Laptop Yakazi Yibwe, Yarafashwe, cyangwa Yavunitse Mugihe Ukorera kure¶

Gutakaza mudasobwa igendanwa y'akazi mugihe cy'urugendo cyangwa gukora kure bitera ibibazo bibiri icyarimwe: kurenga ** isosiyete ikora nabi ya cyber umutekano muke ** (niba imashini idafunze cyangwa iryamye irimo ibimenyetso bifatika, urufunguzo rwa SSH, hamwe namakuru yabakiriya yaguye mumaboko atariyo) hamwe no guhagarika ibikorwa byihuse **. Laptop yawe yaba yaranyazwe muri cafe, igafungirwa kumupaka mpuzamahanga wa gasutamo, cyangwa yajanjaguwe nimpanuka yo gutambuka, nyuma yo gufunga iminota 60 no gukurikiranya ibicu bikingira amakuru yumukoresha wawe, bikabika akazi kawe, kandi bikagusubiza kumurongo nyuma ya saa sita.

Kora ubu¶

1. ** Ntukirukane umujura wa mudasobwa igendanwa yitwaje imbunda cyangwa ikaze. ** Nta mudasobwa igendanwa ikwiye gukomeretsa ku mubiri. Himura ahantu hizewe ako kanya hanyuma uhamagare aho utuye nimero yihutirwa (911 muri Amerika na Kanada, 112 mu bihugu by’Uburayi, 999 mu Bwongereza) niba uri mu kaga.
2. ** Funga umurongo wa terefone yawe bwite ya Wi-Fi mugihe cyamasegonda 10 niba mudasobwa igendanwa yibwe yarahambiriwe kuri terefone yawe.
3. ** Koresha "Gufunga Remote" (mbere yo guhanagura kure) ukoresheje Apple Find My, Microsoft Shakisha Igikoresho cyanjye, cyangwa ikigo cyawe cya IT gifasha. Niba mudasobwa igendanwa yaranyazwe * idafunguye * mu ntoki zawe, hamagara ikigo cyawe ** Ikigo gishinzwe umutekano (SOC) / IT Helpdesk ** ukoresheje terefone y'amajwi uhite utanga byihutirwa ** MDM Remote Lock na Token Revocation **.
4. ** Kuraho ibikorwa bya SSO byinjira, ibimenyetso bya OAuth, hamwe nurufunguzo rwa SSH / API muri terefone yawe mugihe cyiminota 15. Injira muri Google Workspace, Microsoft Entra ID (Azure AD), Okta, GitHub, na Slack paneli yumutekano kuri terefone yawe hanyuma ukande ** "Sohora mubindi biganiro byose." **
5. ** Shaka nomero yemewe ya Polisi yaho (cyangwa inyemezabwishyu ya gasutamo) mbere yo kuva aho ikibuga cyindege cyangwa ikibuga cyindege.
6. ** Ntuzigere ucomeka mudasobwa igenzurwa cyangwa yagaruwe by'agateganyo muri sosiyete yawe ya VPN. Komeza amashanyarazi muri leta ya Faraday / indege hanyuma utangaze amakuru yo kuruhuka kuri InfoSec.

Ibikorwa byihutirwa byakazi: byibwe, byafashwe kumupaka, cyangwa byacitse kumubiri¶

Kurikiza iki cyemezo cyigiti kugirango uhitemo inzira iboneye hamwe nuburyo bukomeza ukurikije uburyo wabuze uburyo bwo kubona imashini yakazi.

flowchart TD
    A["Kora Laptop Yihutirwa Mugihe Urugendo"] --> B{"Laptop byagenze bite?"}
    B -->|"Yibwe / Yabuze (Cafe, Hotel, Transit)"| C["Zimya Hotspot ya Terefone ako kanya; Imbarutso ya kure"]
    B -->|"Gufungwa / Gushakishwa na gasutamo"| D["Kurikiza utuje; Saba inyemezabwishyu ya kashe yemewe"]
    B -->|"Kumeneka Kumubiri (Kumenagura Mugaragaza / Amazi / Ikibaho cyapfuye)"| E{"Imashini iracyafite ingufu (LEDs / Umufana)?"}
    C --> F["Hamagara Corporate InfoSec / SOC muminota 15 yo gukuraho SSO Tokens & Gutanga MDM Wipe"]
    F --> G["Dosiye Raporo Yabapolisi Bantu Mubantu Kubona Numero Yurubanza"]
    D --> H["Ntuzigere uhuza ibikoresho byagenzuwe kugirango ukore VPN; Raporo Urunigi-rwo-Gucika kuri IT"]
    E -->|"Yego: Gusa Mugaragaza cyangwa Mwandikisho Yavunitse"| I["Shira muri Hotel TV ukoresheje HDMI + USB Mwandikisho / Imbeba kugirango uhuze imirimo yanyuma & Inyuma hejuru"]
    E -->|"Oya: Ikibaho cyababyeyi / Bateri yabyimbye"| J["Kuraho M.2 NVMe SSD Gusa Niba byemewe na IT; Gutanga Igicu VDI kubikoresho byububiko"]
    G --> K["Kuzamura Zero-Kwizera Igicu (Windows 365 / Codespace) kuri Loaner cyangwa Tablet"]
    H --> K

Igice cya 1: Iminota 60 yambere nyuma ya mudasobwa igendanwa yibwe cyangwa yatakaye¶

Iyo mudasobwa igendanwa ibuze ku kibuga cyindege, gariyamoshi, rideshare, cyangwa cafe ikorana, kora iyi protokole yibintu bikurikirana uhereye kuri terefone yawe. Kubujura bwibikoresho byawe no gufunga banki, reba yibye mudasobwa igendanwa cyangwa terefone yahanagura no gufunga konti na umutekano wihutirwa wumurimo wumutekano hamwe namakuru yihariye.

Iminota 0 kugeza 15: Sever ihuza hafi hanyuma ufunge ibyuma¶

1. ** Kwica Bluetooth na Hotspot Yumuntu kuri terefone yawe nisaha yubwenge: **
   • Niba mudasobwa igendanwa yawe yakoreshaga terefone igendanwa, kuzimya hotspot bigusha umujura kumurongo.
   • Kuzimya Bluetooth birinda ** Apple Watch Auto-Gufungura ** cyangwa ** Windows Dynamic Lock ** kurinda mudasobwa igendanwa mugihe umujura asohoka mu nyubako muri metero 10 (33).
2. ** Tanga Ifunga rya kure (kandi umenyeshe amajwi niba wabuze hafi) ukoresheje terefone yawe: **
   • ** macOS (Apple Silicon / T2 MacBooks): ** Fungura porogaramu ya ** Shakisha My ** kuri iPhone yawe (cyangwa ujye icloud.com/find), hitamo MacBook yawe, hanyuma ukande ** Mark nkuko Yatakaye / Gufunga **. Injira progaramu ya 4- cyangwa 6 yimibare yimibare (kuri Intel Macs) cyangwa ukoreshe Lost Mode (kuri Apple Silicon M1 / ​​M2 / M3 / M4 Mac), ihita ifunga ecran, ikabuza Apple Pay, kandi igasaba urufunguzo rwa Apple cyangwa urufunguzo rwo kugarura MDM kurwego rwibikoresho.
   • ** Windows 10/11: ** Jya kuri account.microsoft.com/devices .
3. ** Impamvu ugomba gukurura "Gufunga Remote" MBERE YUKO "Gusiba kure / Guhanagura" (Keretse niba byambuwe): **
   • Isosiyete yombi ya Apple Find My na Microsoft Intune isaba mudasobwa igendanwa yibwe guhuza Wi-Fi cyangwa data selile kugirango yakire itegeko rya kure.
   • Niba wohereje ** Remote Ifunga **, mudasobwa igendanwa ifunga ako kanya ihuza Wi-Fi, ** kandi igakomeza kohereza imirongo yayo ya GPS / Wi-Fi triangulation ** kuri wewe hamwe nitsinda rya IT.
   • Iyo ** Ihanagura rya kure (Erase) ** irangije gukora, sisitemu y'imikorere hamwe n'ibyangombwa bya Wi-Fi birasenywa, ibyo bikaba ** bihagarika burundu mudasobwa igendanwa kumenyesha aho biherereye ** (cyangwa ikavuga gusa urumuri rwa Bluetooth rimwe na rimwe kuri Mac nshya).
   • ** Amategeko: ** Imbarutso ** Ifunga rya kure ako kanya ** kuminota 2; noneho hamagara itsinda ryanyu IT IT ishinzwe umutekano kuri Minute 5 kugirango * bashobore guhitamo niba bayisiga muburyo bwa Locked track (niba disiki yari imaze gushishoza kandi ikazimya) cyangwa ugasunika ako kanya ** MDM Yuzuye ya Obliteration Wipe ** (niba mudasobwa igendanwa yafashwe igifuniko gifunguye kandi yinjiye, cyangwa ifite amakuru agenga umutekano muke).

Iminota 15 kugeza 30: Hamagara Corporate IT / InfoSec hanyuma ukureho ibimenyetso byose byigicu¶

** Ntukigere ugerageza guhisha mudasobwa igendanwa yibwe cyangwa yatakaye kumukoresha wawe kubera ipfunwe cyangwa ubwoba bwo gucyahwa.

Inyandiko imenyesha yohereza / kuvugana na IT Umutekano wawe (SOC) na Manager¶

. * Ibikoresho bigezweho muri iki gihe mugihe cyo gutakaza: * Encryption Yuzuye-Disiki: [FileVault / BitLocker IRASHOBORA]. * * Igikorwa ako kanya kimaze gufatwa: Nahagaritse terefone yanjye ya terefone kandi natumye Mode yatakaye ikoresheje [Shakisha My / Intune]. Nyamuneka nyamuneka usunike MDM Ifunga / Ihanagura, wambure ibyemezo byabakiriya ba VPN, kandi utesha agaciro amasomo yose ya Okta / Entra / Google SSO. Ubu ndi mu nzira yo gutanga raporo y’abapolisi baho kandi nshobora kuboneka kuri [Nomero yawe ya Terefone]. "

Intoki ibyangombwa na token yo gukuraho urutonde (Kora ibi ukoresheje terefone yawe niba ufite iterambere / admin kwinjira)¶

Ndetse na nyuma yo gufunga konti yawe nkuru ya SSO, abitezimbere, sysadmins, hamwe nabaterankunga akenshi bafite ibyangombwa byaho bibitswe mububiko bwihishe (-/.ssh/, -/.aws/, -/.kube/, .env dosiye, cyangwa kwagura mushakisha) kuri SSD ya mudasobwa igendanwa:

• ** GitHub / GitLab / Bitbucket: ** Fungura Igenamiterere kuri terefone yawe -> ** SSH na GPG urufunguzo ** -> Siba urufunguzo rwa SSH rujyanye na mudasobwa yibwe. Noneho jya kuri ** Igenamiterere ryabatezimbere -> Kwinjira kugiti cyawe (PATs) ** hanyuma ukureho ibimenyetso byose bibitswe kuri iyo mashini, hanyuma ukande ** Amasomo -> Kuraho amasomo yose y'urubuga **.
• ** AWS / Igicu cya Google (GCP) / Azure CLI: ** Niba ufite urufunguzo rurerure rwa IAM muri -/.aws/credentials cyangwa igikora gcloud auth ikimenyetso kuri mudasobwa igendanwa yibwe, funga IAM Access Key ID ako kanya muri konsole.
• ** Umuyobozi wibanga (1Password / Bitwarden / Umuzamu / Dashlane): ** Fungura porogaramu yawe yo gucunga ijambo ryibanga kuri terefone yawe -> ** Igenamiterere / Umutekano -> Ibikoresho byemewe ** -> ** Kwemerera / Kwambura ** mudasobwa igendanwa yibwe bityo cache yacyo ihishe neza ihanagura mugihe ikora kuri enterineti.
• ** Slack Slack / Amakipe ya Microsoft / Imeri: ** Sohora mumasomo yose ya desktop uhereye kumiterere ya porogaramu igendanwa.

Iminota 30 kugeza 60: Tanga raporo ya polisi kandi ubike ibimenyetso byubwishingizi¶

1. ** Baza cafe, hoteri, cyangwa umuyobozi ukorana nu mwanya wo kubika amashusho ya CCTV ako kanya: ** Kamera nyinshi zumutekano zubucuruzi zandika disiki zikomeye buri masaha 24 kugeza 72. Baza umuyobozi uri ku kazi gushyira akamenyetso no kubika idirishya rya timestamp (urugero, 14:10 kugeza 14:30) kubapolisi, hanyuma ufate ifoto yikarita yubucuruzi yumuyobozi.
2. ** Jya ku biro by'abapolisi bikwegereye ku giti cyawe: ** Mu mijyi myinshi yo mu mahanga, guhamagara nimero yihutirwa y'ubujura budafite urugomo nyuma yuko umujura ahunze bizagufasha gusa kwinjira muri sitasiyo ikwegereye (* Comisaría *, * Commissariat de Police *, * Polizeiwache *, cyangwa * Koban *).
3. ** Saba kopi ya kashe ya Raporo yemewe ya Polisi hamwe numero ya Laptop Serial nomero yanditse: **
   • Shakisha mudasobwa yawe igendanwa ** kuri terefone yawe (igaragara imbere igenamiterere ry'ibikoresho bya Apple ID, ibikoresho bya konte ya Microsoft, imeri yawe ya mbere yoherejwe na imeri, cyangwa inyemezabwishyu ya AppleCare / Dell) hanyuma urebe neza ko umupolisi yanditse nomero ya Serial ** na Make / Model ** kuri raporo yanditse. Ubwishingizi bwa cyber-bwishingizi hamwe namakarita yinguzanyo-yinguzanyo yimizigo yimizigo izanga ibirego bivuga gusa "1 laptop" idafite numero yuruhererekane.

Igice cya 2: Gushakisha mudasobwa zigendanwa za gasutamo, gufunga, no gufatirwa¶

Iyo bambutse imipaka mpuzamahanga, abashinzwe za gasutamo n’abashinzwe kurinda imipaka mu nkiko nyinshi (harimo na gasutamo y’Amerika no kurinda imipaka / CBP usibye gushakisha imipaka, ingabo z’umupaka w’Ubwongereza kuri gahunda ya 7, CBSA yo muri Kanada, ingabo z’umupaka wa Ositarariya, hamwe n’ibiro by’ubugenzuzi bukabije ku mipaka ku isi) zifite uburenganzira bwemewe bwo kugenzura ibikoresho bya elegitoronike nta cyemezo kibifitiye uburenganzira.

Kugereranya imipaka ya mudasobwa igendanwa no gusubiza kure-abakozi¶

Igice cya 3: Kora mudasobwa igendanwa yamenetse mugihe ugenda (Mugaragaza, Amazi, cyangwa SSD yapfuye)¶

Niba mudasobwa igendanwa yawe itaribwe, ahubwo yahuye n'ikibazo cyo kumeneka mu isanduku yo hejuru, ikawa yamenetse hejuru ya clavier, cyangwa ikibaho cyababyeyi cyapfuye mbere y’uko umukiriya anenga, ushobora gukuramo akazi kawe cyangwa guhindura mudasobwa igendanwa yacitsemo kabiri mu biro bihagaze mu minota 10.

Icyerekezo A: Mugaragaza / mudasobwa igendanwa ya mudasobwa igendanwa, ariko imashini iracyakomeza¶

Niba akanama LCD / OLED kamenetse cyangwa umukara (urashobora kumva chime yo gutangira, ukumva trapad ikanda, cyangwa ukabona Caps Lock LED ihindagurika kandi ikazimya), mudasobwa ubwayo irakora 100%:

1. ** Hindura buri cyumba cya hoteri ya TV muri monitor yawe yibanze ("Clamshell / Inkeragutabara zo hanze"): **
   • Kuramo umugozi wa HDMI uhereye inyuma yicyumba cya hoteri ya hoteri yawe ya hoteri (cyangwa uguza umugozi wa HDMI hamwe na USB-C hub kuva kuri hoteri yimbere ya hoteri / ikigo cyubucuruzi) hanyuma ucomeke neza muri mudasobwa yawe ya HDMI cyangwa USB-C / Thunderbolt.
   • ** Nigute ushobora guhatira amashusho kuri TV yo hanze utabonye ecran ya mudasobwa igendanwa: **
     • ** Kuri Windows 10/11: ** Hindura mudasobwa igendanwa, tegereza amasegonda 30 kuri ecran yinjira, kanda Windows Key + P, kanda urufunguzo rwa ** Hasi Arrow rimwe ** (kuri * Duplicate *) cyangwa ** kabiri ** (kuri * Kwagura *), hanyuma ukande ** Enter **. Niba kwinjira byinjira bikiri kuri ecran yimbere yamenetse, funga umupfundikizo wa mudasobwa igendanwa hafi ya yose (cyangwa ukoreshe USB ya clavier / imbeba yo hanze ifunze umupfundikizo) kugirango Windows ihatire desktop yibanze kuri TV ya hoteri.
     • ** Kuri macOS (MacBook Air / Pro): ** Shira MacBook muri charger ya ** AC yamashanyarazi **, ucomekeshe umugozi wa HDMI kuri TV, hanyuma uhuze USB na clavier yose ya USB hamwe nimbeba (cyangwa ukande Command + F1 cyangwa Command + Brightness Down kuri clavier yubatswe mugihe ufunguye guhinduranya ** Indorerwamo Yerekana ** ako kanya).
2. ** Shyira dosiye zose zidafite aho zihurira nigicu ako kanya: **
   • Umaze kubona desktop yawe kuri TV ya hoteri, ako kanya git commit na git push amashami yose yakazi-atera imbere, ohereza inyandiko za desktop zaho kuri OneDrive / Google Drive / iCloud, hanyuma wohereze ububiko bwububiko bwaho bwose mbere yuko ibyuma byangiritse byangirika cyane.

Urugero rwa B: Amazi yamenetse kuri mudasobwa igendanwa¶

Niba ikawa, amazi, cyangwa soda isuka kuri mudasobwa igendanwa y'akazi mugihe ugenda:

1. ** Fata buto yamashanyarazi kumasegonda 5 kugirango uhatire amashanyarazi ako kanya ** (ntugapfushe ubusa amasegonda 30 yo gufunga porogaramu cyangwa gusunika kode mugihe amazi arimo kugenda kuri gari ya moshi ya 12V) hanyuma ugahita ucomeka amashanyarazi ya USB-C / MagSafe ako kanya.
2. ** Hindura mudasobwa igendanwa muri "Ihema / A-Frame" hejuru-hasi ya V-shusho kuri salle ya hoteri: ** Fungura mudasobwa igendanwa kuri dogere 75 hanyuma uyishyire ** hejuru (clavier ireba neza neza yerekeza kumeza) ** nkihema kugirango uburemere bukurura amazi muma clavier aho kubireka bikinjira mumyanya ya clavier kuri platifomu na bateri.
3. ** Ntukigere ukoresha hoteri yumusatsi wa hoteri kuri clavier: ** Imashini yumusatsi yashonga plastike ya clacap ya scissor-clips mumasegonda 5 hanyuma uhumure amazi yimbitse munsi ya chip ya Ball Grid Array (BGA). Kurekera aho guhindukira imbere yicyumba cya hoteri icyuma gikonjesha byibura amasaha ** 24 kugeza 48, hanyuma ubaze IT kugirango usimbure inguzanyo.

Scenario C: Ikibaho cya mudasobwa igendanwa yarapfuye rwose, kandi ufite dosiye zaho zitabitswe kuri SSD¶

Niba mudasobwa igendanwa idashobora gukora na gato (LEDs zeru, umufana wa zeru azunguruka ndetse na charger ya USB-C itandukanye)

• ** Reba niba SSD yawe ikurwaho va kugurisha: **
  • ** Apple Silicon / T2 MacBooks hamwe na mudasobwa zigendanwa za Windows-ultra-thin yagurishijwe: ** Chip ububiko bwa flash ya NVMe bugurishwa ku kibaho cya logique kandi bugahambira ibyuma-byanditse kuri Secure Enclave. Ntibishobora ** kuvanwaho mu kigo cyo hanze; ugomba kwishingikiriza kubicu byawe byabitswe (cyangwa ubuhanga bwihariye bwo kurwego rwo kugurisha mikoro yemewe na IT).
  • ** Mudasobwa zigendanwa za Windows / Linux (Lenovo ThinkPad, Dell Latitude / Precision, HP EliteBook, Framework): ** Mudasobwa zigendanwa nyinshi zikoresha ubucuruzi zikoresha ibintu bisanzwe bivanwaho ** M.2 2280 NVMe SSD ** ifitwe numuyoboro umwe wa Phillips munsi yigitwikiro cyo hepfo.
  • ** Ibyihutirwa M.2 Gukuramo USB-C (Hamwe nuruhushya rwa IT): ** Baza ubufasha bwawe bwa IT kubikoresho byawe ** 48-Imibare 48 ya BitLocker Recovery Key ** (ihita ihindurwamo imbere yikigo cya Microsoft Intune / Entra ID ID). Gura ** $ 15 kugeza $ 25 USB-C kuri M.2 NVMe hanze ya SSD yikigo cya ** ku iduka iryo ari ryo ryose rya elegitoroniki ryaho, ohereza inkoni ya M.2 mu kigo cya USB-C, uyishyire muri mudasobwa igendanwa, andika urufunguzo rwa BitLocker rufite imibare 48 iyo ubisabwe, hanyuma wandukure dosiye yawe uhite uva muri disiki mu minota 5.

Igice cya 4: Zeru-isaha yo gukira: gusubira kukazi mumasaha 2 nta mudasobwa igendanwa¶

Mugihe mudasobwa igendanwa yawe yagiye cyangwa ivunitse, ntukore ** ntugure ** kugura mudasobwa igendanwa ihendutse kububiko bunini bwibisanduku hanyuma utangire gukuramo kodegisi yisoko ryibanze cyangwa urupapuro rwabakiriya rworoshye kuri disiki idacunzwe keretse ishami ryanyu rya IT rigutegetse neza ko wiyandikisha muri MDM. Ahubwo, koresha ** Zeru-Kwizera Ephemeral Igicu Umwanya Umwanya ** usiga zeru zeru zamakuru kubikoresho byatijwe.

Ibyuma bikurikirana hamwe na software ikomeza mugihe wimuwe¶

Impamvu utagomba na rimwe kwinjira muri konte yibigo kuri hoteri rusange yubucuruzi-hagati ya PC cyangwa cafe ya enterineti¶

Urugendo "Zeru-Hasi" Urutonde rwa kure rwo gutegura imirimo¶

Mbere yurugendo rutaha-rwakazi-kazi, uzuza izi ntambwe 6 kugirango mudasobwa igendanwa yatakaye cyangwa ivunitse bifata iminota itarenze 15 kugirango ukire:

• ** Kugenzura Encryption Yuzuye-Disk irakora kandi irashigikiwe: ** Emeza ** FileVault ** (macOS) cyangwa ** BitLocker ** (Windows) ifunguye, hanyuma ushyire laptop yawe kuri ** Hibernate / Power Off ** (kuruta gusinzira S0 ibitotsi) igihe cyose uyishyize mumufuka winyuma.
• ** Hagarika "Gufungura na Apple Watch" cyangwa Bluetooth Proximity Gufungura ** mugihe ukora muri cafe rusange, gariyamoshi, cyangwa ibibuga byindege.
• ** Witwaze ibyuma bya kabiri bya FIDO2 urufunguzo rwumutekano (nka YubiKey 5C Nano / NFC) kurufunguzo rwawe rwumubiri ** (utandukanije numufuka wawe wa mudasobwa igendanwa), kandi ugumane porogaramu yibanze ya MFA yemewe kuri terefone yawe kugirango gutakaza laptop yawe ntizigera igufunga muri 2FA.
• ** Shyira amashami yose ya kode yaho (git push --all) no guhuza desktop ya desktop / Inyandiko kububiko bwibicu ** kurangiza buri munsi wakazi kugirango zeru zidasimburwa zibaho gusa kuri SSD yumubiri.
• ** Gapakira clavier ya Bluetooth yoroheje hamwe na USB-C-kuri-HDMI itanga amashanyarazi ** mumufuka wawe wikorera kugirango terefone yawe cyangwa tableti yawe ihite itwara monitor ya hoteri niba laptop yawe yananiwe.
• ** Bika isosiyete yawe IT Umutekano / SOC 24/7 nimero ya terefone yijwi ryihutirwa na numero ya mudasobwa igendanwa ya ** mugitabo cya interineti kuri terefone yawe.

Ibibazo bikunze kubazwa¶

Nzirukanwa niba mudasobwa yanjye igendanwa yibwe mugihe nkora mu iduka rya kawa cyangwa ngenda?¶

Mu mashyirahamwe hafi ya yose yabigize umwuga, kwiba mudasobwa igendanwa mu gihe cy’icyaha bifatwa nk’ikibazo gisanzwe cy’umutekano n’ubwishingizi aho kuba icyaha cy’umuriro, mu gihe ibintu bibiri ari ukuri: icya mbere, wubahirije politiki y’ibanze y’umutekano (mudasobwa igendanwa yari ifite ibanga rya BitLocker cyangwa FileVault ya disiki ya enterineti kandi ifite ijambo ryibanga / ecran ya enterineti), naho icya kabiri, wabimenyesheje ubujura mu itsinda ryanyu rishinzwe umutekano hamwe n’abapolisi baho ukimara kubimenya. Abakozi bahura gusa n’igihano iyo bagerageje gupfukirana mudasobwa igendanwa iminsi myinshi kubera ipfunwe cyangwa bagasiga mudasobwa igendanwa idafite ibanga yinjiye kandi ititabiriwe mu ruhame.

Niba umujura yibye mudasobwa yanjye ya MacBook cyangwa Windows mugihe ecran ifunze, barashobora gusoma dosiye yikigo cyanjye bakuramo disiki ikomeye?¶

Oya, yatanzwe FileVault (kuri macOS) cyangwa BitLocker (kuri Windows) yarafunguwe. Kuri Apple Silicon igezweho na T2 MacBooks, chip flash ya SSD igurishwa ku kibaho kandi ikabikwa hamwe nurufunguzo rwa 256-bit AES ihujwe na progaramu ya Secure Enclave itunganya ibyuma bikabije. Kuri mudasobwa zigendanwa za Windows hamwe na BitLocker hamwe na chip ya TPM 2.0, disiki irabitswe neza kuruhuka; niba umujura arambuye M.2 SSD akayishyira muyindi mudasobwa, iyo disiki igaragara nkurusaku rudasomeka keretse bafite urufunguzo rwo kugarura imibare 48 ya BitLocker. Ibidasanzwe gusa ni mudasobwa igendanwa ishaje aho umujura akora ibyuma bigezweho bya TPM-guswera cyangwa RAM ikonje-boot yibikoresho kuri mashini yari isinziriye gusa aho gukoreshwa cyangwa gusaba PIN mbere yo gutangira.

Nakagombye gukoresha Apple AirTag yihishe cyangwa GPS ikurikirana mumifuka yanjye ya laptop kugirango njya guhangana numujura nsubize laptop yakazi yanjye?¶

Kugumisha AirTag, Tile, cyangwa SmartTag byihishe imbere yumurongo wibikapu bya mudasobwa igendanwa nuburyo bwiza cyane bwo kureba niba igikapu cyawe cyarasigaye inyuma mumatara ya rideshare cyangwa mucyumba cyindege cyindege cyibwe, kandi ugomba gusangira aho uhurira nabapolisi baho. Ariko, ntugomba na rimwe kujya kuri adresse yawe bwite cyangwa guhangana numujura wa mudasobwa igendanwa. Ibyuma bya elegitoroniki byibwe bikunze kuzitirwa mugihe cyisaha imwe kugirango habeho impeta zubujura, kandi kugerageza guhangana wenyine byonyine bishobora guteza urugomo rukabije.

Nakora iki niba umujura anyoherereje ubutumwa bugufi cyangwa ubutumwa bugufi bwanditse ngo "Inkunga ya Apple" cyangwa "Corporate IT" ansaba kugenzura passcode yanjye cyangwa gukuramo laptop muri Find My?¶

Ntiwirengagize kandi ubahagarike ako kanya. Iyo MacBook cyangwa iPhone yibwe bimaze gufungwa muri Lost Mode (Activation Lock), ibyuma ni amatafari adafite agaciro kumujura keretse niba bashobora kugushuka ngo wandike ijambo ryibanga rya Apple cyangwa passcode yimibare 6 mumurongo wibihimbano, cyangwa bikagutera ubwoba bwo gukanda "Kuraho Igikoresho" muri porogaramu yawe Shakisha. Abajura basanzwe basoma nimero ya terefone yihutirwa cyangwa aderesi imeri werekanye kuri ecran ya Lost Mode hanyuma bakohereza inyandiko zisa nizisanzwe zivuga ngo "MacBook yawe iri ahantu hizewe numutekano wa Apple, injira hano kugirango urebe aho uri" cyangwa no kohereza iterabwoba bavuga ko bazasohora dosiye yawe keretse ukuyemo ibikorwa bya Lock. Wibuke ko badashobora gusoma dosiye imwe kuri Mac ya FileVault ifunze, kandi yaba Apple cyangwa ishami ryanyu rya IT ntibazigera bagusaba ijambo ryibanga cyangwa ngo bagusabe gukuramo igikoresho cyibwe muri Find My.

Inkomoko yagenzuwe¶

• Ikigo gishinzwe umutekano n’ibikorwa Remezo (CISA) n’ikigo cy’igihugu gishinzwe ubuziranenge n’ikoranabuhanga (NIST, Amerika): * NIST SP 800-46 Igitabo cyifashishwa mu bucuruzi bwa Televiziyo, kugera kure, no kuzana ibikoresho byawe bwite (BYOD) Umutekano; NIST SP 800-88 Isuku ryitangazamakuru *.
• Ikigo cyigihugu gishinzwe umutekano wa cyber (NCSC, Ubwongereza): * Amabwiriza yumutekano wibikoresho: Gufunga kure, Encryption ya Disiki Yuzuye (BitLocker / FileVault), hamwe no gukemura ibibazo byatakaye cyangwa byangiritse mumahanga *.
• Fondasiyo ya Electronic Frontier Foundation (EFF, Reta zunzubumwe za Amerika) hamwe n’ishirahamwe ryigenga ry’abanyagihugu bo muri Kanada (CCLA, Kanada): * Ibanga rya Digital ku mipaka y’Amerika n’Imipaka Mpuzamahanga: Kurinda ibikoresho by’akazi, Urunigi rw’imfungwa, hamwe n’inyemezabwishyu (Ifishi ya CBP 6051D) *.
• Umutekano wa Apple Platform na Microsoft Wige (Reta zunzubumwe za Amerika): * Apple Silicon Umutekano Enclave FileVault Architecture, MDM Yatakaye Mode Obliteration, hamwe na Microsoft Intune BitLocker Urufunguzo Ruzunguruka & Token Revocation *.
• Ikigo cy’ubumwe bw’ibihugu by’i Burayi gishinzwe umutekano wa interineti (ENISA, Umuryango w’ubumwe bw’ibihugu by’Uburayi): * Gukemura ibibazo by’itumanaho rya televiziyo hamwe na GDPR Amasaha 72 yo Kurenga ku mutungo watakaye *.

Kuyobora¶

• Umutekano wihutirwa wumurimo wumutekano hamwe namakuru yihariye
• Gukorera kure muri hoteri neza
• Kwimura no kwimurwa akazi ka kure
• Laptop yibwe cyangwa terefone yahanagura no gufunga
• Ingendo zihutirwa mumahanga
• Inomero zihutirwa