Securing a laptop

Here’s a list of security tips I have that might be useful for your laptop.

BIOS

Boot loader

Syslinux and GRUB supports bootloader passwords. Use them.

Filesystem permissions

By default, filesystem permissions allow read access to almost everything. Change the default umask to improve security for newly created mask. Use a umask of 077 for maximum security, which makes new files not readable by users other than the owner.

Disk encryption.

Truecrypt

Use Truecrypt to encrypt data that go into cloud storage services such as Dropbox or Google Drive. Hidden volumes are highly recommended. Store miscellaneous stuff in the encrypted volume and the sensitive information in the hidden volume.

Backups

Backups should be encrypted as well.

Hardware

Disable hardware that you do not use:

Network Security

Chrome

Recommended extensions:

Search Engines:

Passwords

Chat

Other

Stanley Tan
@stnly