finally written the software so that you are not able to use the three-finger salute (ctrl/alt/del), to stop the screen saver. But that is OK because I can still hit the reset button and after the computer reboots I will be able to go into the display properties and turn the screen saver off without knowing what the password is. Someday maybe they will get it right. 

Since we are into Windows now, let's take a minute to talk about using passwords on some of the programs that you use. Did you know that you can password protect the file that contains all of your data in Microsoft Outlook? In the Control Panel click on Mail and then highlight Personal Folders. Click on Properties and then Change Password. Add a password and verify and anyone starting Outlook on your system will need to enter your password to access your e-mail. Microsoft Money and Quicken can also be password protected in the preferences of the program after you have created or opened your data file. Most of the programs that deal with any type of financial or personal data will allow you to set a password to secure your work. 

Now that you have an idea of how many different areas you can password protect, let's take a look at what your password should or should not be. Some of the don'ts would be consecutive letters or numbers such as 123456 or abcdef. Letters as they appear on the keyboard such as QWERTY or POIUYT would not be a good idea. You would not be the first one to use these so this would make them very easy to guess. Don't use numbers such as your Social Security number, phone number, address, license plate or any birth dates of any of your family members. Try not to use any word that you would be able to look up in the dictionary. There are programs out there that are used to guess passwords. It is very easy to load a word list into one of these programs to check all the words in the English language in a matter of minutes. 

If you can't use all of this easy stuff for passwords, what should you use? The first suggestion I would give you is to find a combination of random letters and numbers at least 6 digits long. Mix in upper and lower case letters to increase the odds of someone not being able to guess the password. The more digits that you use will also increase the time that it will take for a program to crack your password. This will also increase the chances of you forgetting it. Come up with your own language and then choose a couple of words for your password. Maybe wErga4hiBna7 would be a choice that you could use. This 12-digit password would take over a year to be cracked by a password program because of the number of digits and the use of upper and lower case letters. A word from the dictionary or some other type of word list might take 10 minutes to crack. 

I have different levels of passwords that I like to use for the different areas that I have to get into. I use the most secure password for financial sites and easier passwords for less secure sites that I have to login to. I also have a Word document that has all of my user names and passwords in it so if I happen to forget which one I used; there is a place that I can look them up. The document is of course password protected with the most secure password.  

You need to come up with a system that is right for the amount of security that you need, for the work that you do and the amount of sensitive data that you store on your system. There are ways to lock up your system so that you are the only one that can access it. If you are the only one that has access to your computer, then maybe you don't need to have passwords on every level. You need to explore the options that you have and choose a level of security that you feel comfortable with. Passwords are available to help you but they won't if you don't use them wisely.


Copyright© 1996-2008
Alamo PC Organization, Inc.
San Antonio, TX USA