Tuesday, May 18, 2010

Preparing for the Loss of an IronKey

First, read this.

1. Do an Online Backup of the Identity Manager.
2. Make a Secure Backup of the current IronKey.
3. Find a phrase that you like, a lyric for a song maybe, or a passage from a favorite book, and make a complex passphrase you can remember. practice it in a volatile medium that defies snooping or recording.
4. Encrypt the entire Secure Backup with strong encryption software, like openssl or some 3rd party vendor you trust.

Then:
- If you have the money, buy a second IronKey (SLC) and restore the Secure Backup onto it.
- Burn the encrypted backup twice to DVD
- Label & store the second IronKey and your DVD in a highly secure, yet separate locations.
- Never write your passphrase down or store it in any file. If you must, put it into some kind of password management tool like Password Safe or KeePass.

Wednesday, January 13, 2010

firefox args

I've been using browser profiles to create different browser configurations and here's how I did it on my IronKey.

Install FireFoxPortable
Create a file called sf.bat and put it in the root of the secure volume.
In that file put the following line:

./[path to portable firefox]/firefox.exe --no-remote -P

Then create a shortcut in the Ironkey Control Panel for sf.bat

Now you can launch portable firefox with the options you want from the IKCP, and choose which profile you want to create/use.

You can have separate profiles custom configured for:
- research
- a specific proxy
- secure sessions
- public tor
- online banking
- etc...

For the really paranoid:
- Add the ProfilePassword add-on and you can password protect your profiles.
- Add the FEBE add-on to back up your extensions.
- Back up (zip/bz2/7z) your Profiles directory.