An Sace Maɓallin Tsaro na Laptop ko Hardware a Kafe ko Falon Filin Jirgin Sama: Kisan Zama Nan da nan¶

Samun kwamfutar tafi-da-gidanka ta fizge kai tsaye daga teburin kantin kofi, tebur na aiki, ko wurin zama na filin jirgin sama yayin da allon yake ** farke kuma a buɗe , ko fahimtar wani ɓarawo ya tafi da jakar kwamfutar tafi-da-gidanka yayin maɓallin tsaro na kayan aikin ** FIDO2 (YubiKey Har yanzu an saka shi cikin tashar USB-C, shine mafi munin yanayin tsaro na jiki-zuwa-dijital wanda ma'aikacin nesa ko injiniyan software zai iya fuskanta. Ba kamar kwamfutar tafi-da-gidanka da aka kashe ba da aka sace daga ɗakin otal (inda ɓoyayyen faifan diski kamar FileVault ko BitLocker ke kiyaye drive ɗin a kulle), * kwamfutar tafi-da-gidanka mai ɗorewa da ba a buɗe ba** ta baiwa ɓarawon RAM ɗin ku, mai sarrafa kalmar wucewa.1Password / Bitwarden), kukis masu tabbatar da burauza kai tsaye, mai aiki AWS / GCP / Azure Takaddun shaida na CLI, kuma ba a ɓoye su ba -/.ssh maɓallan sirri akan farantin azurfa.

Idan kama-da-kama ya ƙunshi harin jiki, fashi, ko barazanar makami, matsa zuwa wuri mai aminci nan da nan kuma a kira lambar gaggawa ta gida (911 a Amurka da Kanada, 112 a cikin Tarayyar Turai, 999 a Burtaniya; duba lambobin gaggawa) da kuma bitar mu fashi da makami tsira jagora. Kar a taba korar barawon kwamfutar tafi-da-gidanka dauke da makamai ko gudu zuwa titi ko abin hawa. Madadin haka, cire wayoyinku daga aljihun ku a cikin ** daƙiƙa 60 na farko** kuma aiwatar da wannan daidaitaccen tsarin-kisa-kisa da jerin-kulle kayan aiki yayin yin nunin giciye. kwamfutar tafi-da-gidanka da aka sace ko karye yayin tafiya: Kulle MDM da dawo da lokacin faɗuwar rana, Faduwar bayanan samar da bazata, git sirrin yayyo, da bambance-bambancen abin da ya faru, kuma Tsaron aikin nesa na gaggawa da sirrin bayanai.

Yi wannan yanzu¶

1. KADA KA KORATAR BARAWO; Cire wayar ku a cikin daƙiƙa 15 kuma kunna Kulle Hardware Nesa (Find My / Find My Device / Corporate MDM) KAFIN barawo ya saka kwamfutar tafi-da-gidanka a cikin jakar Faraday ko kuma ya kashe Wi-Fi. Idan barawo ya kwace kwamfutar tafi-da-gidanka a bude daga teburin cafe, kwamfutar tafi-da-gidanka ta ci gaba da haɗawa da Wi-Fi na cafe (ko wurin hotspot na wayarka) na farko. 30 to 90 seconds yayin da suke gudu zuwa block:
   • MacBook (iPhone Find My App* Buɗe ** Nemo Nawa -> Na'urori -> [MacBook ɗin ku] -> Alama Kamar Rasa (Activate*** kuma shigar da PIN na kulle lambobi 4 zuwa 6. Nan take wannan umarni ya ci karo da MacBook akan Wi-Fi, macOS yana ƙare zaman mai amfani mai aiki, yana tilasta allon kulle firmware/OS, kuma yana buƙatar bayanan ɓoyewa na FileVault don sake shiga.
   • ** Kwamfutar tafi-da-gidanka na Windows 11: ** A kan mai binciken wayar ku, buɗe account.microsoft.com/devices -> zaɓi kwamfutar tafi-da-gidanka -> matsa ** Nemo na'urara -> Kulle**.
2. **Idan kwamfutar tafi-da-gidanka tana da alaƙa da Hotspot na Wayar ku, KAR ku kashe hotspot ɗinku na daƙiƙa 60 na farko har sai kun danna "Mark as Lost / Remote Lock", sannan ku raba shi nan da nan bayan. Mark As Lost kashe umarnin zuwa kwamfutar tafi-da-gidanka da aka bude. Jira daƙiƙa 30 don umarnin kulle don watsawa, sannan kunna ** Kashe Hotspot na sirri ** da ** Kashe Bluetooth ** (wanda kuma ke haifar da macOS / Windows Dynamic Lock idan an haɗa su).
3. Kira Tsaron IT na kamfanin ku / layin wayar SOC akan wayar ku (0 to 3 minutes) don korar soke Zama na IdP na Duniya (Okta / Microsoft Entra ID / Google Workspace) DA MDM Shafa Nesa (Jamf / Intune / Kandji. Ko da barawo ya kiyaye allon kwamfutar tafi-da-gidanka a farke ta hanyar kunna waƙa kuma ya kashe Wi-Fi, sokewar ** Single Sign-On (SSO) da alamun shiga** akan uwar garken gajimare yana ba da tabbacin cewa lokacin da ɓarawo ya sake haɗa kwamfutar tafi-da-gidanka zuwa * kowane * haɗin intanet don samun damar Slack, Gmail, Github, kowane rukunin yanar gizo ya riga ya mutu.401 Unauthorized).
4. ** Idan Mai sarrafa kalmar wucewa (Password Manager)1Password, Bitwarden, LastPass, Dashlane, Apple Passwords) An buɗe a kan kwamfutar tafi-da-gidanka, KYAUTA na'urar da aka sace daga app ɗin wayarku nan da nan.** Buɗe 1Password ko Bitwarden akan wayar hannu, je zuwa ** Sarrafa Account / Web Vault -> Zama mai aiki / Na'urori masu izini*, sannan danna ** Haɓaka / sokewa** akan kwamfutar tafi-da-gidanka da aka sace, sannan sai a jujjuya kalmar wucewa ta Mastertex idan kun share kalmar sirri.
5. ** Idan Maɓallin Tsaro na Hardware (YubiKey 5C Nano / Titan Key) an bar shi a cikin tashar USB na kwamfutar tafi-da-gidanka (ko kuma haɗe zuwa maɓallin sata), shiga cikin asusunku daga wayarka ta amfani da Maɓallin Ajiyayyen ko Passkey ɗin ku kuma DELETE wannan takamaiman shaidar FIDO2.** Yayin da maɓallin kayan masarufi na FIDO2 yana buƙatar ** FIDO2 PIN (4 to 63 characters*** don mara kalmar sirri resident-key login, lokacin da aka yi amfani da shi azaman * factor na biyu* (U2F / WebAuthn non-discoverable) a kwamfutar tafi-da-gidanka inda browser ɗinka ya riga ya adana sunan mai amfani da kalmar wucewa, ** duk wanda ya taɓa lambar ƙarfin zinare akan YubiKey ya wuce 2FA ba tare da PIN ba**.
6. ** Shake kuma juya kowane takaddun haɓaka na gida da aka adana a cikin babban fayil ɗin ku (-/.ssh/id_ed25519, -/.gnupg, -/.aws/credentials, -/.kube/config, .env Fayiloli, da GitHub/GitLab Alamomin Samun Keɓaɓɓen Sirri)** Ko da girgije SSO ya mutu, maharin da ke ajiye kwamfutar tafi-da-gidanka da ba a buɗe ba yana da damar shigar da tsarin fayil zuwa kowane maɓallin SSH da ba a ɓoye ba da alamar girgije API zaune a tarihin tashar ku (-/.zsh_history / -/.bash_history).

Bishiyar yanke shawara: Buɗe kwamfutar tafi-da-gidanka ta kwace vs. satar maɓallin tsaro na hardware vs. hawan igiyar ruwa¶

Bi wannan babban taswirar rarrabuwar kawuna a cikin mintuna 15 na farko bayan cafe, wurin aiki, ko lamarin tsaron filin jirgin sama.

flowchart TD
    A["Gaggawa Tsaron Filin Aiki na Jama'a (Kafe, Filin Haɗin kai, Wurin Filin Jirgin Sama, Jirgin ƙasa)"] --> B{"Me ya faru daidai?"}
    B -->|"Kwamfutar tafi-da-gidanka An Fice Yayin Buɗewa"| C["0-60s: A wayarka, kunna Apple Find My 'Mark as Lost' ko Microsoft'Kulle Na'urar' -> Kira Kamfanin IT SOC don MDM Kulle/Shafa + Kashe Zama na SSO na Duniya"]
    B -->|"An Sace Kwamfutar Laptop Yayin Kulle / Rufe Rufe / An Kashe"| D["FileVault / BitLocker yana kare faifai a lokacin hutawa -> Mai da hankali Nemo Shafa Nawa / MDM na nesa -> Juya kalmar wucewa ta SSO & soke zaman girgije mai aiki"]
    B -->|"Maɓallin Tsaro na Hardware (YubiKey) An Sace (Shi kaɗai ko An haɗa shi cikin Laptop)"| E["Shiga cikin IdP (Okta/Entra/Google), GitHub, AWS, da Mai sarrafa kalmar wucewa daga wayarka ta amfani da Maɓallin Ajiyayyen/Passkey -> Share rajistar YubiKey da aka sace"]
    B -->|"Hawan Kafada / Wani Yayi Film Din Allonka ko Allon madannai"| F["Kulle allon nan da nan (Cmd + Ctrl + Q / Win + L) -> Matsar zuwa yanki mai zaman kansa -> Juya takamaiman kalmar sirri/PIN da aka buga + kowane maɓallan API da ke bayyane akan allo"]
    C --> G["Halakar da kwamfutar tafi-da-gidanka da aka sace a cikin 1Password / Bitwarden Web Vault -> Kashe duk zaman yanar gizon Google / Microsoft / Okta / Slack / GitHub"]
    E --> G
    G --> H{"Shin kwamfutar tafi-da-gidanka tana da maɓallan masu haɓaka gida (gida .ssh, .aws, .gnupg, Git PATs, Docker/K8s tokens)?"}
    H -->|"YES: Injiniya / Admin / Kwamfutar tafi da gidanka"| I["Share .ssh maɓallan jama'a daga GitHub/GitLab & sabar samarwa ('maɓallin_izinin') -> Kashe maɓallan AWS IAM a cikin Console -> Murke maɓallin GPG"]
    H -->|"NO: Madaidaicin Kasuwanci / Mai Amfani"| J["Tabbatar da aiki tare da mai bincike ('Chrome/Edge/iCloud Keychain') an sanya hannu daga nesa -> Fayil rahoton 'yan sanda na gida & buƙatun adana CCTV na Cafe"]
    I --> J

Sashe na 1: Minti 5 "Kill Chain" don kwamfutar tafi-da-gidanka da ba a buɗe ba (umarni-ta hanyar dandamali)¶

Lokacin da aka kwace kwamfutar tafi-da-gidanka yayin buɗewa, ** kar a jira har sai kun dawo gida ko siyan sabuwar kwamfuta don fara soke shiga**. Kowane ɗayan mahimman ayyukan da ke ƙasa ana iya aiwatar da su ** kai tsaye daga iPhone ɗinku ko wayar Android yayin da kuke tsaye a cikin kantin kofi ***.

Mataki 1: Ƙaddamar da tsarin aiki daga nesa (0 to 60 seconds)¶

1. ** Apple MacBook (macOS::**
   • Bude ** Nemo My ** app akan iPhone ɗinku (ko shiga cikin icloud.com/find akan kowane mai bincike na waya, wanda ya wuce 2FA don haka zaka iya amfani dashi koda wayarka ma an sace).
   • Matsa ** Na'urori -> [MacBook ɗinku] -> Alama Kamar Yadda Ya Rasa -> Kunna**.
   • Idan barawon nan da nan ya kashe Wi-Fi ko kuma ya rufe murfin? The Mark As Lost ko Erase This Device layukan umarni akan sabobin APNs na Apple kuma suna kunna ** tsaga-na biyu ** MacBook na gaba ya taɓa kowace hanyar sadarwar Wi-Fi (ko ta hanyar Neman hanyar sadarwa na). Rufe murfin MacBook shima yana kulle allon ta atomatik idan Na buƙatar kalmar sirri nan da nan bayan an fara bacci ko kuma an kunna mai adana allo.
2. ** Windows 10 / Windows 11 Laptop:
   • A kan burauzar wayar ku, buɗe account.microsoft.com/devices, zaɓi kwamfutar tafi-da-gidanka, sannan danna ** Nemo na'urara -> Kulle**.
   • Idan kwamfutar tafi-da-gidanka ce ta kamfani na Windows wanda Microsoft Intune ke sarrafa, shiga cikin Intune Portal Company (portal.manage.microsoft.com akan wayarka -> zaɓi kwamfutar tafi-da-gidanka -> danna Ayyukan -> Kulle Nesa ko ** Sake saita lambar wucewa / goge ***.

Mataki 2: Kashe duk girgije Single Sign-On (SSO) da zaman browser (1 to 3 minutes)¶

Ko da barawon ya kashe Wi-Fi akan kwamfutar tafi-da-gidanka don bincika rumbun kwamfutarka ta layi ta layi, a ƙarshe za su haɗa kwamfutar tafi-da-gidanka zuwa hotspot na salula ko kwafi na burauzar ku. Cookies kuma Local Storage Fayilolin SQLite zuwa wata na'ura don sace zaman gidan yanar gizon ku. Kada waɗannan alamun zaman da ke gefen uwar garken yanzu daga wayarka:

Sashe na 2: Idan aka sace YubiKey ko Hardware Tsaro Key?¶

Yawancin ma'aikata masu nisa suna barin ƙaramin bayanin martaba YubiKey 5C Nano suna shigar da dindindin a gefen tashar USB-C na kwamfutar tafi-da-gidanka, ko ɗaukar YubiKey 5 NFC akan wani shingen da aka kwace tare da jakar kwamfutar tafi-da-gidanka. Firgici yakan taso a cikin: "Shin barawo zai iya amfani da YubiKey dina don shiga duk asusu na? Kuma ta yaya zan shiga asusuna ba tare da YubiKey na ba?"

1. Fahimtar abin da barawo zai iya kuma ba zai iya yi da YubiKey na sata ba¶

Maɓallin tsaro na hardware na zamani (YubiKey 5 Series, Google Titan, Token2, Nitrokey) yana goyan bayan ** ƙa'idodin tabbatarwa daban-daban guda huɗu ***, kowannensu yana da bayanin haɗarin daban lokacin da aka sace ta jiki:

1. ** FIDO2 Takardun Takardun Ganowa (Passkeys /Login mara kalmar sirri):**
   • ** PIN na FIDO2 ya kiyaye shi (4 to 63 alphanumeric characters.** Idan barawo ya toshe YubiKey ɗinka da aka sace a cikin nasu kwamfuta kuma yayi ƙoƙarin amfani da FIDO2 Passkey mara kalmar sirri, guntu na YubiKey yana buƙatar PIN ɗin FIDO2 naka. Bayan ** 8 kuskuren kuskuren PIN na jere , FIDO2 applet akan YubiKey ** kulle dindindin da tubalin kai (Factory Reset Required, goge duk takardun shaida.
2. ** FIDO U2F / WebAuthn Factor Na Biyu (Username + Password + Touch YubiKey::**
   • Babu PIN da ake buƙata ta tsohuwa akan yawancin gidajen yanar gizo. Idan barawo ** kawai** ya sace YubiKey ɗinku daga aljihun gashin ku (kuma ba * yana da kwamfutar tafi-da-gidanka ko kalmomin shiga ba), YubiKey ba shi da amfani a gare su saboda maɓallin U2F ba ya bayyana waɗanne gidajen yanar gizon da aka yiwa rajista.
   • MAGANIN HATSARI IDAN AKA SACE A LAPTOP DINKA: Idan barawon ya sace kwamfutar tafi-da-gidanka da ba a buɗe ba TARE da YubiKey ɗin da aka toshe a gefe**, mai sarrafa kalmar sirri na browser ya riga ya ba da sunan mai amfani da kalmar sirri, kuma barawon kawai ya danna maballin su zuwa bankin YuKey FA. AWS tushen asusun, ko musayar crypto.
3. ** YubiKey BudePGP (gpg SmartCard) & PIV (X.509 Certificate) Applets:**
   • Kariyar kayan masarufi ** PIN mai amfani (tsoho 123456 idan baku taɓa canza shi ba)** da ** Admin PIN (default 12345678*** wannan kulle bayan ** 3 kuskuren ƙoƙari **. * (Idan kun bar OpenPGP PIN a tsohuwar masana'anta 123456, ɗauka maɓallin PGP akan cewa YubiKey ya lalace kuma a soke shi nan da nan.)
4. ** YubiKey Static Password / Yubico OTP (Dogon harafi 44 ccccc... zaren da ake fitarwa lokacin da aka taɓa):**
   • Idan kun saita Slot 1 ko Slot 2 na YubiKey ɗin ku don rubuta kalmar sirri ta tsaye ko Yubico OTP a duk lokacin da aka taɓa kushin zinare na daƙiƙa 1 zuwa 3, duk wanda yake riƙe da maɓallin zai iya buɗe Notepad, taɓa maɓallin, sannan ya karanta wannan a tsaye.

2. Ka'idar mataki-mataki don soke rajistar YubiKey da aka sace a cikin mintuna 5¶

1. ** Ɗauki Maɓallin Tsaro na Hardware na Ajiyayyen (ko amfani da iPhone / Android Passkey / App na Tabbatarwa / Lambobin Ajiyayyen):**
   • Mafi kyawun aiki (wanda NIST SP 800-63B ya umarta) shine koyaushe yin rijista ** aƙalla maɓallan tsaro na zahiri guda biyu ** (ɗaya akan maɓalli/kwamfyutar tafi da gidanka, ɗaya a kulle a cikin kaya mai aminci ko tafiya) da lambar wucewar na'ura akan wayar salularka.
2. ** Shiga cikin manyan asusunku kuma ku share YubiKey KAWAI da aka sace ta sunan laƙabinsa:**
   • Google / Gmail (myaccount.google.com/signinoptions/two-step-verification):** Matsa Maɓallan kalmar wucewa da maɓallan tsaro -> nemo maɓallin sata -> danna alamar ** Sharar Shara *** don cire shi.
   • ** Microsoft / Entra ID (mysignins.microsoft.com/security-info):** Nemo maɓallan tsaro da aka sace** -> danna Share.
   • ** ID na Apple (Settings -> [Your Name] -> Sign-In & Security -> Two-Factor Authentication -> Security Keys):** Matsa maɓallin sata -> ** Cire Maɓalli **.
   • ** GitHub (github.com/settings/security):** Karkashin Maɓallan Shiga da Hanyoyin abubuwa biyu -> Maɓallan tsaro, danna Share kusa da maɓallin sata.
   • ** Tushen AWS / IAM (IAM Console -> Users -> Security credentials -> Multi-factor authentication):** Zaɓi maɓallin tsaro na FIDO da aka sace sannan danna ** Cire ***.
   • ** 1 Kalmar wucewa / Bitwarden / Cloudflare / Coinbase / Kraken:** Buɗe saitunan 2FA na kowane sabis kuma share rajistar alamar kayan aikin sata.

Sashe na 3: Mai haɓakawa, DevOps, da SSH/GPG jujjuya maɓalli (The -/.ssh kuma -/.aws gaggawa)¶

Idan kai injiniyan software ne, mai gudanarwa na DevOps/SRE, masanin kimiyyar bayanai, ko wanda ya kafa farawa wanda aka sace kwamfutar tafi-da-gidanka da ba a buɗe ba, ** soke kukis ɗin burauza rabin yaƙin**. Barawo wanda ya zubar da kundin tarihin gidanku yana da damar yin amfani da kowane maɓalli na sirri na dogon lokaci da alamar CLI da aka adana azaman bayyanannen rubutu akan SSD ɗinku.

Cire wannan ** 5-Mataki Mai Haɓaka Shawarar Ƙarfafawa** daga wariyar ajiya ko kwamfutar tafi-da-gidanka ta abokin aiki a cikin ** mintuna 15 na farko**:

1. ** Maɓallan SSH (-/.ssh/id_ed25519 / -/.ssh/id_rsa):** Ko da kalmar wucewa ta kare, ɗauka kowane maɓallin SSH da aka ɗora a ciki ssh-agent a cikin RAM akan kwamfutar tafi-da-gidanka da ba a buɗe ba an lalatar da shi. Je zuwa github.com/settings/keyskumagitlab.com/-/user_settings/ssh_keys sannan ka share maɓallin jama'a na SSH na kwamfutar tafi-da-gidanka nan da nan, kuma ka sa abokin aiki ya cire maɓallin jama'a daga gare shi -/.ssh/authorized_keys akan duk sabar Linux samarwa da runduna bastion.
2. ** Shaidar CLI ta Cloud (-/.aws/credentials, -/.config/gcloud, -/.azure):** Bude AWS IAM Console -> Masu amfani -> [Ka] -> Shaidar Tsaro kuma danna ** Kashe / Share** akan duk Maɓallan shiga (AKIA...). Soke Google Cloud gcloud auth OAuth yana wartsakar da alamun ta hanyar Shafin Haɗin Kuɗi na ɓangare na Google (Asusun Google)Google Cloud SDK).
3. ** GitHub, GitLab, npm, PyPI, da Docker Access Tokens:** Je zuwa github.com/settings/tokens kuma danna ** soke duk *** akan PATs masu kyau da kuma Classic ghp_... alamu. Soke -/.npmrc alama (npmjs.com) kuma -/.pypirc alamu.
4. ** Kubernetes (-/.kube/config& Terraform (-/.terraform.d*** Juya takaddun abokin ciniki na Kubeconfig ko alamun OIDC da soke alamun Terraform Cloud API (app.terraform.io).
5. ** Maɓallan Sa hannu na GPG / PGP (-/.gnupg):** Buga Takaddun Shawarwar GPG da aka riga aka samar ((gpg --import revoke.asc kuma gpg --keyserver keys.openpgp.org --send-keys [KeyID]) kuma share maɓallin GPG daga GitHub.

Sashe na 4: Amsa ga "Shulder Surfing" (Wani ya yi fim ko ya kalli allon ku a cafe/jirgin)¶

Me zai faru idan babu wanda ya sace kwamfutar tafi-da-gidanka ta zahiri, amma yayin aiki a ƙofar filin jirgin sama, a kan jirgin sama, ko a cikin cafe, za ku kama mutumin da ke zaune a bayan ku ko a wurin zama kusa ** yana yin fim ɗin allonku ko keyboard tare da kyamarar wayar hannu** (ko kallo kai tsaye a buɗe. .env fayil, kalmar sirrin faɗakarwa, ko bene na sirri na sirri)?

1. Kulle allonku nan take tare da maɓalli guda reflex:
   • ** macOS:** Latsa Cmd + Ctrl + Q (kulle allon nan da nan ba tare da rufe aikace-aikacen ba).
   • ** Windows: *** Latsa Win + L.
   • Linux: Latsa Super + LkoCtrl + Alt + L.
2. Kada ka fara husuma ta jiki: A kwantar da hankalin kwamfutar tafi-da-gidanka, matsa zuwa wurin zama mai zaman kansa tare da bayanka a jikin katafaren bango, sannan ka sake duba abin da yake gani akan allonka ko aka buga akan madannai a cikin mintuna 10 da suka gabata.
3. Juya duk wani sirrin da ya haskaka akan allo:
   • Idan ka buga ** kalmar sirrin shiga kwamfutar tafi-da-gidanka ko mai sarrafa kalmar sirri Master Password** yayin da wani zai iya ganin yatsunka, canza kalmar sirri nan da nan daga wuri mai zaman kansa.
   • Idan taga tasha, .env fayil, Mai ba da labari, ko na'ura wasan bidiyo na girgije yana bayyane akan allo, ɗauka kowane babban ƙuduri 4K Kamarar wayar hannu a cikin mita 3 (ƙafa 10) ta ɗauki ƙwanƙwasa, hoto mai zuƙowa na maɓallan API ɗin ku, kuma ta juya waɗannan maɓallan nan da nan (duba Zuƙowa na bazata ko Ƙungiyoyin ɗigo-ruwa na allo).

6-Maki 6 "Cafe & Tabbacin Filin Jirgin Sama" Lissafin Taswirar Kwamfutar Kwamfuta (Kafa A Yau)¶

Saita wadannan kayan masarufi guda shida da saitunan OS a yanzu ta yadda ko da barawo ya kwace kwamfutar tafi-da-gidanka da ke budewa daga tebur gobe, ** kwamfutar tafi-da-gidanka ta kulle kanta kafin barawon ya isa kofar shagon kofi ***:

• 1. Kunna Kulle Auto Kulle ta Bluetooth (Dynamic Lock na Windows / Near Lock ko Apple Watch Auto-Lock akan Mac):
  • Windows 11: Haɗa wayar iPhone ko Android zuwa kwamfutar tafi-da-gidanka ta Bluetooth, sannan ka je zuwa Settings -> Accounts -> Zaɓuɓɓukan shiga -> Kulle mai ƙarfi sannan ka duba "Bada Windows ta kulle na'urarka ta atomatik lokacin da ba ka nan". Da zarar barawo ya gudu da nisan mita 10 (taku 33) daga tebur tare da kwamfutar tafi-da-gidanka (ko ka kashe Bluetooth akan wayarka a cikin aljihunka), Windows yana kulle allon ta atomatik.
• 2. Saita "Kusurwar Zafi" da Makullin Kulle Batir Batir 60-na Biyu:
  • A kan macOS (** Saitunan tsarin -> Kulle allo ) da Windows ( Saituna -> Tsarin -> Power & baturi -> Allon da barci **), saita ** Kunna nuni / Bukatar kalmar wucewa akan baturi ** zuwa ** 1 ko mintuna 2 ** lokacin aiki a cikin jama'a.
• 3. Sanya 1Password / Bitwarden don Kulle Nan take Lokacin da tsarin ya kulle ko Bayan Minti 1 Rago:
  • A cikin 1Password -> Saituna -> Tsaro, saita ** Kulle bayan kwamfutar ba ta aiki don 1 minute**, duba ** Kulle akan barci ***, kuma kunna ** ID na taɓawa / Windows Hello ** don haka ba za ku taɓa buga kalmar wucewa ta Jagora tare da maɓallan maɓalli ba a cikin jama'a.
• 4. Bukatar Hardware Touch DA Passphrase don Kowa ssh kuma git Aiki (1Password SSH Agent ko FIDO2 ed25519-sk Makullin):
  • Maimakon barin ba a ɓoye ba -/.ssh/id_ed25519 fayiloli akan rumbun kwamfutarka, adana maɓallan SSH ɗinku a cikin ** 1Password SSH Agent** (wanda ke buƙatar amincewar ID na biometric Touch akan kowane guda ɗaya. git push ko ssh haɗi) KO samar da kayan aiki mai ɗaure ssh-keygen -t ed25519-sk -O verify-required maɓallan da ba za a iya kwafi a kashe YubiKey ɗin ku ba kuma suna buƙatar PIN ɗin FIDO2 ɗin ku akan kowane amfani.
• 5. Koyaushe Haɗa Magnetic 60-Degree Tace Allon Sirri na Micro-Louver (3M / Kensington) cikin jama'a:
  • Allon sirrin maganadisu yana sanya duhun nunin ku zuwa baƙar fata mai ƙarfi ga duk wanda ke kallo daga kusurwa sama da ** 30 a kashe-tsakiyar**, masu makantar kafada a cikin jirgin sama ko wurin zama na cafe na gaba.
• 6. Kada a bar kwamfutar tafi-da-gidanka ba a kula da ita ba na tsawon daƙiƙa 30 kawai don ɗaukar kofi ko amfani da gidan wanka:
  • Ƙarshe 70 percent Satar cafe da filin jirgin sama na faruwa a lokacin da ma'aikaci ya bar kwamfutar tafi-da-gidanka a kan tebur na tsawon daƙiƙa 45 don ɗaukar latte a kan tebur ko kuma ya tambayi wani baƙo "Shin za ku iya kallon kayana?" Koyaushe haɗa kwamfutar tafi-da-gidanka a cikin jakar ku ɗauka tare da ku, ko madauki ** Kensington NanoSaver Karfe Cable Lock** a kusa da firam ɗin tebur.

Lambobin gaggawa na yanki da ka'idojin hukumar¶

Bayan kun kulle kwamfutar tafi-da-gidanka da aka sace kuma kuka soke zaman girgije mai aiki (minti 5 na farko), bayar da rahoton satar ta jiki ga hukumomin gida kuma ku adana hotunan CCTV na cafe/ tashar jirgin sama kafin a sake rubuta shi (mafi yawan wuraren shakatawa suna sake rubuta CCTV kowane awa 24 zuwa 72):

Amurka da Kanada¶

• Aikin 'Yan sandan Gaggawa (Fashi / Wanda ake tuhuma a Gani): Kira 911. (Idan a cikin tashar tashar jirgin sama, a tuntuɓi 'Yan Sanda na Filin Jirgin Sama / 'Yan Sanda na Port Authority nan da nan a filin ƙofar da ke kusa don jami'an su iya kama barawon kafin su fita daga tsaro ko shiga jirgin kasa).
• Rahoton 'yan sanda na gaggawa (Ana Bukatar Don Inshorar Kamfani & Rufe Katin Kiredit): Kira 311 ko layin 'yan sanda na gari don samun lambar rahoton faruwar lamarin 'yan sanda**.
• Rahoton Sata na Intanet na Tarayya/Kamfani: Idan na'urar da aka sata da aka buɗe ta haifar da kutse ko satar hanyar sadarwa mara izini, kai rahoto ga Cibiyar Korafe-korafen Laifukan Intanet ta FBI (FBI).ic3.gov*** da ** CISA (cisa.gov/report*** a Amurka, ko ** Cibiyar Tsaro ta Intanet ta Kanada (Cibiyar Tsaro ta Intanet)cyber.gc.ca*** in Kanada.

Ƙasar Ingila¶

• Aikewa da 'Yan sandan Gaggawa (Fashi / Barawo Har Yanzu Ana Gaba): Kira 999.
• Rahoton 'Yan Sanda Ba Gaggawa ba & Ikon Railway/Filin Jirgin Sama:
  • A cikin cafes ko wuraren titi: Kira 101 (ko shigar da kan layi tare da rundunar 'yan sanda na gida) don samun ** Lambar Magana (Laifi)CRN)** nan take.
  • A kan jiragen kasa ko a cikin tashar jirgin ƙasa / Tube: Rubutu ** 'Yan sandan sufuri na Burtaniya (BTP*** akan 61016 ko a kira 0800 40 50 40.
• ** Ƙimar Ƙarfafa Bayanai (UK GDPR):** Idan an kwace kwamfutar tafi-da-gidanka yayin da ** buɗe** kuma ya ƙunshi bayanan sirri na abokan ciniki ko ma'aikata, sanar da Jami'in Kariyar bayanan ku (DPO) nan da nan don tantance ko rahoton cin zarafi na awanni 72 na UK ICO (ico.org.uk*** ana bukata.

Tarayyar Turai¶

• Lambar Gaggawa ta Pan-Turai: Kira 112 don taimakon 'yan sanda na gaggawa a duk ƙasashe membobin EU.
• ** Rahoton 'Yan Sanda (Procès-Verbal / Strafanzeige / Denuncia):** Ziyarci ofishin ƴan sanda mafi kusa (Commissariat de Police, Polizeiwache, Comisaría de Policía, Questura) domin samun rubutaccen rahoton sata, sannan sanar da DPO na kamfanin ku nan take a ƙarƙashin GDPR Article 33 idan an buɗe na'urar a lokacin sata.

Australia da New Zealand¶

• Aikon Gaggawa: Kira 000 a Ostiraliya ko 111 a New Zealand.
• Rahoton 'Yan Sanda Ba-Gaggawa ba:** Kira 131 444 (Layin Taimakon 'Yan sanda a Ostiraliya) ko 105 (Ban Gaggawa 'Yan sandan New Zealand) don samun lambar taron 'yan sanda, da bayar da rahoton sasantawa na kamfani ta hanyar cyber.gov.au (ACSC) ko CERT NZ (cert.govt.nz).

Indiya da Asiya-Pacific¶

• Indiya: Kira 112 (Gaggawa) ko 100 ('Yan sanda), da kuma shigar da rahoton nan da nan ** e-FIR / Rahoto Labarin Labari ** ta hanyar tashar 'yan sanda ta jihar don haka kuna da takaddun hukuma don rufe kadarar MDM na kamfani da * CERT-In** yarda.
• Singapore & Japan: A cikin Singapore, kira 999 (Gaggawa) ko shigar da rahoton kan layi a Gidan Sabis na e-Services na 'Yan Sanda na Singapore.police.gov.sg)**. A Japan, kai rahoto kai tsaye zuwa mafi kusa Koban (akwatin 'yan sanda) ko ofishin 'yan sanda na filin jirgin sama don karɓar Tounan-Todoke (Lambar Rahoton Sata).

Tambayoyin da ake yawan yi¶

Shin zan fara danna "Goge Wannan Na'urar" (Goge Nesa) ko "Mark as Lost" (Kulle Nesa) da farko lokacin da aka buɗe kwamfutar tafi-da-gidanka ta MacBook ko Windows?¶

Koyaushe kunna ** Alama A Matsayin Rasa / Kulle Nesa na FARKO **, kuma jira har sai an tabbatar da kulle (ko daidaita tare da ƙungiyar IT ɗin ku) kafin kunna cikakken gogewa / goge, saboda dalilai biyu masu mahimmanci. Na farko, a `Remote Lock` fakiti kankani ne kuma yana aiwatar da microsecond nan take ya isa kwamfutar tafi-da-gidanka akan Wi-Fi, yana ƙare zaman tebur mai aiki da kulle allo a bayan fayil ɗin FileVault ko BitLocker yayin da yake kiyaye ikon kwamfutar tafi-da-gidanka don kunna wurin GPS/Wi-Fi nawa zuwa Nemo Nawa. Na biyu, idan ka danna "Cire Daga Account" (wanda ya bambanta da Goge), ba da gangan ka kashe Kulle kunnawa ba, ba da damar barawon ya goge kuma ya sake siyar da MacBook da tsafta. Karka taɓa danna "Cire Wannan Na'urar" daga Nemo Nawa.

Idan kwamfutar tafi-da-gidanka na da FileVault (Mac) ko BitLocker (Windows) a kunne, shin hakan baya kare fayilolina ko da an sace su yayin da allon yana buɗe?¶

Rufaffen faifan cikakken diski (FileVault 2 da BitLocker) suna kare bayanai ** a hutawa ** (lokacin da kwamfutar tafi-da-gidanka ke kashewa, ɓoyewa, ko kulle a gaban allo/boot). Koyaya, yayin da kuke shiga cikin tebur ɗinku tare da buɗe allon, maɓallin ɓoyewa yana zaune a cikin tsarin RAM mara ƙarfi don tsarin aikin ku da ƙa'idodinku su iya karantawa da rubuta fayiloli. Idan barawo ya kwace kwamfutar tafi-da-gidanka yayin da allon yana farke kuma ya ci gaba da danna waƙar waƙa don haka allon baya kullewa, FileVault da BitLocker ba sa hana su yin kwafin fayilolinku, wanda shine dalilin da ya sa aika umarnin kulle nesa daga wayarku da soke zaman girgije a cikin daƙiƙa 60 na farko yana da matukar mahimmanci.

Me zai faru idan iPhone DA MacBook dina da ba a buɗe ba duka an fizge su tare a tebur ɗaya: ta yaya zan kulle su ba tare da wayata don 2FA ba?¶

Apple ya gina takamaiman hanyar wucewa ta gaggawa don wannan ainihin yanayin: aro wayar ma'aikacin cafe, wayar baƙo, ko kwamfutar tafi-da-gidanka ta abokin aiki kuma buɗe **`icloud.com/find`** kai tsaye (lura da `/find` a karshen URL). Ba kamar babban ba `icloud.com` portal,*`icloud.com/find` yana ba ku damar shiga tare da Imel ɗin ID ɗin ku na Apple da kalmar sirri KAWAI BA TARE da buƙatar lamba 6 mai lamba Biyu Tabbatarwa ba**. Da zarar ciki `icloud.com/find`, nan da nan za ku iya sanya duka iPhone ɗinku da MacBook ɗinku cikin ** Lost Mode **, ku kulle fuska biyu kuma kuna kashe Apple Pay a ƙasa da daƙiƙa 30.

Barawo zai iya cire maɓallan sirri na SSH ko kalmomin shiga daga cikin YubiKey 5C Nano da aka sace?¶

A'a. YubiKey na gaske yana adana duk FIDO2, U2F, PIV, da OpenPGP maɓallai masu zaman kansu a cikin guntun kayan aikin sirri na sirri mai jurewa.`EAL6+` bokan). Ba shi yiwuwa a zahiri da lissafi ba za a iya kwafi, fitarwa, ko karanta maɓalli na sirri *fita* na YubiKey akan kwamfuta. Hadarin da ke tattare da YubiKey da aka sata shine wanda ya mallaki mabuɗin a zahiri zai iya toshe shi ya taɓa maɓallin zinare don *amfani da shi har sai kun shiga cikin asusunku (GitHub, Google, AWS, SSH) `authorized_keys`) kuma share wannan YubiKey ta jama'a rajista.

Shin yana da lafiya in bar kwamfutar tafi-da-gidanka akan teburin kantin kofi na tsawon daƙiƙa 60 don amfani da ɗakin bayan gida idan na kulle allo (Cmd+Ctrl+Q / Win+L) na farko?¶

A'a. Yayin kulle allonku da `Cmd + Ctrl + Q` ko `Win + L` Yana kare bayanan dijital ku a bayan FileVault ko BitLocker, ba shi da kome don hana barawo fita daga kofa tare da ku. `$2,500` kwamfutar tafi-da-gidanka ta zahiri a cikin daƙiƙa 4. Barin kwamfutar tafi-da-gidanka da aka kulle ba tare da kula da shi akan tebur ba kuma yana fallasa shi ga lalata kayan masarufi (kamar maharin da ya saka O.MG Cable, USB Rubber Ducky, ko maɓalli na hardware a cikin tashar USB-C ɗin ku yayin da kuke cikin gidan wanka). Koyaushe zame kwamfutar tafi-da-gidanka a cikin jakar baya kuma ɗauka cikin ɗakin wanka tare da ku kowane lokaci guda.

Tushen da jagorar hukuma¶

• ** Cibiyar Matsayi da Fasaha ta Kasa (NIST, Amurka):** NIST SP 800-46 Rev. 2 Jagora ga Harkokin Sadarwar Kasuwanci, Samun Nisa, da Kawo Tsaro na Na'urarku (BYOD) * da * NIST SP 800-63B Ka'idodin Shaida na Dijital (Masu Factor Hardware Authenticator Asarar da Bukatun Bukatun).
• Hukumar Tsaro ta Cyber (Cybersecurity and Infrastructure Security Agency)CISA, Amurka) & Cibiyar Tsaro ta Intanet ta BurtaniyaNCSC): Tsarin na'urori akan Motsawa (Kulle Zama na Jiki, Kulle Kusan Kusa da Bluetooth, Rage Tafiya-Surfing, da Ka'idojin Shafawa na MDM mai nisa).
• Yubico AB: Abin da yakamata kayi Idan Ka Rasa YubiKey dinka (support.yubico.com) (FIDO2 8-Ƙoƙarin Kulle PIN, Samfurin Haɗari na Biyu na U2F, Buɗe PGP 3-Ƙoƙarin Kulle PIN, da Maɓallin Maɓallin Ajiyayyen).
• Apple Inc. & Microsoft Corporation: Jagorancin Tsaro na Platform Apple (Tsarin Rubutun FileVault, T2 / Apple Silicon Secure Enclave, da icloud.com/find No-2FA Lost Mode Architecture) da Microsoft Windows 11 Kariyar DMA BitLocker & Takardun Fasaha Mai Sauƙi.
• ** Hukumar Kare Bayanan Turai (EDPB):** Sharuɗɗa 9/2022 akan Sanarwa na karya bayanan sirri a ƙarƙashin GDPR (Rarraba Satar Na'urar Kulle-A-Sauran Kulle vs. Satar Na'urar Aiki-Zama).

Jagora masu alaƙa¶

• Satar kwamfutar tafi-da-gidanka na aiki ko karye yayin tafiya: Kulle MDM da dawo da lokacin faɗuwa
• Faduwar bayanan samar da kwatsam, yoyon sirrin git, da bambance-bambancen abin da ya faru
• Tsaron aikin nesa na gaggawa da sirrin bayanai
• Yin aiki daga nesa daga otal ko sarari na ɗan lokaci
• Fashi da tsira
• Lambobin gaggawa