Hi,
I want to restrict the access to my files on the USB stick to applications started from the stick. Background: In a internet cafe I don't want to expose my data to a utility on the computer copying my data from the stick. Even with an encrypted drive any application has access to my data as soon as I opened the drive. Any idea?
Joerg
Visit the Community page
Join our forums
Subscribe to our email newsletter
Subscribe with RSS
Follow us on BlueSky
Follow us on Facebook
Follow us on LinkedIn
Follow us on Mastodon
Follow us on Twitter
Hi Joerg,
Why don't you carry 2 USB sticks? One for use in a "safe place" and one for use in a internet cafe.
I do this and it works just fint. The sticks today is so small that it doesn't matter if it is 1 or 2.
I used one for PortableApps/general files, and one for personal things. However, now I use a batch script to give me some security. it will do three things. The first time it is run, it will create a folder named personal. (Unless there already is one. After moving all your files to the folder, it will ask you iof you want to lock the foledr. After typing Y for yes, it will hide the folder, and turn it into a shortcut to the control panel. Run the sript again, and after you enter your password, the folder is unlocked.
Here is that script. (I put the password in bold so you can change it to whatever you like)
cls@ECHO OFF
title Folder Personal
if EXIST "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" goto UNLOCK
if NOT EXIST Personal goto MDLOCKER
:CONFIRM
echo Are you sure u want to Lock the folder(Y/N)
set/p "cho=>"
if %cho%==Y goto LOCK
if %cho%==y goto LOCK
if %cho%==n goto END
if %cho%==N goto END
echo Invalid choice.
goto CONFIRM
:LOCK
ren Personal "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
attrib +h +s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
echo Folder locked
goto End
:UNLOCK
echo Enter password to Unlock folder
set/p "pass=>"
if NOT %pass%==PUT YOUR PASSWORD HERE goto FAIL
attrib -h -s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
ren "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" Personal
echo Folder Unlocked successfully
goto End
:FAIL
echo Invalid password
goto end
:MDLOCKER
md Personal
echo Personal created successfully
goto End
:End
Simplifying daily life through technology
A clever script.
But what stops someone from viewing/copying the script and running it to unhide the folder. If they can read the script they can see the password that is in it.
You should be able to change the CONFIRM portion to be:
:CONFIRMset cho=
set /p cho=Are you sure u want to Lock the folder(Y/N):
if /I %cho%==Y goto LOCK
if /I %cho%==N goto END
echo Invalid choice.&echo.
goto CONFIRM
A similar construct would work for the password prompt also.
Ed
I just got this from a youtube video. I have no Batch script skills. Also, it keeps out the average person who may find the drive. Plus, it's much more convenient than a zip folder.
Simplifying daily life through technology
Nice ideas. I think the OP was more worried about a potential virus or Trojan on the host infecting their USB drive data files. What they appear to be looking for is the write protect notch/slide on floppies/SD cards implemented in software somehow. There are drives available that have this write protect capability, I think Imation makes at least one model with this capability, there are probably others.
I just found this discussion thread that looks interesting:
http://www.driverheaven.net/applications-software-tweaking/134830-usb-wr...
In it, the discussion ends with the idea to use a SD card reader and a SD card with a hardware write protect switch (common!) as your portable drive.
I cannot remember the link, but Lifehacker featured a program that write-protects flashdrives. It's called thumbscrew, google for the link. I downloaded it, but haven't tried it out. This might be something to check out.
http://www.irongeek.com/i.php?page=security/thumbscrew-software-usb-writ...
It's just a Registry change which means it's not portable.
Ed
That's it. I knew it did something with the registry. I thought it may have changed the way a flash drive reacted to a computers registry, something added to a flash drive to change a registry value of a computer, so it wouldn't write to the flash drive.