Ezuru Igodo Nchekwa Laptọọpụ ma ọ bụ Akụrụngwa n'ụlọ oriri na ọṅụṅụ ma ọ bụ ọdụ ụgbọ elu: igbu oge nnọkọ¶

Inwepụ laptọọpụ gị ozugbo na tebụl ụlọ ahịa kọfị, tebụl ọrụ, ma ọ bụ oche ezumike ọdụ ụgbọ elu mgbe ihuenyo ahụ dị ** teta ma kpọghee ya , ma ọ bụ chọpụta na onye ohi ji akpa laptọọpụ gị pụọ mgbe igodo nchekwa ngwaike ** FIDO2 gị (YubiKey ka etinyere n'ọdụ ụgbọ mmiri USB-C, bụ ihe mberede nchekwa anụ ahụ na-dijitalụ kacha njọ onye ọrụ ime obodo ma ọ bụ injinia ngwanrọ nwere ike iche ihu. N'adịghị ka laptọọpụ gbanyụrụ zuru ezu nke ezuru n'ọnụ ụlọ nkwari akụ (ebe izo ya ezo zuru oke dị ka FileVault ma ọ bụ BitLocker na-emechi draịva ahụ), laptọọpụ na-ekpo ọkụ adịghị emeghe ** na-enye onye ohi RAM decrypted gị, onye njikwa okwuntughe akpọchiri.1Password / Bitwarden), kuki nyocha ihe nchọgharị dị ndụ, na-arụ ọrụ AWS / GCP / Azure nzere CLI, yana ezoro ezoghị ya -/.ssh igodo nzuzo na efere ọla ọcha.

Ọ bụrụ na ịpụnara na njide ahụ metụtara mwakpo anụ ahụ, ịpụnara mmadụ, ma ọ bụ iyi egwu ngwa ọgụ, gaa na ebe nchekwa ozugbo wee kpọọ nọmba mberede mpaghara gị (911 na United States na Canada, 112 gafee European Union, 999 na United Kingdom; lee nọmba mberede) ma nyochaa anyị ohi na mgbodo ịlanarị ndu. Achụpụla onye ohi laptop ma ọ bụ na-agba ọsọ n'okporo ụzọ ma ọ bụ ụgbọ ala. Kama, wepụ ekwentị gị n'akpa gị n'ime ** nke mbụ 60 sekọnd ** wee mee usoro igbu oge na ngwa ngwa ngwa mgbe ị na-atụgharị aka. Ezuru ma ọ bụ gbajie laptọọpụ ọrụ mgbe ị na-eme njem: MDM mkpọchi na mgbake oge efu, dobe nchekwa data mmepụta ihe mberede, ntapu nzuzo git, na nhazi ihe merenụ, na Nchekwa ime ọrụ mberede na nzuzo data.

Mee nke a ugbu a¶

1. Echupula onye ohi; wepụta ekwentị gị n'ime sekọnd 15 wee kpalite mkpọchi akụrụngwa Remote (Find My / Find My Device / Corporate MDMTUPU onye ohi etinyela laptọọpụ n'ime akpa Faraday ma ọ bụ gbanyụọ Wi-Fi. Mgbe onye ohi na-anapụ laptọọpụ mepere emepe na tebụl kọfị, laptọọpụ na-anọ na Wi-Fi cafe (ma ọ bụ ebe ekwentị gị) na nke mbụ. 30 to 90 seconds ka ha na-agbaba na ngọngọ:
   • ** Macbook (iPhone Find My App):** Mepee ** Chọta My -> Ngwaọrụ -> [MacBook gị] -> Kaa dị ka Echefuru (Activate*** ma tinye PIN mkpọchi ọnụọgụ anọ ruo 6. Ozugbo iwu ahụ ruru MacBook n'elu Wi-Fi, macOS na-akwụsị oge onye ọrụ na-arụ ọrụ, na-amanye ihuenyo mkpọchi firmware/OS, ma chọọ nzere izo ya ezo FileVault ịbanye ọzọ.
   • ** Windows 11 Laptọọpụ: ** Na ihe nchọgharị ekwentị gị, mepee account.microsoft.com/devices -> họrọ laptọọpụ gị -> pịa ** Chọta ngwaọrụ m -> Mkpọchi ***.
2. ** Ọ bụrụ na ejikọrọ na laptọọpụ gị na ebe a na-ekpo ọkụ nke smartphone gị, agbanyụla hotspot gị maka sekọnd 60 mbụ ruo mgbe ị pịa "Mark as Lost / Remote Lock", wee kewaa ya ozugbo. Mark As Lost gbuo iwu na laptọọpụ mepere emepe. Chere 30 sekọnd maka mkpọchi iwu ka ibunye, wee gbanwee ** Hotspot OFF ** na ** Bluetooth Gbanyụọ ** (nke na-ebute MacOS / Windows Dynamic Lock ma ọ bụrụ na ejikọtara ya).
3. ** Kpọọ ụlọ ọrụ IT Security / SOC Hotline na ekwentị gị (0 to 3 minutes) ịgbanyụ mwepu nnọkọ IdP zuru ụwa ọnụ (Okta / Microsoft Entra ID / Google Workspace) NA ihe MDM ihichapụ anya (Jamf / Intune / Kandji.** Ọbụlagodi na onye ohi na-eme ka ihuenyo laptọọpụ mụrụ anya site n'ịgbanye trackpad wee gbanyụọ Wi-Fi, na-ewepụ ume ọhụrụ ** Single Sign-On (SSO) na ohere ịnweta ** na sava igwe ojii na-ekwe nkwa na oge onye ohi na-ejikọghachi laptọọpụ na * ọ bụla * njikọ ịntanetị iji nweta Slack, Gmail, GitHub, ụlọ ọrụ ọ bụla, ma ọ bụ ụlọ ọrụ nwụrụ anwụ.401 Unauthorized).
4. ** Ọ bụrụ na njikwa paswọọdụ gị (1Password, Bitwarden, LastPass, Dashlane, Apple Passwords) emegheghị na laptọọpụ, wepụ ngwa ngwa zuru ezu na ngwa ekwentị gị ozugbo.** Mepee 1Password ma ọ bụ Bitwarden na ekwentị mkpanaaka gị, gaa na ** Jikwaa Akaụntụ / Weebụ Vault -> Oge na-arụ ọrụ / Ngwaọrụ ikike , wee pịa ** Deauthorize / Kagbuo na laptọọpụ zuru ezu, wee gbanwee ma ọ bụrụ na edozila paswọọdụ Master gị.
5. ** Ọ bụrụ na igodo nchekwa ngwaike (YubiKey 5C Nano / Titan Key) ka etinyere n'ọdụ ụgbọ mmiri USB nke laptọọpụ (ma ọ bụ tinye ya na igodo ohi zuru ezu), banye na akaụntụ gị site na iji igodo ndabere ma ọ bụ paswọọdụ gị wee hichapụ nzere FIDO2 ahụ kpọmkwem.** Ebe igodo FIDO2 chọrọ ** FIDO2 PIN (4 to 63 characters*** maka enweghị paswọọdụ resident-key loins, mgbe ejiri ya dị ka * ihe nke abụọ * (U2F / WebAuthn non-discoverable) na laptọọpụ ebe ihe nchọgharị gị echekwala aha njirimara na paswọọdụ gị, ** onye ọ bụla metụrụ kọntaktị ọla edo aka na YubiKey gafere 2FA na-enweghị PIN ***.
6. ** Kagbuo ma tụgharịa nzere onye nrụpụta mpaghara ọ bụla echekwara na nchekwa ụlọ gị (-/.ssh/id_ed25519, -/.gnupg, -/.aws/credentials, -/.kube/config, .env faịlụ, na GitHub/GitLab Personal Access Tokens)** Ọbụlagodi na e gburu SSO igwe ojii, onye na-awakpo na-eme ka laptọọpụ emegheghị amụ nwere ohere faịlụ nke enweghị isi na igodo SSH ọ bụla na akara API igwe ojii nọ ọdụ na akụkọ njedebe gị (-/.zsh_history / -/.bash_history).

Osisi mkpebi: Laptọọpụ akpọchighị akpọchi vs. ngwaike nchekwa igodo izu ohi vs. sọfụ ubu¶

Soro eserese mgbaba ọsọ ọsọ a n'ime nkeji iri na ise mbụ ka cafe, oghere ọrụ, ma ọ bụ ihe nchekwa ọdụ ụgbọ elu gachara.

flowchart TD
    A["Nchekwa Mberede Ọhaneze (Kafe, Oghere Nrụkọ Ọrụ, Ebe ezumike ọdụ ụgbọ elu, ụgbọ oloko)"] --> B{"Gịnị mere kpọmkwem?"}
    B -->|"E jidere Laptọọpụ mgbe akpọchiri / meghere"| C["0-60s: Na ekwentị gị, kpalite Apple Chọta 'Akara m dị ka furu efu' ma ọ bụ Microsoft 'Lock Device' -> Kpọọ IT SOC maka MDM Mkpọchi/Hichapụ + Global SSO Session Kill"]
    B -->|"Ezuola Laptọọpụ ka akpọchiri / mechie / gbanyụọ"| D["FileVault / BitLocker na-echebe diski na izu ike -> Na-akpalite Chọta My / MDM Remote Wipe -> Gbanwee paswọọdụ SSO & kagbuo nnọkọ igwe ojii na-arụ ọrụ"]
    B -->|"Ezuru Igodo Nchekwa ngwaike (YubiKey) (naanị ya ma ọ bụ tinye ya na laptọọpụ)"| E["Banye na IdP (Okta/Entra/Google), GitHub, AWS na Onye njikwa okwuntughe site na ekwentị gị site na iji igodo ndabere/Passkey -> Hichapụ ndebanye aha YubiKey zuru."]
    B -->|"Ịchọgharị ubu / Onye mere ihe onyonyo gị ma ọ bụ ahụigodo gị"| F["Mkpọchi ihuenyo ozugbo (Cmd+Ctrl+Q / Win+L) -> Gaa na mpaghara nkeonwe -> Tụgharịa akara mbanye / PIN akọwapụtara + igodo API ọ bụla a na-ahụ na ihuenyo."]
    C --> G["Kwụsị ikike laptọọpụ ezuru ohi n'ime 1Password / Bitwarden Web Vault -> Kwụsị nnọkọ weebụ Google / Microsoft / Okta / Slack / GitHub niile"]
    E --> G
    G --> H{"Laptọọpụ ahụ nwere igodo nrụpụta mpaghara (ụlọ .ssh, .aws, .gnupg, Git PATs, Docker/K8s tokens)?"}
    H -->|"EE: Injinia / Admin / Laptọọpụ onye guzobere"| I["Hichapụ igodo ọha .ssh na GitHub/GitLab & sava mmepụta (`ikike_ikike`) -> Gbanyụọ igodo AWS IAM na njikwa -> kagbuo igodo GPG"]
    H -->|"Mba: Standard Business/ Onye ọrụ ihe nchọgharị"| J["Nyochaa mmekọrịta ihe nchọgharị ('Chrome/Edge/iCloud Keychain`) abanyela n'ime ime -> Faịlụ mkpesa ndị uwe ojii mpaghara & arịrịọ nchekwa CCTV Cafe"]
    I --> J

Nkebi 1: Nkeji 5 "Ggbuo Chain" maka laptọọpụ ezuchiri akpọchi (iwu-n'elu ikpo okwu)¶

Mgbe a napụrụ laptọọpụ mgbe akpọchiri ya, ** echerela ruo mgbe ị ga-ala n'ụlọ ma ọ bụ zụta kọmputa ọhụrụ ka ịmalite ịwepụ ohere **. Enwere ike igbu otu n'ime ihe ndị dị mkpa dị n'okpuru ** ozugbo site na ekwentị iPhone ma ọ bụ gam akporo gị ka ị na-eguzo n'ime ụlọ ahịa kọfị **.

Nzọụkwụ 1: Force-kpọchie sistemụ arụmọrụ remotely (0 to 60 seconds)¶

1. ** Apple MacBook (macOS):**
   • Mepee ngwa ** Chọta My ** na iPhone gị (ma ọ bụ banye na icloud.com/find na ihe nchọgharị ekwentị ọ bụla, nke na-agafe 2FA ka ị nwee ike iji ya ọbụlagodi na ezurukwa ekwentị gị).
   • Kpatụ ** Ngwaọrụ -> [MacBook gị] -> Kaa dị ka Echefuru -> Mee ọrụ**.
   • ** Gịnị ma ọ bụrụ na onye ohi gbanyụọ Wi-Fi ozugbo ma ọ bụ mechie mkpuchi?** The Mark As Lost ma ọ bụ Erase This Device iwu kwụ n'ahịrị na sava APN nke Apple wee gbaa ** nkewa-nke abụọ ** MacBook na-esote netwọ Wi-Fi ọ bụla (ma ọ bụ site na Chọta netwọkụ m). Imechi mkpuchi MacBook na-ekpochikwa ihuenyo na-akpaghị aka ma ọ bụrụ na enyere ** Chọrọ paswọọdụ ozugbo ụra ma ọ bụ ihe nchekwa ihuenyo malitere**.
2. Windows 10 / Windows 11 Laptọọpụ:
   • N'ihe nchọgharị ekwentị gị, mepee account.microsoft.com/devices, họrọ laptọọpụ gị, wee pịa ** Chọta ngwaọrụ m -> Mkpọchi ***.
   • Ọ bụrụ na ọ bụ kọmpụta Windows ụlọ ọrụ Microsoft Intune na-achịkwa, banye na Intune Company Portal (portal.manage.microsoft.com* na ekwentị gị -> họrọ laptọọpụ gị -> kpatụ ** Omume -> Mkpọchi dịpụrụ adịpụ ** ma ọ bụ ** Tọgharia koodu mbanye / hichapụ ***.

Kwụpụ 2: Gbuo otu nbanye igwe ojii niile (SSO) na oge ihe nchọgharị (1 to 3 minutes)¶

Ọbụlagodi na onye ohi ahụ kwụsịrị Wi-Fi na laptọọpụ iji chọgharịa draịvụ ike mpaghara gị na-anọghị n'ịntanetị, ha ga-emecha jikọọ laptọọpụ na ebe nchekwa ekwentị ma ọ bụ detuo ihe nchọgharị gị. Cookies na Local Storage Faịlụ SQLite n'igwe ọzọ iji dọpụ oge webụ abanyela gị. ** Wepụ akara ngosi nnọkọ ndị ahụ n'akụkụ ihe nkesa ugbu a site na ekwentị gị: ***

Part 2: Gịnị ma ọ bụrụ na gị YubiKey ma ọ bụ Hardware Nche Key e zuru?¶

Ọtụtụ ndị ọrụ dịpụrụ adịpụ na-ahapụ profaịlụ dị ala YubiKey 5C Nano na-agbanye n'akụkụ USB-C nke laptọọpụ ha, ma ọ bụ buru YubiKey 5 NFC n'ọdụ ụgbọ mmiri nke a na-apụnara ya na akpa laptọọpụ ha. Ụjọ na-ebutekarị: "Onye ohi nwere ike iji YubiKey m banye na akaụntụ m niile? Kedu ka m ga-esi banye na akaụntụ m na-enweghị YubiKey m?"

1. Ịghọta ihe onye ohi nwere ike na-apụghị ime na gị zuru YubiKey¶

Igodo nchekwa ngwaike ọgbara ọhụrụ (YubiKey 5 Series, Google Titan, Token2, Nitrokey) na-akwado ** usoro nyocha anọ dị iche iche **, nke ọ bụla nwere profaịlụ ihe egwu dị iche mgbe ezuru ohi:

1. ** FIDO2 achọpụtara nzere (Passkeys / Nbanye na-enweghị paswọọdụ):**
   • ** Eji FIDO2 PIN gị chebe (4 to 63 alphanumeric characters)** Ọ bụrụ na onye ohi plọg gị ezuru YubiKey n'ime ha onwe ha na kọmputa na-agbalị iji a paswọọdụ FIDO2 Passkey, na YubiKey ngwaike mgbawa na-achọ gị FIDO2 PIN. Mgbe ** 8 chepụtara PIN na-ezighi ezi na-ezighi ezi , FIDO2 applet na YubiKey ** na-ekpochi na brik onwe ya na-adịgide adịgide (Factory Reset Required, na-ehichapụ nzere niile.
2. ** FIDO U2F / WebAuthn Ihe nke AbụọUsername + Password + Touch YubiKey):**
   • ** Ọ dịghị PIN achọrọ site na ndabara na ọtụtụ weebụsaịtị.** Ọ bụrụ na onye ohi ** naanị ** zuru YubiKey gị n'akpa uwe gị (na * enweghị * nwere laptọọpụ gị ma ọ bụ okwuntughe gị), YubiKey abaghị uru maka ha n'ihi igodo U2F anaghị ekpughe weebụsaịtị nke edebanye aha ya.
   • ** Ihe egwu dị oke egwu ma ọ bụrụ na ezuru ohi etinyere na laptọọpụ gị akpọchiri akpọchi: ** Ọ bụrụ na onye ohi zuru laptop gị ** emegheghị ya na YubiKey etinyere n'akụkụ **, ihe njikwa ihe nchọgharị gị ma ọ bụ njikwa okwuntughe enyelarị aha njirimara na paswọọdụ, naanị onye ohi ga- ** metụ bọtịnụ aka na YubiKey gị n'ime ọla edo 2. AWS mgbọrọgwụ akaụntụ, ma ọ bụ mgbanwe crypto.
3. ** YubiKey OpenPGP (gpg Kaadị Smart) & PIV (X.509 Asambodo) apụl:**
   • Ngwaike echekwara ** PIN onye ọrụ (nke ndabara 123456 ma ọ bụrụ na igbanwebeghị ya)** na ** Admin PIN (ndabara 12345678*** mkpọchi ahụ ka emechara ** 3 na-ezighi ezi mbọ. * (Ọ bụrụ na ịhapụ PIN OpenPGP na ndabara ụlọ ọrụ 123456, were igodo PGP na YubiKey mebiri ma kagbuo ya ozugbo.)*
4. ** YubiKey Static Paswọdu / Yubico OTP (Akara 44 ogologo ccccc... eriri na-apụta ma e metụrụ ya aka):**
   • Ọ bụrụ na ị haziri ** oghere 1 ma ọ bụ oghere 2 ** nke YubiKey gị ka ị pịnye paswọọdụ static ma ọ bụ Yubico OTP mgbe ọ bụla emetụ ọla edo ahụ aka maka 1 ruo 3 sekọnd, onye ọ bụla na-ejide igodo nwere ike mepee Notepad, metụ igodo ahụ, wee gụọ eriri static ahụ.

2. Usoro nzọụkwụ iji debanye aha YubiKey zuru ohi na nkeji 5.¶

1. ** Jidere igodo nchekwa nchekwa akụrụngwa gị (ma ọ bụ jiri iPhone / Android Passkey / ngwa nyocha / koodu ndabere):**
   • Omume kachasị mma (nke NIST SP 800-63B nyere iwu) bụ ịdebanye aha mgbe niile ** opekata mpe igodo nchekwa anụ ahụ abụọ ** (otu na igodo igodo gị/laptọọpụ gị, nke akpọchiri na akpa nchekwa ma ọ bụ njem) gbakwunyere Passkey ngwaọrụ na ama gị.
2. ** Banye na akaụntụ gị dị oke mkpa wee hichapụ naanị YubiKey zuru ohi site na aha njirimara ya:**
   • Google / Gmail (myaccount.google.com/signinoptions/two-step-verification):** Kpatụ Passkey na igodo nchekwa -> chọta igodo ezuru ohi -> pịa akara ngosi ** ahịhịa ahịhịa *** ka iwepu ya.
   • ** Microsoft / Ntinye ID (mysignins.microsoft.com/security-info):** Chọta ** igodo nchekwa** -> kpatụ Hichapụ.
   • ** Apple ID (Settings -> [Your Name] -> Sign-In & Security -> Two-Factor Authentication -> Security Keys):** Kpatụ igodo zuru ezu -> Wepụ igodo.
   • ** GitHub (github.com/settings/security):** N'okpuru **Passkey *** na ** Ụzọ ihe abụọ -> igodo nchekwa ***, pịa ** Hichapụ *** n'akụkụ igodo zuru ezu.
   • ** AWS mgbọrọgwụ / IAM (IAM Console -> Users -> Security credentials -> Multi-factor authentication):** Họrọ igodo nchekwa FIDO ezuru wee pịa ** Wepụ ***.
   • ** 1Password / Bitwarden / Cloudflare / Coinbase / Kraken:** Mepee ntọala 2FA nke ọrụ ọ bụla wee hichapụ ndebanye aha token ngwaike ezuru.

Nkebi 3: Onye nrụpụta, DevOps na ntụgharị igodo SSH/GPG (The -/.ssh na -/.aws ihe mberede)¶

Ọ bụrụ na ị bụ onye injinia sọftụwia, onye nchịkwa DevOps/SRE, ọkà mmụta sayensị data, ma ọ bụ onye nchoputa mmalite nke ezuru laptọọpụ emechiri emechi, ** iwepu kuki nchọgharị bụ naanị ọkara agha ahụ. Onye ohi na-atụfu akwụkwọ ndekọ aha ụlọ gị nwere ohere ịnweta igodo cryptographic ogologo ndụ yana akara CLI echekwara dị ka ederede doro anya na SSD gị.

Mezue nke a ** 5-nzọụkwụ Onye Mmepụta nzere nchapụta ** site na ekwentị ndabere ma ọ bụ laptọọpụ onye otu ya n'ime nkeji 15 mbụ ***:

1. ** Igodo SSH (-/.ssh/id_ed25519 / -/.ssh/id_rsa):** Ọbụlagodi echekwabara nkebi ahịrịokwu, were igodo SSH ọ bụla etinyere na ya ssh-agent na RAM na laptọọpụ emechiri emechi na-emebi. Gaa na github.com/settings/keys na gitlab.com/-/user_settings/ssh_keys ma hichapụ igodo ọha SSH nke laptọọpụ ozugbo, ma mee ka onye otu gị wepụ igodo ọha gị na ya -/.ssh/authorized_keys na mmepụta Linux sava na ndị ọbịa bastion.
2. ** Asambodo CLI igwe ojii (-/.aws/credentials, -/.config/gcloud, -/.azure):** Mepee ** AWS IAM Console -> Ndị ọrụ -> [Ị] -> nzere nchekwa** wee pịa ** gbanyụọ / Hichapụ ** na igodo nnweta niile (AKIA...). Kagbuo igwe ojii Google gcloud auth OAuth nweta ume ọhụrụ site na ibe Njikọ Akaụntụ Google gị nke atọ (Google Cloud SDK).
3. ** GitHub, GitLab, npm, PyPI, na Docker Access Token:** Gaa na github.com/settings/tokens wee pịa ** kagbuo ihe niile ** na ma PAT dị mma yana Classic ghp_... akara. Kagbuo -/.npmrc akara (npmjs.com) na -/.pypirc akara.
4. ** Kubernetes (-/.kube/config) & Terraform (-/.terraform.d):** Tụgharịa asambodo ndị ahịa Kubeconfig static ma ọ bụ akara OIDC wee kagbuo akara Terraform Cloud API (app.terraform.io).
5. ** GPG/PGP Igodo mbinye aka (-/.gnupg):** Bipụta Asambodo Mwepụ GPG nke emepụtara tupu emebe (gpg --import revoke.asc na gpg --keyserver keys.openpgp.org --send-keys [KeyID]) ma hichapụ igodo GPG na GitHub.

Nkebi nke 4: Ịzaghachi na "Shọọlụ n'ubu" (onye mere ihe onyonyo ma ọ bụ lelee ihuenyo gị n'otu cafe / ụgbọ elu)¶

Kedu ihe ma ọ bụrụ na ọ nweghị onye zuru laptọọpụ anụ ahụ gị, mana mgbe ị na-arụ ọrụ n'ọnụ ụzọ ọdụ ụgbọ elu, n'ụgbọelu, ma ọ bụ na cafe, ị ga-ejide onye ahụ nọ ọdụ n'azụ gị ma ọ bụ n'oche dị n'akụkụ ** na-eji igwefoto ama ama ha na-ese ihe onyonyo ma ọ bụ keyboard gị ** (ma ọ bụ na-ele anya na oghere mepere emepe). .env faịlụ, okwuntughe ozugbo, ma ọ bụ oche slide nzuzo)?

1. ** Jiri otu igodo reflex kpochie ihuenyo gị ozugbo:**
   • ** macOS: *** Pịa Cmd + Ctrl + Q (mkpuchi mkpuchi ozugbo na-emechighị ngwa).
   • ** Windows: *** Pịa Win + L .
   • Linux: Pịa Super + L ma ọ bụ Ctrl + Alt + L .
2. Ebido esemokwu anụ ahụ: Jiri nwayọ kwakọba laptọọpụ gị, gaa n'oche nzuzo na azụ gị na mgbidi siri ike, ma nyochaa ihe ahụ anya na ihuenyo gị ma ọ bụ pịnye na kiiboodu n'ime nkeji iri gara aga.
3. Tụgharịa ihe nzuzo ọ bụla na-enwu na ihuenyo:
   • Ọ bụrụ na ị pịnyere okwuntughe nbanye * laptọọpụ gị ma ọ bụ njikwa paswọọdụ Master Paswọdu ** mgbe mmadụ nwere ike ịhụ mkpịsị aka gị, gbanwee paswọọdụ ozugbo site na ebe nzuzo.
   • Ọ bụrụ na windo ọnụ, .env faịlụ, onye akwụkwọ ozi nkụnye eji isi mee, ma ọ bụ igwe njikwa igwe ka a na-ahụ na ihuenyo, chee na mkpebi ọ bụla dị elu 4K Igwefoto ama n'ime ** 3 mita (ụkwụ 10)** weghaara foto nke igodo API gị kpụ ọkụ n'ọnụ, wee tụgharịa igodo ndị ahụ ozugbo (lee. Mbugharị na mberede ma ọ bụ otu ihie-ekesa ihuenyo).

Ihe ngosi 6-Point "Cafe & Airport Proof" Laptọọpụ Nlele Nlele Nlebaanya (Tọlitere Taa)¶

Hazie ngwaike isii ndị a na ntọala OS ugbu a ka ọ bụrụgodi na onye ohi napụrụ laptọọpụ gị mepere emepe na tebụl echi, ** Laptọọpụ na-akpọchi onwe ya tupu onye ohi erute n'ọnụ ụzọ ụlọ ahịa kọfị ***:

• 1. Kwado Mkpọchi akpaaka nso nso Bluetooth (Dynamic Lock na Windows / Near Lock ma ọ bụ Apple Watch Auto-Lock na Mac):
  • Windows 11: Jikọọ iPhone ma ọ bụ gam akporo ekwentị gị na laptọọpụ site na Bluetooth, wee gaa na ** Ntọala -> Akaụntụ -> Nhọrọ nbanye -> Mkpọchi dị ike ** wee lelee "Kwe ka Windows kpochie ngwaọrụ gị ozugbo mgbe ị na-apụ". Ozugbo onye ohi jiri laptọọpụ gị gbapụrụ mita 10 (ụkwụ 33) site na tebụl (ma ọ bụ gbanyụọ Bluetooth na ekwentị gị n'akpa gị), Windows na-emechi ihuenyo na-akpaghị aka.
• 2. Tọọ “Nkuku dị ọkụ” yana ngụ oge mkpọchi ihuenyo na-adịghị arụ ọrụ nke 60 nke abụọ:
  • Na MacOS (** Ntọala sistemụ -> Ihuenyo mkpọchi ) na Windows ( Ntọala -> Sistemu -> Ike & batrị -> Ihuenyo na ụra **), tọọ ** Gbanyụọ ngosi / Chọrọ paswọọdụ na batrị ** ruo ** 1 ma ọ bụ nkeji 2 ** mgbe ị na-arụ ọrụ n'ihu ọha.
• 3. Hazie 1Password / Bitwarden ka ọ kpọchie ngwa ngwa mgbe sistemụ kpochiri ma ọ bụ mgbe nkeji 1 gachara:
  • Na ** 1Password -> Ntọala -> Nchekwa , tọọ ** Mkpọchi mgbe kọmputa anaghị arụ ọrụ 1 minute, lelee ** Mkpọchi ụra ***, wee mee ka ** Touch ID / Windows Hello ** ka ị ghara iji mkpịsị ugodi a na-ahụ anya pịnye paswọọdụ nna ukwu gị n'ihu ọha.
• 4. Chọrọ aka ngwaike na okwuntughe maka onye ọ bụla ssh na git Ọrụ (1Password SSH Agent ma ọ bụ FIDO2 ed25519-sk Igodo):
  • Kama ịhapụ ezoro ezo -/.ssh/id_ed25519 faịlụ na draịvụ ike gị, chekwaa igodo SSH gị n'ime ** 1Password SSH Agent ** (nke chọrọ nnabata biometric Touch ID na otu ọ bụla. git push ma ọ bụ ssh njikọ) ma ọ bụ mepụta ngwaike jikọtara ssh-keygen -t ed25519-sk -O verify-required igodo na-enweghị ike iṅomi na YubiKey gị ma chọọ FIDO2 PIN gị na ojiji ọ bụla.
• 5. Na-etinye ihe ndọta mgbe niile 60-Degree Ihe nzacha ihuenyo Micro-Louver (3M / Kensington) n'ọha:
  • Ihuenyo nzuzo magnetik na-eme ka ngosi gị gbaa ọchịchịrị ka ọ bụrụ oji siri ike maka onye ọ bụla na-ekiri n'akụkụ akụkụ ka elu ** 30 degrees n'etiti **, na-ekpuchi ubu n'ụgbọ elu ma ọ bụ oche cafe na-esote.
• 6. Hapụla Laptọọpụ n'echeghị ya maka "Naanị Sekọnd 30" iji jide kọfị ma ọ bụ jiri ụlọ mposi:
  • gafere 70 percent Ihe na-ezu ohi cafe na ọdụ ụgbọ elu na-eme mgbe onye ọrụ hapụrụ laptọọpụ ha na tebụl maka sekọnd 45 iji bulie latte na counter ma ọ bụ jụọ onye ọbịbịa "Ị nwere ike ile ihe m anya?" Na-ebunye laptọọpụ mgbe niile n'ime akpa gị ma buru ya, ma ọ bụ mechie ** Kensington NanoSaver Steel Cable Lock ** gburugburu okpokoro okpokoro gbachiri emechi.

Nọmba mberede mpaghara na ụkpụrụ ụlọ ọrụ¶

Mgbe ị kpọchiri laptọọpụ zuru ezu ma kagbuo nnọkọ igwe ojii na-arụ ọrụ (nkeji 5 mbụ), kọọrọ ndị ọchịchị obodo ihe ohi anụ ahụ ma chekwaa ihe nkiri CCTV cafe/ọdụ ụgbọ elu tupu edegharịa ya (ọtụtụ cafes na-edegharị CCTV kwa awa 24 ruo 72):

United States na Canada¶

• ** Mkpọpụ ndị uwe ojii mberede (Ndị na-apụnara mmadụ ihe / onye a na-enyo enyo na-ahụ anya):** Kpọọ 911. (Ọ bụrụ n'ime ọdụ ụgbọ elu, kpọtụrụ **Ndị uwe ojii ọdụ ụgbọ elu / ndị uwe ojii ọdụ ụgbọ mmiri ** ozugbo n'ọnụ ụzọ ọnụ ụzọ kacha nso ka ndị ọrụ nwee ike igbochi onye ohi tupu ha apụọ nchekwa ma ọ bụ banye ụgbọ oloko).
• ** Akụkọ ndị uwe ojii na-abụghị ihe mberede (Achọrọ maka mkpuchi ụlọ ọrụ na mkpuchi kaadị kredit):** Kpọọ 311 ma ọ bụ ahịrị ndị uwe ojii obodo na-abụghị ihe mberede iji nweta ** Nọmba mkpesa ihe mberede ndị uwe ojii**.
• Nkọkọsa izu ohi nke gọọmentị etiti: Ọ bụrụ na ngwaọrụ ụlọọrụ akpọchiri akpọchi butere mbanye ma ọ bụ ịpụnara ihe netwọk na-akwadoghị, gaa na FBI Internet Mpụ Mkpesa Mpụ (FBI)ic3.gov* na ** CISA (cisa.gov/report*** na US, ma ọ bụ ** Canada Center for Cyber Security (cyber.gc.ca*** na Canada.

United Kingdom¶

• ** Ndị uwe ojii na-ezipụ ihe mberede (ohi / ohi ka dị ugbu a):** Kpọọ 999.
• ** Akụkọ ndị uwe ojii na-abụghị ihe mberede & ikike ụgbọ okporo ígwè / ọdụ ụgbọ elu:**
  • N'ụlọ oriri na ọṅụṅụ ma ọ bụ n'okporo ámá: Kpọọ 101 (ma ọ bụ tinye akwụkwọ n'ịntanetị na ndị uwe ojii mpaghara) iji nweta nọmba ntụaka mpụ ()CRN)* ozugbo.
  • Na ụgbọ oloko ma ọ bụ n'ime ọdụ ụgbọ oloko / Tube: Ederede ** Ndị uwe ojii na-ebugharị Britain (BTP*** na 61016 ma ọ bụ kpọọ 0800 40 50 40.
• ** Ntụle mmebi data (UK GDPR):** Ọ bụrụ na e jidere kọmpụta ahụ mgbe ** akpọchiri ya ** ma nwee data nkeonwe nke ndị ahịa ma ọ bụ ndị ọrụ ezoro ezo, gwa onye ọrụ nchekwa data gị (DPO) ozugbo iji chọpụta ma akụkọ mmebi iwu ** 72-hour UK ICO (ico.org.uk*** a chọrọ.

European Union¶

• ** Nọmba Mberede Pan-Europe:** Kpọọ 112 maka enyemaka ndị uwe ojii ozugbo gafee mba ndị otu EU niile.
• ** Akụkọ ndị uwe ojii (Procès-Verbal / Strafanzeige / Denuncia):** Gaa na ọdụ ndị uwe ojii mpaghara kacha nso (Commissariat de Police, Polizeiwache, Comisaría de Policía, Questura) iji nweta akwụkwọ akụkọ ohi edere ede stampụ, ma gwa DPO ụlọ ọrụ gị ozugbo n'okpuru GDPR Nkeji edemede 33 ma ọ bụrụ na akpọchiri ngwaọrụ n'oge izu ohi.

Australia na New Zealand¶

• ** Mbupu ihe mberede: *** Kpọọ ** 000 *** na Australia ma ọ bụ ** 111 ** na New Zealand.
• ** Akụkọ ndị uwe ojii na-abụghị ihe mberede:** Kpọọ 131 444 (Police Assistance Line in Australia) ma ọ bụ 105 (ndị uwe ojii New Zealand na-abụghị ihe mberede) iji nweta nọmba mmemme ndị uwe ojii, wee kọọ mkpesa nkwenye ụlọ ọrụ site na cyber.gov.au (ACSC) ma ọ bụ ** CERT NZ (cert.govt.nz)**.

India na Asia-Pacific¶

• India: Kpọọ 112 (Mpaghara) ma ọ bụ 100 (Ndị uwe ojii), wee denye akwụkwọ akụkọ e-FIR / Echefuola ozugbo ** site na ọnụ ụzọ ndị uwe ojii steeti ka ị nweta akwụkwọ gọọmentị maka idebe ihe onwunwe MDM ụlọ ọrụ yana nnabata ** CERT-In.
• Singapore & Japan: Na Singapore, kpọọ 999 (Mpaghara Mberede) ma ọ bụ tinye akwụkwọ akụkọ ịntanetị na Singapore Police Force e-Services Portal.police.gov.sg). Na Japan, kọọrọ ya ozugbo na Koban (igbe uwe ojii) ma ọ bụ post ndị uwe ojii ọdụ ụgbọ elu ka ị nweta Tounan-Todoke (nọmba akụkọ izu ohi).

Ajụjụ a na-ajụkarị¶

M ga-ebu ụzọ pịa "Ihichapụ ngwaọrụ a" (Remote Wipe) ma ọ bụ "Mark as Lost" (Mkpọchi Ime Ime) na mbụ mgbe emeghere MacBook ma ọ bụ laptọọpụ Windows m?¶

Na-akpalite mgbe ọ bụla ** Kaa dị ka mkpọchi / mkpọchi nke mbụ **, wee chere ruo mgbe akwadoro mkpọchi (ma ọ bụ soro ndị otu IT gị na-ahazi) tupu ịmalite ikpochapụ / hichapụ, maka ebumnuche abụọ dị mkpa. Nke mbụ, a `Remote Lock` ngwugwu dị ntakịrị ma na-eme ngwa ngwa microscond ọ rutere na laptọọpụ n'elu Wi-Fi, na-akwụsị nnọkọ desktọpụ na-arụ ọrụ na igbachi ihuenyo n'azụ FileVault ma ọ bụ BitLocker izo ya ezo ka ị na-echekwa ikike nke laptọọpụ iji gosi ọnọdụ GPS/Wi-Fi ya laghachi Chọta My. Nke abụọ, ọ bụrụ na ị pịa "Wepụ na Akaụntụ" (nke dị iche na Nhichapụ), ị na-agbanyụ ọkụ activation na mberede, na-ekwe ka onye ohi ihichapụ ma resị MacBook ahụ nke ọma. Ọ dịghị mgbe ị pịa "Wepụ Ngwaọrụ a" na Chọta nke m.

Ọ bụrụ na laptọọpụ m nwere FileVault (Mac) ma ọ bụ BitLocker (Windows) agbanwuru, nke ahụ anaghị echebe faịlụ m ọbụlagodi na ezuru ya mgbe ihuenyo mepere emepe?¶

Izo ya ezo diski zuru oke (FileVault 2 na BitLocker) na-echebe data ** na izu ike ** (mgbe agbanyụrụ laptọọpụ, hibernating, ma ọ bụ kpọchie ya na ihuenyo tupu buut/nbanye). Agbanyeghị, ka ị na-abanye na desktọpụ gị ka emechiri ihuenyo, igodo nzuzo na-anọdụ na sistemụ RAM na-agbanwe agbanwe ka sistemụ arụmọrụ na ngwa gị nwee ike ịgụ na dee faịlụ. Ọ bụrụ na onye ohi na-apụnara laptọọpụ gị mgbe ihuenyo na-amụ anya ma na-aga n'ihu na-akụ trackpad ka ihuenyo ahụ ghara igbachi, FileVault na BitLocker anaghị egbochi ha iṅomi faịlụ gị, nke mere na izipu iwu mkpọchi ime ime ozugbo na ekwentị gị na ịkagbu oge igwe ojii na 60 sekọnd mbụ dị oke egwu.

Kedu ihe ma ọ bụrụ na a napụrụ iPhone m na MacBook m emegheghị ọnụ n'otu tebụl: kedu ka m ga-esi kpọchie ha na-enweghị ekwentị m maka 2FA?¶

Apple wuru ụzọ mgbapụ ihe mberede maka ọnọdụ a kpọmkwem: gbaziri ekwentị onye ọrụ cafe, ekwentị onye ọbịbịa, ma ọ bụ laptọọpụ onye ọrụ ibe wee mepee **`icloud.com/find`** ozugbo (rịba ama `/find` na njedebe nke URL). N'adịghị ka isi `icloud.com` Portal, **`icloud.com/find` na-enye gị ohere iji naanị email ID Apple gị na paswọọdụ wee banye na-achọghị koodu nyocha ọnụọgụ abụọ nke ọnụọgụ isii **. Ozugbo n'ime `icloud.com/find`, ị nwere ike ozugbo tinye ma gị iPhone na gị MacBook n'ime ** Lost Mode **, kpochidoro ma ihuenyo na gbanyụọ Apple Pay n'okpuru 30 sekọnd.

Onye ohi nwere ike wepụ igodo nzuzo SSH m ma ọ bụ okwuntughe site na YubiKey 5C Nano ezuru?¶

Mba. Ezigbo YubiKey na-echekwa FIDO2, U2F, PIV, na OpenPGP igodo nzuzo n'ime mgbawa ngwaike nzuzo nke na-eguzogide ọgwụ (cryptographic Secure element).`EAL6+` kwadoro). Ọ bụ anụ ahụ na mgbakọ na mwepụ agaghị ekwe omume idetu, mbupụ, ma ọ bụ gụọ igodo nzuzo * pụọ * nke YubiKey na kọmputa. Naanị ihe ize ndụ dị na YubiKey zuru ezu bụ na onye nwere igodo anụ ahụ nwere ike itinye ya wee metụ bọtịnụ ọla edo iji *jiri* ya ruo mgbe ịbanye na akaụntụ gị (GitHub, Google, AWS, SSH) `authorized_keys`) ma hichapụ ndebanye aha ọha na eze YubiKey.

Ọ dị mma ịhapụ laptọọpụ m na tebụl ụlọ ahịa kọfị maka 60 sekọnd iji jiri ụlọ mposi ma ọ bụrụ na m kpọchie ihuenyo (Cmd+Ctrl+Q / Win+L) mbụ?¶

Mba. Mgbe ị na-ejiri agbachi ihuenyo gị `Cmd + Ctrl + Q` ma ọ bụ `Win + L` na-echebe data dijitalụ gị n'azụ FileVault ma ọ bụ BitLocker, ọ nweghị ihe ọ bụla iji gbochie onye ohi ka ya na gị pụta n'ọnụ ụzọ. `$2,500` laptọọpụ anụ ahụ na 4 sekọnd. Ịhapụ laptọọpụ akpọchiri n'echeghị ya na tebụl na-ekpughekwa ya na mmejọ ngwaike anụ ahụ (dị ka onye na-awakpo obi ọjọọ na-etinye O.MG Cable, USB Rubber Ducky, ma ọ bụ keylogger ngwaike n'ọdụ ụgbọ mmiri USB-C gị mgbe ị nọ na ụlọ mposi). Tinye laptọọpụ gị mgbe niile n'ime akpa azụ gị wee buru ya banye n'ime ụlọ mposi oge ọ bụla.

Isi mmalite na nduzi ọchịchị¶

• ** National Institute of Standards and Technology (National Institute of Standards and Technology)NIST, United States): ** * NIST SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Weta Your Own Device (BYOD) Security* and NIST SP 800-63B Digital Identity Guidelines (Multi Factor Hardware Authenticator Loss and Revocation Requirements).
• ** Ụlọ ọrụ nchekwa cybersecurity na akụrụngwa (CISA, United States) & UK National Cyber ​​Security Center (NCSC):** * Ngwa nchekwa na-aga (Mkpọchi nnọkọ anụ ahụ, Mkpọchi idi nso Bluetooth, mbelata ubu-ịsọ mmiri, na usoro nhichapụ MDM dịpụrụ adịpụ)*.
• ** Yubico AB: *** Ihe ị ga-eme ma ọ bụrụ na YubiKey efunahụ gị (support.yubico.com)* (FIDO2 8-Mgbalị PIN Mkpọchi, Ihe Nlereanya Ihe Egwu U2F nke Abụọ, Mkpọchi PIN 3-mgbalị megherePGP, yana Nhazi igodo ndabere).
• Apple Inc. & Microsoft Corporation: Nduzi nchekwa nchekwa nke Apple Platform (Enyocha olu nke FileVault, T2 / Apple Silicon Secure Enclave, na icloud.com/find Ọ dịghị-2FA furu efu Mode Architecture) na *Microsoft Windows 11 BitLocker DMA Documentation Nka na-adịghị agbanwe agbanwe.
• ** Kọmiti nchekwa data nke Europe (EDPB):** * Ntuziaka 9/2022 na ọkwa nbibi data nkeonwe n'okpuru GDPR (Ịmata ihe izu ohi ngwaọrụ ezoro ezo-na-ezumike vs. Ohi ngwaọrụ anaghị arụ ọrụ-Session)*.

Ntuziaka emetụtara¶

• Ezuru ma ọ bụ gbajiri laptọọpụ ọrụ mgbe ị na-eme njem: MDM mkpọchi na mgbake oge efu
• Mbelata nchekwa data mmepụta ihe mberede, ntapu nzuzo git, na nhazi ihe merenụ
• Nchekwa ime ime ọrụ mberede yana nzuzo data
• Na-arụ ọrụ site na ụlọ oriri na ọṅụṅụ ma ọ bụ ohere nwa oge
• Ịlanarị ihe na ịkwa iko
• Nọmba mberede