Clé ya sécurité ya ordinateur portable to ya matériel Bayibi na Café to na salon ya aéroport: Bobomi ya mbala moko¶

Kozala na ordinateur portable na yo ebɔtɔla mbala moko na mesa ya café, bureau ya coworking, to kiti ya salon ya aéroport ntango écran ezali kolamuka mpe efungolami, to kososola moyibi atambolaki na saki na yo ya ordinateur portable ntango clé ya sécurité matériel na yo FIDO2 (YubiKey) ezalaki kaka kokangama na port USB-C, ezali likambo ya mabe koleka ya bokengi ya nzoto na nimero oyo mosali ya mosika to ingénieur logiciel akoki kokutana na yango. Na bokeseni na ordinateur portable oyo ekangami na nguya oyo bayibi na chambre ya hôtel (esika encryption ya disque mobimba lokola FileVault to BitLocker ebatelaka disque bloqué), ordinateur portable ya molunge oyo ekangami te epesaka moyibi RAM na yo déchiffrée, gestionnaire ya mot de passe oyo efungolami (1Password / Bitwarden), ba cookies ya bondimi ya navigateur en direct, oyo ezali kosala AWS / GCP / Azure Ba credentiels ya CLI, mpe oyo ezali na chiffrement te -/.ssh bafungola ya moto ye moko na saani ya palata.

Soki kobɔtɔla mpe kokanga yango esɛngaki kobɛta yo na nzoto, koyiba, to kobangisa yo na bibundeli, kende mbala moko na esika oyo ezali na likama te mpe benga nimero ya mbalakaka ya esika ofandi (911 na États-Unis mpe Canada, 112 na Union européenne mobimba, 999 na Royaume-Uni; tala banimero ya mbalakaka) mpe kotalela lisusu ya biso kobika na moyibi mpe koyiba motambwisi. Kobengana ata moke te moyibi ya ordinatɛrɛ ya moke oyo azali na bibundeli to oyo azali kokima na balabala to na motuka. Na esika na yango, benda smartphone na yo na poche na yo na kati ya segɔnde 60 ya liboso mpe salá molɔngɔ oyo ya sikisiki ya koboma session mpe ya kokanga matériel ntango ozali kosala référence croisée ordinateur portable ya mosala bayibi to ebukani tango ozali kosala mobembo: lock ya MDM mpe récupération ya temps d'arrêt zéro, . chute ya base de données ya production accidentelle, fuite secret ya git, na triage ya incident, mpe bokengi ya mosala ya mosika na mbalakaka mpe bomoto ya ba données.

Sala boye sikoyo¶

1. KO BENGA MOYIBI TE; benda smartphone na yo na kati ya 15 secondes mpe déclenché Blocage matériel à distance (Find My / . Find My Device / . Corporate MDM) YAMBI moyibi atia ordinateur portable na sac ya Faraday to a boma Wi-Fi. Tango moyibi azui ordinateur portable oyo efungwami na mesa ya café, ordinateur portable etikalaka connecté na Wi-Fi ya café (to hotspot ya téléphone na yo) pona mbala ya liboso 30 to 90 seconds ntango bazali kokima mbangu na nse ya bloc:
   • MacBook (iPhone Find My App): Fungola Luka Ba appareils na ngai -> -> [MacBook na yo] -> Tyá elembo lokola ebungaki (Activate) mpe kotia PIN ya blocage ya 4 à 6 chiffres. Instant oyo commande wana ebeti MacBook na Wi-Fi, macOS esilisaka session ya usager active, e forcer écran ya blocage ya firmware/OS, mpe esengaka ba credentiels ya chiffrement ya FileVault mpo na kokota lisusu.
   • Windows 11 Laptop: Na navigateur ya téléphone na yo, fungola account.microsoft.com/devices -> pona ordinateur portable na yo -> finá Luka appareil na ngai -> Block.
2. Soki ordinateur portable na yo ezalaki connecté na Personal Hotspot ya smartphone na yo, KOBOMA hotspot na yo TE na ba secondes 60 ya liboso TII oko cliquer "Mark As Lost / Remote Lock", sima kata yango mbala moko sima. Soki moyibi azali kaka na 15 mètres (50 pieds) na yo libanda ya café, hotspot ya Wi-Fi active ya téléphone na yo ekoki kozala connexion internet seul oyo ezali kopesa ya yo Mark As Lost koboma commande na ordinateur portable oyo efungwami. Zela 30 secondes po commande ya blocage e transmettre, sima toggle Personal Hotspot OFF na Bluetooth OFF (oyo pe e déclenchaka macOS/Windows Dynamic Lock soki e couplé).
3. Benga na téléphone na yo ya IT Security / SOC ya entreprise na yo (0 to 3 minutes) mpo na kobengana Revocation ya Session ya IdP Mondiale (Okta / Microsoft Entra ID / Google Workspace) NA Effacement à distance ya MDM (Jamf / Intune / Kandji). Ata soki moyibi azali kobatela écran ya ordinateur portable elamu na ko jiggling trackpad mpe kokanga Wi-Fi, ko révoquer ba Single Sign-On (SSO) refresh mpe accès jetons na yo na serveur ya cloud e garantir que moment oyo moyibi a reconnecter ordinateur portable na n’importe quel connexion internet mpo na ko accéder na Slack, Gmail, GitHub, to AWS, session web nionso ya entreprise ekufi (401 Unauthorized).
4. **Soki Mokambi ya Mot de passe na yo (1Password, . Bitwarden, . LastPass, . Dashlane, . Apple Passwords).
5. Soki Fungola ya Bobateli ya Matériel (YubiKey 5C Nano / . Titan Key) etikalaki ekangami na porte USB ya ordinateur portable (to ekangami na clé oyo bayibi), kota na ba comptes na yo depuis téléphone na yo na nzela ya Clé de Sauvegarde to Passkey na yo mpe BOMA credentiel wana ya FIDO2 spécifique. Alors que clé matériel FIDO2 esengaka FIDO2 PIN (4 to 63 characters) mpo na kozanga mot de passe resident-key ba logins, tango esalelami lokola facteur ya mibale (U2F / WebAuthn non-discoverable) na ordinateur portable esika navigateur na yo esi ebombaki kombo ya mosaleli mpe mot de passe na yo, moto nyonso oyo asimbaki contact capacitif ya wolo na YubiKey alekisaka 2FA kozanga PIN.
6. Bolongola mpe bobalusa ba credentiels nionso ya développeur local oyo ebombami na dossier ya ndako na yo (-/.ssh/id_ed25519, . -/.gnupg, . -/.aws/credentials, . -/.kube/config, . .env ba fichiers, mpe GitHub/GitLab Personal Access Tokens). Ata soki cloud SSO ebomami, attaquant oyo azali kobatela ordinateur portable oyo ekangami te azali na accès brute ya système ya ba fichiers na clé nionso ya SSH oyo ezali chiffré te mpe jeton ya API ya cloud oyo efandi na histoire ya terminal na yo (-/.zsh_history / . -/.bash_history).

Nzete ya mokano: Kobɔtɔla ordinatɛrɛ ya moke oyo ekangami te vs. moyibi ya bafungola ya bokengi ya matériel vs. kosala surf na mapeka¶

Landa diagramme oyo ya triage ya vitesse makasi na boumeli ya miniti 15 ya liboso nsima ya café, esika ya kosala elongo, to likambo ya bokengi ya libándá ya mpɛpɔ.

flowchart TD
    A["Urgence ya bokengi ya esika ya mosala ya bato banso (Cafe, Esika ya kosala elongo, Salon ya aéroport, Train)"] --> B{"Nini mpenza esalemaki?"}
    B -->|"Ordinateur portable Elongolami Tango EZALI LILOBA / Efungwami"| C["0-60s: Na téléphone na yo, déclenchar Apple Find My 'Mark As Lost' to Microsoft 'Lock Device' -> Benga Corporate IT SOC mpo na MDM Lock/Effacer + Global SSO Session Kill"]
    B -->|"Ordinateur portable oyo bayibi tango ekangami / couvercle ekangami / ekangami"| D["FileVault / BitLocker ebatelaka disque na repos -> Déclencheur Find My / MDM Remote Wipe -> Roter mot de passe SSO & ko révoquer ba sessions ya cloud active"]
    B -->|"Fungola ya bokengi ya matériel (YubiKey) Bayibi (Yango moko to ekangami na ordinateur portable)"| E["Kota na IdP (Okta/Entra/Google), GitHub, AWS, mpe Mokambi ya mot de passe uta na telefone na yo na kosalelaka Fungola ya Sauvegarde/Passkey -> Bolongola bokomisi ya YubiKey oyo bayibi"]
    B -->|"Surf na mapeka / Mutu a filmé Écran to Clavier na Yo"| F["Bokanga écran mbala moko (Cmd+Ctrl+Q / Win+L) -> Bokende na esika ya privé -> Bobalusa mot de passe/PIN spécifique oyo ekomamaki + ba touches nionso ya API oyo emonanaka na écran"]
    C --> G["Kolongola ndingisa ya ordinateur portable oyo bayibi na kati ya 1Password / Bitwarden Web Vault -> Kosilisa ba sessions web nionso ya Google / Microsoft / Okta / Slack / GitHub"]
    E --> G
    G --> H{"Ordinateur portable ezalaki na ba clés ya développeur local (home .ssh, .aws, .gnupg, Git PATs, Docker/K8s tokens)?"}
    H -->|"OUI: Ingénieur / Admin / Fondateur Ordinateur portable"| I["Bolongola ba touches publics .ssh na GitHub/GitLab & ba serveurs ya production (`authorized_keys`) -> Désactiver ba touches ya AWS IAM na Console -> Revoquer touche GPG"]
    H -->|"NO: Mosaleli ya mombongo / Navigateur standard"| J["Verifier synchronisation ya navigateur (`Chrome/Edge/iCloud Keychain`) esili kobima na mosika -> Fisyé Rapport ya Police ya esika & bosengi ya bobateli CCTV ya Cafe"]
    I --> J

Eteni ya 1: "Monyololo ya koboma" ya miniti 5 mpo na ordinatɛrɛ ya moke oyo bayibi oyo ekangami te (Ba commandes ya Plateforme na plateforme)¶

Tango bazui ordinateur portable tango ba déverrouiller, kozela te tiii oko kota na ndaku to okosomba ordinateur ya sika po obanda ko revoquer accès. Chaque unique ya ba actions critiques ya confinement oyo ezali awa na se ekoki ko exécuter directement depuis iPhone to smartphone Android na yo tango otelemi na kati ya café.

Etape 1: Kokangama makasi na système d’exploitation na mosika (0 to 60 seconds) .¶

1. MacBook ya Apple (macOS):
   • Fungola appli Luka na ngai na iPhone na yo (to kota na icloud.com/find na navigateur nionso ya téléphone, oyo ezo contourner 2FA po osalela yango ata soki bayibi pe téléphone na yo).
   • Finá Apareyi -> [MacBook na yo] -> Tyá elembo lokola ebungaki -> Salá mosala.
   • Ezali boni soki moyibi abomi mbala moko Wi-Fi to akangaki ezipeli? Ba Mark As Lost to mpe Erase This Device commande esala milɔngɔ na ba serveurs APNs ya Apple mpe epelisaka split-second oyo MacBook esimbaka na nsima réseau Wi-Fi nyonso (to na nzela ya réseau Find My). Kokanga couvercle ya MacBook ekangamaka pe automatiquement écran soki Esenga mot de passe mbala moko sima ya pongi to écran sauvegarde ebandi e activé.
2. Windows 10 / Ordinateur portable ya Windows 11:
   • Na navigateur ya téléphone na yo, fungola ** .account.microsoft.com/devices**, pona ordinateur portable na yo, mpe finá Luka aparɛyi na ngai -> Lock.
   • Soki ezali ordinateur portable ya Windows ya entreprise oyo etambwisami na Microsoft Intune, kota na Intune Company Portal (portal.manage.microsoft.com) na téléphone na yo -> pona ordinateur portable na yo -> finá Actions -> Remote Lock to Reset Passcode / Wipe.

Etape 2: Boma ba sessions nionso ya cloud Single Sign-On (SSO) mpe ya navigateur (1 to 3 minutes) .¶

Ata soki moyibi a désactiver Wi-Fi na ordinateur portable mpo na ko naviguer na disque dur local na yo hors ligne, suka suka bako connecter ordinateur portable na hotspot cellulaire to bako copier ya navigateur na yo Cookies mpe Local Storage Ba fichiers SQLite na machine mosusu pona ko détourner ba sessions web na yo oyo okoti. Invalider ba jetons wana ya session na côté serveur sikoyo depuis téléphone na yo:

Eteni ya 2: Ezali boni soki bayibaki YubiKey to Fungola ya Bobateli ya Matériel na yo?¶

Basali mingi ya mosika batikaka YubiKey 5C Nano ya profil ya nse ekangami libela na port USB-C ya mopanzi ya ordinateur portable na bango, to bamemaka YubiKey 5 NFC na nsinga oyo ezwami na saki na bango ya ordinateur portable. Mbala mingi panique ekɔtaka: "Moyibi akoki kosalela YubiKey na ngai mpo na kokɔta na ba comptes na ngai nyonso? Mpe ndenge nini nakoki kokɔta na ba comptes na ngai kozanga YubiKey na ngai?"

1. Kososola nini moyibi AKOKI mpe AKOKI kosala TE na YubiKey na yo oyo bayibi¶

Fungola ya bokengi ya matériel ya mikolo oyo (YubiKey 5 Series, . Google Titan, . Token2, . Nitrokey) esungaka ba protocoles minei ekeseni ya bondimi, moko na moko ezali na profil ya risque ekeseni ntango bayibi yango na nzoto:

1. Ba Credentiels oyo ekoki kozwama na FIDO2 (Passkeys / Kokota kozanga mot ya nzela):
   • Ebatelami na PIN na yo ya FIDO2 (4 to 63 alphanumeric characters). Soki moyibi akoti na YubiKey na yo oyo bayibi na ordinateur na bango moko mpe ameki kosalela Passkey FIDO2 oyo ezangi mot de passe, puce matériel ya YubiKey esengaka PIN na yo ya FIDO2. Sima ya 8 devinettes ya PIN ya mabe oyo elandi, applet FIDO2 na YubiKey ekangamaka libela pe ezo se-briquer (Factory Reset Required), ko effacer ba credentiels nionso.
2. FIDO U2F / WebAuthn Facteur ya mibale (Username + Password + Touch YubiKey):
   • PIN REQUIRED PAR DEFAULT na ba sites internet mingi. Soki moyibi kaka ayibi YubiKey na yo na poche ya kazaka na yo (mpe azali te na ordinateur portable na yo to ba mots de passe na yo), YubiKey ezali na tina te mpo na bango mpo clé U2F emonisaka te ba sites nini ekomisami na yango.
   • DANGER CRITICAL SOKI BAYIBI BA FICHÉ NA ORDINATEUR NA YO OYO EZALI NA VERROLE: Soki moyibi ayibi ordinateur portable na yo oyo efungolami NA YubiKey oyo ekangami na mopanzi, gestionnaire ya autofill to ya mot de passe ya navigateur na yo epesi déjà kombo ya mosaleli mpe mot de passe, mpe moyibi asengeli kaka kosimba mosapi na bango na bouton ya ebende ya wolo na YubiKey mpo na koleka 2FA na yo banque, compte root ya AWS, to échange ya crypto.
3. YubiKey FungolaPGP (gpg Carte ya mayele) & PIV ( .X.509 Certificat) Ba Applets:
   • Ebatelami na matériel PIN ya mosaleli (par défaut 123456 soki o changer yango jamais) na PIN ya Admin (par défaut 12345678) oyo ekangami sima ya 3 tentatives ya mabe. (Soki otiki PIN ya OpenPGP na ndenge ya usine 123456, kanisá ete fungola ya PGP na YubiKey wana ezali na likama mpe longola yango mbala moko.)
4. Mot de passe statique ya YubiKey / OTP ya Yubico (Molai ya bilembo 44 ccccc... nsinga oyo ebimaka ntango basimbaki yango):
   • Soki o configurer Slot 1 to Slot 2 ya YubiKey na yo po ekoma mot de passe statique to Yubico OTP tango nionso o toucher pad ya or pendant 1 à 3 secondes, mutu nionso oyo asimbi touche akoki kofungola Notepad, kosimba touche, pe kotanga chaîne statique wana.

2. Protocole ya étape par étape pona ko déregistrer YubiKey oyo bayibi na 5 minutes¶

1. Kanga clé ya sécurité matériel na yo ya sauvegarde (to salela clé de passe ya iPhone/Android / App ya Authenticateur / Codes ya Sauvegarde):
   • Momesano ya malamu (epesami na NIST SP 800-63B) ezali ya kokomisa ntango nyonso ata bafungola mibale ya bokengi ya nzoto (moko na boucle/ordinateur portable na yo, moko ekangami na coffre-fort to bagages ya mobembo) bakisa Passkey ya aparɛyi na smartphone na yo.
2. Ko kota na ba comptes na yo ya priorité ya likolo pe supprimer KAKA YubiKey oyo bayibi na Surnom na yango:
   • Google / Gmail (myaccount.google.com/signinoptions/two-step-verification): Finá Passkeys mpe bafungola ya bokengi -> luka fungola oyo bayibi -> finá na elembo Poubelle mpo na kolongola yango.
   • Microsoft / ID ya Entra (mysignins.microsoft.com/security-info): Luka Fungola ya bokengi -> finá Effacer oyo bayibi.
   • ID ya Apple (Settings -> [Your Name] -> Sign-In & Security -> Two-Factor Authentication -> Security Keys): Finá na fungola oyo bayibi -> Longola Fungola.
   • GitHub ( Ezali na .github.com/settings/security): Na nse ya Passkey mpe Méthodes à deux facteurs -> Ba touches ya sécurité, finá Effacer pembeni ya touche oyo bayibi.
   • Mosisa ya AWS / IAM (IAM Console -> Users -> Security credentials -> Multi-factor authentication): Pona fungola ya bokengi ya FIDO oyo bayibi mpe finá Longola.
   • 1Mot de passe / Bitwarden / Cloudflare / Coinbase / Kraken: Fungola ba paramètres 2FA ya service moko na moko mpe longola enregistrement ya jeton ya matériel oyo bayibi.

Eteni ya 3: Mobongisi, DevOps, mpe bobaluki ya bafungola SSH/GPG (The -/.ssh mpe -/.aws likambo ya mbalakaka)¶

Soki ozali ingénieur logiciel, administrateur ya DevOps/SRE, scientifique ya ba données, to fondateur ya démarrage oyo bayibaki ordinateur portable na ye oyo efungolamaki, kolongola ba cookies ya navigateur ezali kaka ndambo ya bitumba. Moyibi oyo abwakaka répertoire ya ndako na yo azali na accès na clé cryptographique nionso oyo ewumeli mpe jeton CLI oyo ebombami lokola texte ya pamba na SSD na yo.

Exécuter 5-Step Developer Credential Purge oyo na téléphone ya sauvegarde to ordinateur portable ya moninga ya équipe na kati ya miniti 15 ya liboso:

1. Bafungola ya SSH (-/.ssh/id_ed25519 / . -/.ssh/id_rsa): Ata soki ebatelami na maloba ya nzela, kanisá ete fungola nyonso ya SSH ekɔtisami na kati ssh-agent na RAM na ordinateur portable déverrouillage ezali compromise. Kende na ** .github.com/settings/keys** mpe ** .gitlab.com/-/user_settings/ssh_keys** mpe kolongola mbala moko fungola ya bato nyonso SSH ya ordinatɛrɛ ya moke, mpe kosala ete moninga na yo ya ekipi alongola fungola na yo ya bato nyonso -/.ssh/authorized_keys na ba serveurs nionso ya production Linux na ba hôtes bastion.
2. Ba credentiels ya CLI ya cloud (-/.aws/credentials, . -/.config/gcloud, . -/.azure): Fungola AWS IAM Console -> Ba usagers -> [Yo] -> Ba credentiels ya sécurité mpe finá Desactivation / Supprimer na ba Clés nionso ya Accès (AKIA...). Bolongola Google Cloud gcloud auth OAuth kozongisa ba jetons ya sika na nzela ya lokasa na yo ya Connexions ya ba parties troisièmes ya compte Google (Google Cloud SDK).
3. GitHub, GitLab, npm, PyPI, mpe Docker Ba jetons ya accès personnel: Kende na github.com/settings/tokens mpe finá Revoke all na ba PAT ya Grain Fine mpe na Classic ghp_... bilembo ya bilembo. Kolongolama -/.npmrc bilembo (npmjs.com) mpe -/.pypirc bilembo ya bilembo.
4. Kubernetes (-/.kube/config) & Terraform ( .-/.terraform.d): Bobalusa ba certificats ya client ya Kubeconfig statique to ba jetons ya OIDC mpe bolongola ba jetons ya API ya Terraform Cloud (app.terraform.io).
5. Bafungola ya ko signer GPG / PGP (-/.gnupg): Bimisa Certificat na yo ya bolongoli GPG oyo osali liboso (gpg --import revoke.asc mpe gpg --keyserver keys.openpgp.org --send-keys [KeyID]) mpe kolongola fungola ya GPG na GitHub.

Eteni ya 4: Koyanola na "Shoulder Surfing" (Moto akangaki to atalaki écran na yo na café/vol)¶

Est-ce que soki mutu moko te ayibi ordinateur portable na yo physique, kasi tango ozali kosala na porte ya aéroport, na avion, to na café, okangi mutu oyo afandi sima na yo to na kiti ya pembeni azali ko filmer écran to clavier na yo na caméra ya smartphone na ye (to azali kotala directement na esika ya polele .env fisyé, motuna ya mot de passe, to deck ya diapositive ya sekele)?

1. Kanga écran na yo mbala moko na touche moko ya réflexe:
   • macOS: Finá na Cmd + Ctrl + Q (akangaka écran mbala moko sans kokanga ba apps).
   • Windows: Finá na Win + L **.
   • Linux: Finá na Super + L to Ctrl + Alt + L **.
2. Kobanda koswana na nzoto te: Na kimia, pamba ordinateur portable na yo, kende na kiti ya privé na mokɔngɔ na yo na efelo ya makasi, mpe tala lisusu oyo ezalaki komonana na écran na yo to oyo ekomamaki na klaviatware na yo na boumeli ya miniti 10 oyo eleki.
3. Rotater secret nionso oyo ezalaki ko clignoter na écran:
   • Soki okoma mot de passe ya login ya ordinateur portable to gestionnaire ya mot de passe Mot de passe maître tango mutu akokaki komona misapi na yo, changer mot de passe wana mbala moko na esika ya privé.
   • Soki fenetre ya terminal, . .env fichier, tête ya Postman, to console ya cloud ezalaki komonana na écran, assumer quelque résolution ya likolo 4K kamera ya smartphone na 3 mètres (10 pieds) ekangaki photo ya crisp, zoomable ya ba touches API na yo, mpe tourner ba touches wana mbala moko (tala Zoom ya mbalakaka to fuite ya écran-share ya ba équipes).

Liste ya vérification ya durcissement ya ordinateur portable ya 6 Points "Cafe & Airport Proof" (Ebongisami Lelo)¶

Configurer ba paramètres oyo motoba ya matériel na OS sikoyo mpo ata moyibi alongoli ordinateur portable na yo oyo efungwami na mesa lobi, ordinateur portable ekangamaka avant moyibi akoma na porte ya café:

• 1.1. Activer Auto-Lock ya proximité ya Bluetooth (Dynamic Lock na Windows / . Near Lock to Apple Watch Auto-Lock na Mac):
  • Windows 11: Pair iPhone to Android téléphone na yo na ordinateur portable na yo na nzela ya Bluetooth, sima kende na Paramètres -> Comptes -> Options d'entrée -> Blocage dynamique mpe tyá elembo na "Tika Windows ekanga automatiquement appareil na yo tango ozali mosika". Soki kaka moyibi akimi na ntaka ya mɛtrɛ 10 longwa na mesa na ordinatɛrɛ na yo ya moke (to ozali kokanga Bluetooth na telefone na yo na poche na yo), Windows ekangaka écran yango moko.
• 2.1.1. Botia "Coin ya moto" mpe Timer ya 60 secondes ya pile ya idle Screen-Lock:
  • Na macOS (Paramètres ya système -> Écran ya blocage) mpe Windows (Paramètres -> Système -> Puissance & pile -> Écran mpe pongi), tia Boma emoniseli / Esengaka mot de passe na pile na 1 to 2 minutes tango ozali kosala na miso ya bato.
• 3. Configurer 1Password / Bitwarden po e bloquer instantanément Tango Système e bloquer to Après 1 Minute Idle:
  • Na 1Mot de passe -> Paramètres -> Sécurité, tia Lock sima ya ordinateur ezali occupé pona 1 minute, vérifier Lock on sleep, mpe activer Touch ID / Windows Hello mpo okoma jamais Mot de passe Maître na yo na ba touches oyo emonanaka na miso ya bato.
• 4. Esengaka Touch ya Matériel NA Passphrase pona Chaque ssh mpe git Bosalisi (1Password SSH Agent to mpe FIDO2 ed25519-sk Bafungola):
  • Na esika ya kotika sans chiffrement -/.ssh/id_ed25519 ba fichiers na disque dur na yo, bomba ba touches SSH na yo na kati ya 1Password SSH Agent (oyo esengaka ndingisa ya Touch ID biométrique na moko na moko git push to mpe ssh connexion) TO kobimisa matériel-bound ** .ssh-keygen -t ed25519-sk -O verify-required** ba touches oyo ekoki ko copier te na YubiKey na yo mpe esengaka PIN FIDO2 na yo na usage nionso.
• 5. Ezali na ntina mingi. Kangisa ntango nyonso Magnétique 60-Degree Filtre ya écran ya confidentialité ya Micro-Louver (3M / Kensington) na Public:
  • Écran magnétique ya vie privée ekómisaka emoniseli na yo moindo na moindo makasi mpo na moto nyonso oyo azali kotala na angle monene koleka 30 degrés libanda ya centre, kokanga miso ya bato oyo bazali kosala surf na mapeka na kiti ya mpɛpɔ to ya café oyo elandi.
• 6. Kotika Jamais Ordinateur Portable sans surveillance pendant "Just 30 secondes" pona kozua kafe to kosalela toilette:
  • Esili 70 percent ya moyibi ya café mpe salon ya aéroport esalemaka ntango mosali atiki ordinateur portable na ye na mesa na boumeli ya 45 secondes mpo na kozwa latte na comptoir to atuni mopaya "Okoki kotala biloko na ngai?" Toujours paqueter ordinateur portable na sac na yo mpe komema yango elongo na yo, to boucle Kensington NanoSaver Steel Cable Lock zingazinga ya cadre ya mesa oyo ekangami na boulon.

Mituya ya mbalakaka ya etuka mpe ba protocoles ya agence¶

Sima ya kokanga ordinateur portable oyo bayibi mpe ko annuler ba sessions ya cloud active (miniti 5 ya liboso), yebisa moyibi physique na bakonzi ya mboka mpe kobatela ba vidéos ya CCTV ya café/aéroport liboso ya kokoma likolo (ba cafés mingi ekomaka likolo ya CCTV chaque 24 à 72 heures):

États-Unis mpe Canada¶

• Botindiki ya police ya urgence (Moyibi / Suspect actif en vue): Benga na 911. (Soki ozali na kati ya terminal ya aéroport, benga Police ya aéroport / Police ya Authority port mbala moko na podium ya porte oyo ezali pene mpo ba policiers bakoka kokanga moyibi yambo ya kobima na sécurité to komata na train).
• Rapport ya police oyo ezali ya urgence te (Esengeli mpo na Assurance ya entreprise & Couverture ya carte de crédit): Benga 311 to ligne ya police ya ville ya esika ofandi mpo na kozwa Numéro ya Rapport ya incident ya police.
• Kopesa sango ya moyibi ya cyber / ya entreprise ya fédéral: Soki appareil ya entreprise oyo bayibi oyo efungolami esali que ba intrusion to ba extorsionner na réseau oyo epesami ndingisa te, yebisa na Centre ya plainte ya crime internet ya FBI (ic3.gov) mpe CISA (cisa.gov/report) na Etats-Unis, to Centre canadien ya sécurité cybernétique (cyber.gc.ca) na Canada.

Royaume-Uni¶

• Dispatch ya police ya urgence (Moyibi / Moyibi azali kaka): Benga 999.
• Rapport ya police oyo ezali ya urgence te & Jurisdiction ya chemin de fer/aéroport:
  • Na ba cafés to bisika ya balabala: Benga 101 (to dossier na internet na police ya esika ofandi) mpo na kozwa Numéro ya Référence ya Crime (CRN) mbala moko.
  • Na ba trains to na kati ya ba gares ya train/Tube: Texte British Transport Police (BTP) na 61016 to benga na 0800 40 50 40.
• Botalisi ya bobukami ya ba données (UK GDPR): Soki bazwaki ordinatɛrɛ ya moke ntango efungolamaki mpe ezalaki na ba données personnelles ya ba clients to ya basali oyo ba chiffré te, yebisa Mokambi na yo ya Protection ya ba Données (DPO) mbala moko mpo na kotala soki 72 heures lapolo ya bobukami ya ICO ya Royaume-Uni (ico.org.uk) esengeli.

Union européenne¶

• Numéro d’urgence pan-européen: Benga 112 mpo na lisungi ya police ya mbala moko na ba Etats membres nionso ya UE.
• Rapport ya police (Procès-Verbal / Strafanzeige / Denuncia): Kota na commissariat ya police ya mboka oyo ezali pene (Commissariat de Police, Polizeiwache, Comisaría de Policía, Questura) mpo na kozwa rapport ya moyibi oyo ekomami na cachet, mpe yebisa DPO ya entreprise na yo mbala moko na se ya GDPR Article 33 soki appareil efungolamaki na moment ya moyibi.

Australie mpe Nouvelle-Zélande¶

• Botindiki ya mbalakaka: Benga 000 na Australie to 111 na Nouvelle-Zélande.
• Rapport ya Police oyo ezali ya mbalakaka te: Benga 131 444 (Ligne d’aide ya police na Australie) to 105 (Police ya Nouvelle-Zélande oyo ezali ya mbalakaka te) mpo na kozwa Numéro ya Evenement ya Police, mpe koyebisa compromis ya credentielle ya entreprise na nzela ya cyber.gov.au (ACSC) to CERT NZ (cert.govt.nz).

Inde mpe Azia-Pacifique¶

• India: Benga 112 (Urgence) to 100 (Police), mpe kosala mbala moko e-FIR / Lost Article Report na nzela ya portail ya mwana mboka ya police ya l’Etat mpo ozala na mikanda ya officiel mpo na kolongolama ya biloko ya MDM ya entreprise mpe kotosa CERT-In.
• Singapore & Japon: Na Singapour, benga na 999 (Urgence) to tinda rapport na internet na Singapore Police Force e-Services Portal (police.gov.sg). Na Japon, pesa rapport mbala moko na Koban (Boîte de police) to poste ya Police ya Aéroport oyo ezali pene mpo na kozwa Tounan-Todoke (Numéro ya rapport ya moyibi).

Mituna oyo batunaka mingi¶

Esengeli na cliquer liboso "Effacer dispositif oyo" (Efface à distance) to "Marquer comme perdu" (Lock à distance) tango bayibi ordinateur portable na ngai ya MacBook to Windows déverrouillant?¶

Toujours déclencher **Mark As Lost / Remote Lock FIRST**, mpe zela tii tango verrou eko confirmer (to coordonner na équipe IT ya entreprise na yo) avant ya ko déclencher Effacer / Effacement mobimba, mpo na ba raisons mibale ya ntina. Ya liboso, a `Remote Lock` paquet ezali moke mpe esalaka mbala moko microsecond oyo ekomi na ordinateur portable na nzela ya Wi-Fi, kosilisa session ya bureau active mpe ko bloquer écran sima ya chiffrement FileVault to BitLocker tout en préservant makoki ya ordinateur portable ya ko beacon esika na yango ya GPS/Wi-Fi kozonga na Find My. Ya mibale, soki o cliqué "Longola na compte" (oyo ekeseni na Effacer), na mbalakaka o OFF Activation Lock, ko permettre moyibi a effacer pe ateka lisusu MacBook na propre. Jamais ko cliquer "Longola dispositif oyo" na Find My.

Soki ordinateur portable na ngai ezalaki na FileVault (Mac) to BitLocker (Windows) oyo efungolami, yango ebatelaka ba fichiers na ngai te ata soki bayibaki yango ntango écran ezalaki polele?¶

Encryption ya disque mobimba (FileVault 2 mpe BitLocker) ebatelaka ba données **na bopemi** (ntango ordinateur portable ekangami, hibernation, to ekangami na écran avant démarrage/login). Kasi, ntango ozali kokɔta na ordinatɛrɛ na yo na écran oyo efungolami, fungola ya masta ya chiffrement efandi na RAM ya système oyo ezali kokita mpo système d’exploitation mpe ba applis na yo ekoka kotánga mpe kokoma ba fichiers. Soki moyibi azwi ordinatɛrɛ na yo ya moke ntango écran ezali kolamuka mpe azali kokoba kobɛtabɛta trackpad mpo ete écran ekangama ata moke te, FileVault mpe BitLocker epekisaka bango te básala kopi ya ba fichiers na yo, yango wana kotinda commande ya kokanga mbala moko na mosika na telefone na yo mpe kozongisa ba séances ya cloud na 60 secondes ya liboso ezali na ntina mingi.

Est-ce que soki iPhone na ngai NA MacBook na ngai oyo e déverrouiller bango mibale ekangamaki esika moko na mesa moko: ndenge nini nakoki kokanga yango sans téléphone na ngai pona 2FA?¶

Apple etongaki bypass ya urgence spécifique mpo na scénario oyo ya sikisiki: kodefa téléphone ya mosali ya café, téléphone ya mopaya, to ordinateur portable ya moninga ya mosala mpe kofungola **`icloud.com/find`** directement (botala ba `/find` na nsuka ya URL). Na bokeseni na oyo ya ntina mingi `icloud.com` porte ya porte, **`icloud.com/find` epesaka yo nzela ya kokota KAKA na email mpe mot de passe ya Apple ID na yo SANS ete osengeli na code ya 6 chiffres ya Authentification ya deux facteurs**. Mbala moko na kati `icloud.com/find`, okoki mbala moko kotia iPhone na yo mpe MacBook na yo na **Mode perdu**, kokanga ba écrans nionso mibale mpe ko désactiver Apple Pay na moins de 30 secondes.

Moyibi akoki kobimisa ba clés privées to ba mots de passe na ngai ya SSH na YubiKey 5C Nano oyo bayibi?¶

Te. YubiKey ya solosolo ebombaka bafungola nyonso ya privée ya FIDO2, U2F, PIV, mpe OpenPGP na kati ya puce matériel cryptographique Secure Element oyo ekoki kobongola te (`EAL6+` oyo ezali na mokanda ya kondimama). Ezali physique mpe mathématique impossible ya kosala copie, exportation, to kotanga clé privée *out* ya YubiKey na ordinateur. Risque seule na YubiKey oyo bayibi ezali que mutu oyo azali na clé physiquement akoki ko brancher yango pe ko toucher bouton ya or pona *kosalela* yango tiii oko kota na ba comptes na yo (GitHub, Google, AWS, SSH `authorized_keys`) mpe kolongola enregistrement public ya YubiKey wana.

Ezali malamu kotika ordinatɛrɛ na ngai ya moke na mesa ya café na boumeli ya segɔnde 60 mpo na kosalela twalɛti soki nakangi écran (Cmd+Ctrl+Q / . Win+L) liboso?¶

Te. Ntango ozali kokanga écran na yo na `Cmd + Ctrl + Q` to mpe `Win + L` ebatelaka ba données numériques na yo sima ya FileVault to BitLocker, esalaka zéro mpo na kopekisa moyibi abima na porte na yo `$2,500` ordinateur portable physique na 4 secondes. Kotika ordinateur portable oyo ekangami sans surveillance na mesa e exposer yango pe na tampering physique ya matériel (lokola attaquant ya mabe akotisi Câble O.MG, USB Rubber Ducky, to keylogger matériel na port USB-C na yo tango ozali na toilette). Glissé ntango nyonso ordinateur portable na yo na sac à dos na yo mpe mema yango na toilette mbala nyonso.

Maziba mpe bokambi ya Leta¶

• Institut national ya ba normes na technologie (NIST, Etats-Unis): NIST SP 800-46 Rev. 2 Buku ya mosala ya téléphone ya entreprise, accès à distance, mpe komema bokengi ya dispositif na yo moko (BYOD) mpe Mabongisi ya identité numérique NIST SP 800-63B (Masengi ya bobungisi mpe bolongoli ya authenticateur matériel multi-factor).
• Agence ya bokengi ya cybersecurité mpe ya bokengi ya ba infrastructures (CISA, États-Unis) & Centre national de sécurité cyber ya Royaume-Uni (NCSC): Kobatela ba dispositifs na mouvement (Vrrouillage physique ya session, verrouillage ya proximité Bluetooth, mitigation ya surf na mapeka, mpe ba protocoles ya effacement ya MDM à distance).
• Yubico AB: Nini Osengeli Kosala Soki Obungisi YubiKey Na Yo (support.yubico.com) (FIDO2 8-Attempt PIN Lockout, U2F Second-Factor Risk Model, OpenPGP 3-Attempt PIN Lock, mpe Architecture ya Clé ya Sauvegarde).
• Apple Inc. & Microsoft Corporation: Buku ya bokengi ya plateforme ya Apple (Chiffrement ya volume ya FileVault, Enclave ya bokengi ya T2 / Apple Silicon, mpe icloud.com/find No-2FA Architecture ya mode perdu) mpe Microsoft Windows 11 BitLocker DMA Protection & Documentation technique ya verrouillage dynamique.
• Likita ya Europe mpo na kobatela ba données (EDPB): Malako 9/2022 na ntina ya Liyebisi ya bobukami ya ba données personnelles na se ya GDPR (Kokesenisa moyibi ya dispositif oyo ekangami na chiffrement na bopemi vs. Moyibi ya dispositif ya session active oyo ekangami te).

Ba guides oyo etali yango¶

• Ordinateur portable ya mosala bayibi to ebukani tango ozali kosala mobembo: lock ya MDM mpe récupération ya temps d’arrêt zéro
• Kokita ya base de données ya production accidentelle, fuite secret ya git, na triage ya incident
• Bobateli ya mosala ya mosika na mbalakaka mpe bomoto ya ba données
• Kosala mosika na hôtel to esika ya mwa ntango moke
• Moyibi mpe koyiba kobika
• Mituya ya mbalakaka