Throwaway Travel Laptops

Andrew Froehlich, Network Engineer & IT Consultant | 12/17/2012 | 32 comments

Andrew Froehlich
Corporate and government espionage isn't just for the movies. It's very real and it is growing, but there's a James Bond-like solution you can make use of to stem the tide.

When your employees travel overseas with company laptops -- and company secrets -- they are particularly vulnerable to having their laptops broken into. Data gets stolen and spyware is installed so additional information can be lifted once that laptop goes back home and connects to the company network. Security tactics like hard disk encryption go a long way, but it's often not enough. That's why many business travelers are now getting into the habit of buying cheap, throwaway laptops for the sole purpose of international travel.

As businesses expand their business internationally, it should come as no surprise that there will be competitors and even governments that would love to get access to company secrets. While it's possible to remotely hack into networks from abroad, many are finding that it's easier to target individuals (and their laptops) as they travel overseas.

Known as "bag-ops," thieves will attempt to get access to your company laptop while it's in a hotel room, stored away on busses/trains/planes, or just about anywhere else you leave it unattended for a period of time. Once in their possession, the thieves use any number of techniques to access the operating system and locally stored files. And even if you happen to have hard disk encryption, there are methods and ways around even this, including the "evil maid" attack, or installing a hardware-based keylogger to retrieve the encryption passwords.

And once a laptop is successfully broken into, the next step for most hackers is to install backdoor software. This software can later be remotely activated when you are back within your corporate network. This gives the hackers an easy backdoor to retrieve all kinds of new data. Sure, your internal security systems may catch and quarantine the infected laptop in time -- but then again, they might not.

There are some organizations out there that simply can't and won't take any chances with corporate espionage. Throwaway loaner laptops for international travelers limit exposure. The laptops are generally cheap units with decent security and the absolute minimum of information on them. The traveler uses the laptop for the duration of the trip and then returns it to the IT department on their return -- never to touch the corporate network.

This eliminates any chance that malicious software or hardware gets brought back into your network and ensures that secrets are kept safe. When you're traveling internationally on business trips, you should always just assume that your hardware and software has been compromised. It may seem like overkill, but better safe than sorry.

View Comments: Newest First | Oldest First | Threaded View
Page 1 / 4   >   >>
singlemud   Throwaway Travel Laptops   12/28/2012 9:44:06 AM
Re: throwaway travel laptops
It is a very interesting post. Throwaway laptop is by all means the best solution.
JPoe   Throwaway Travel Laptops   12/23/2012 7:35:12 PM
Re: Throwaway Travel Laptops
@angelfuego,

Yeah, me too. I _get_ the need and stuff, but I'm just not ready to part w/ my hardware.
JPoe   Throwaway Travel Laptops   12/23/2012 7:34:08 PM
Re: It's horrifying
@andrew,

I can't imaging traveling w/o my iPhone and/or iPad, and that's in addition to my laptop. I think we are going to have to find solutions that allow for keeping access to all the usual devices.
JPoe   Throwaway Travel Laptops   12/23/2012 7:34:07 PM
Re: It's horrifying
@andrew,

I can't imaging traveling w/o my iPhone and/or iPad, and that's in addition to my laptop. I think we are going to have to find solutions that allow for keeping access to all the usual devices.
angelfuego   Throwaway Travel Laptops   12/22/2012 7:14:28 PM
Re: Throwaway Travel Laptops
Although we all have work to do, we don't necessarily have to do it while flying. It is convenient to do so, but not imperative. It is more of a luxury. It is risky to do, without the throwaway laptop. I guess one would have to evaluate is doing work on the computer worth the risk of security breach or worth investing in a throwaway laptop.
angelfuego   Throwaway Travel Laptops   12/22/2012 7:06:26 PM
Throwaway Travel Laptops
This article was very interesting. It made me consider something that I haven't done before. I am not ready to invest in throwaway laptops yet. I would just not use my laptop.
SaneIT   Throwaway Travel Laptops   12/20/2012 8:29:27 AM
Re: It can be a form of recycle
There are cheap and easy ways to wipe drives that would make it so time consuming to get even a tiny bit of data that it wouldn't be worth it.  I had the whole process automated, I would boot to an image on a CD or floppy depending on the device, do three passes on the drive writing random strings then put the clean image back on the drive.  I could start the jobs on a dozen or so laptops before I left for the day and they'd be finishing up in the morning and ready to go out the door again.  If you're that worried about your data the time it takes to wipe drives thoroughly isn't going to stop you from doing something like this.
DBK   Throwaway Travel Laptops   12/19/2012 1:35:48 PM
Re: It's horrifying
David - at the end of the day we still have to do business.  There are risks involved and we just need to do what we can to mitigate the risk.  And companies with the most to loose with establish rules of engagement and polices to support and physical security and intellectual property.  The underlying theme is that there are countries that support espionage and piracy as a legitimate for of business.  And when doing business there that needs to be factored into the business justification and overall cost of doing business.
David Wagner   Throwaway Travel Laptops   12/19/2012 11:41:49 AM
Re: It's horrifying
@DBK- I guess thats the problem. If it was a really reputable big company, I doubt it would be worth their time. If it was a smaller company in a country I've never been to before, I may not trust the company. There's a reputation gap for a relatively small business offering.
DBK   Throwaway Travel Laptops   12/19/2012 10:44:09 AM
Re: It's horrifying
David - And from necessity is birthed great ideas.  David Wagner, espionage plotted, wars waged, countries toppled, technical writer/editor and all around good guy.  All kidding aside, and I was kidding who do you suppose would start such a service offering?
Page 1 / 4   >   >>


The blogs and comments posted on EnterpriseEfficiency.com do not reflect the views of TechWeb, EnterpriseEfficiency.com, or its sponsors. EnterpriseEfficiency.com, TechWeb, and its sponsors do not assume responsibility for any comments, claims, or opinions made by authors and bloggers. They are no substitute for your own research and should not be relied upon for trading or any other purpose.

More Blogs from Andrew Froehlich
Andrew Froehlich   5/22/2013   2 comments
One of the major benefits often touted by cloud service providers is the self-service portal. This is commonly presented as an easy-to-use, web GUI front end that allows end-users the ...
Andrew Froehlich   5/15/2013   5 comments
If your organization is still using these rigid hardware refresh cycles, it's likely that you've been struggling to keep up with the latest in tech trends. To put it simply, business ...
Andrew Froehlich   5/14/2013   10 comments
Over the past few months, there have been a number of high-profile Twitter account hacks.
Andrew Froehlich   5/1/2013   5 comments
In the first quarter of this year, it was reported that the Internet experienced a 700 percent DDoS bandwidth increase. As DDoS attacks force more bandwidth onto a target, it means that ...
Andrew Froehlich   4/29/2013   40 comments
At the recent OpenStack Summit, there was a great deal of discussion about enterprise-class companies moving off big-name public clouds including Amazon Web Services (AWS) and RackSpace. ...
Latest Archived Broadcast
Data visualization can make complex data easier to grasp. Our expert guest will talk about the hows, whys, and whats of bringing the big picture to your enterprise.
May 28th 2pm EDT Tuesday
On-demand Video with Chat
NBA CIO Michael Gliedman will tell us why the NBA decided to create NBA.com/stats
6/18/2013 -   Please join us for the "IT Convergence Strategies: Why, When and How " to learn more about: • 5 truths about infrastructure convergence today that go beyond the hype • How to exploit the 4 phases of convergence maximum efficiency and agility • Key milestones to plan for on the convergence journey • Why integrated management is a critical component of convergence plans • The importance of an open, modular approach, such as Dell’s active infrastructure, to building a converged data center
E2 IT Migration Zones
IT Migration Zone - UK
Application Audits Simplify Migration
Hardware Refresh Cycles Are Outdated
Office 365 Finds Fans
IT Migration Zone - FR
Windows Blue attendu en juin
Comment profiter d’une nouvelle expérience User Virtualization
S’équiper ou non d’un logiciel anti-virus ?
IT Migration Zone - DE
Leap Motion zeigt Gestensteuerung für Windows 8
Microsofts Surface Pro kommt nach Deutschland
Like Us on Facebook
Twitter Feed
Enterprise Efficiency Twitter Feed
Dell IT Insights
Dell Market Response Twitter Feed
E2 Linked-in Group Ad
Site Moderators Wanted
Enterprise Efficiency is looking for engaged readers to moderate the message boards on this site. Engage in high-IQ conversations with IT industry leaders; earn kudos and perks. Interested? E-mail:
moderators@enterpriseefficiency.com
Dell's Efficiency Modeling Tool
The major problem facing the CIO is how to measure the effectiveness of the IT department. Learn how Dell’s Efficiency Modeling Tool gives the CIO two clear, powerful numbers: Efficiency Quotient and Impact Quotient. These numbers can be transforma¬tive not only to the department, but to the entire enterprise.

Read the full report
The State of Enterprise Efficiency in the Virtual Era: Virtualization – Smart Approaches to Maximize Gains
Virtualization is a presence in nearly all enterprise data centers. But not all companies are using it to its best effect. Learn the common characteristics of success, what barriers companies face, and how to get the most from your efforts.

Read the full report
Informed CIO: Dollars & Sense: Virtual Desktop Infrastructure
Cut through the VDI hype and get the full picture -- including ROI and the impact on your Data Center -- to make an informed decision about your virtual desktop infrastructure deployments.

Read the full report
SPONSORED BY DELL
BRIEFINGS
CASE STUDIES
EBOOKS
PUBLIC SECTOR RESOURCES
VIDEOS
WHITE PAPERS
A Video Case Study – Translational Genomics Research Institute
e2 Video
On the Case
TGen IT: Where We're Going Next

7|11|12   |   08:12   |   10 comments


Now that TGen has broken new ground in genomic research by using Dell's storage, cloud, and high-performance computing solutions, the company discusses what will come next for it and for personalized medicine.
On the Case
Better Care Through Better Communications

6|6|12   |   02:24   |   12 comments


The achievements of the TGen/Dell project could improve how all people receive healthcare, because they are creating ways to improve end-to-end communication of medical data.
On the Case
TGen IT: Where We Are Now

5|15|12   |   06:58   |   5 comments


TGen is breaking new ground in genomic research by using Dell's storage, cloud, and high-performance computing solutions.
On the Case
TGen IT: Where We Were

4|27|12   |   06:45   |   10 comments


The Translational Genomics Research Institute wanted to save lives, but its efforts were hobbled by immense computing challenges related to collecting, processing, sharing, and storing enormous amounts of data.
On the Case
1,200% Faster

4|18|12   |   02:27   |   12 comments


Through their partnership, Dell and TGen have increased the speed of TGen’s medical research by 1,200 percent.
On the Case
IT May Improve Children's Chances of Survival

4|17|12   |   02:12   |   8 comments


IT is helping medical researchers reach breakthroughs in a way and pace never seen before.
On the Case
Medical Advances in the Cloud

4|10|12   |   1:25   |   5 comments


TGen and Dell are pushing the boundaries of computing, and harnessing the power of the cloud to improve healthcare.
On the Case
TGen: Living the Mission

4|9|12   |   2:25   |   3 comments


TGen's CIO puts the organizational mission at the heart of everything the IT staff does.
On the Case
TGen Speeding Up Biomedical Research to Save More Lives

4|5|12   |   1:59   |   8 comments


The Translational Genomics Research Institute is revamping its computing to improve speed, storage, and collaboration – and, most importantly, to save lives.
On the Case
Computing Power Helping to Save Children's Lives

3|28|12   |   2:13   |   3 comments


The Translational Genomics Institute’s partnership with Dell is enabling them to treat kids with neuroblastoma more quickly and save more lives.
Tom Nolle
VMWare & the Bicameral Model of MDM

5|22|13   |   2:14   |   No comments


VMware has a new solution to the MDM problem, two virtual phones inside a real phone, at least for Android phones. Currently limited to two models, the idea could expand and provide a way of letting companies harmonize their need to manage corporate use of phones while preserving BYOD.
Ivan Schneider
Clash of the Tableau 8: Release the Kraken!

5|17|13   |   2:42   |   No comments


Tableau 8 has some great data visualization and presentation capabilities, but it's best paired with a strong data analysis framework.
Tom Nolle
Using Virtualization – for Real!

5|13|13   |   2:10   |   2 comments


There's a lot of hype about virtualization of networks, NaaS, and SDN, but there's a couple of proven applications that enterprises could adopt right now and potentially save money and improve operations.
Tom Nolle
Is UC Becoming Oxymoronic or Just Moronic?

5|9|13   |   2:12   |   No comments


Skype/Outlook UC integration means we're going to have competition and fragmentation of UC client architectures, but is that bad? Modern devices can support IM, email, voice, and video clients, so maybe it's the back end of UC we need to be worried about.
E2 Editors
Windows vs. Integrated Circuit CPUs

4|17|13   |   4:45   |   5 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
Radio vs. Public Internet Access

4|17|13   |   4:34   |   14 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
Mainframes vs. Servers

4|17|13   |   4:34   |   16 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
TCP/IP vs. Printing Press

4|17|13   |   3:07   |   5 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
BYOD vs. E-Commerce

4|12|13   |   3:12   |   11 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
Telecommuting vs. Outsourcing

4|12|13   |   4:19   |   7 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
Personal Computer vs. Mobile Devices

4|12|13   |   4:28   |   20 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
E2 Editors
Smartphones vs. Productivity Software

4|12|13   |   3:09   |   13 comments


The editors make their predictions about what will win the next match-up in the E2 Tournament of IT Revolutionaries.
Tom Nolle
There's More to Mobility Than the Mobile Worker

4|9|13   |   2:03   |   5 comments


Workers are now used to portable device support throughout their everyday lives. We should be looking at the policy of providing fixed-desk devices to support stationary workers. Could portable support be smarter?
Ivan Schneider
From Kim Jong-Un's Trackball to Nuance Voice Ads

4|5|13   |   3:21   |   9 comments


Input devices run the gamut, from the humble Missile Command-style trackball to advanced speech recognition. Unfortunately, these input devices can be used for evil as well as good. Case in point: mobile ads that want you to talk to them.
Tom Nolle
Data/Storage Wish List for Enterprises

4|3|13   |   2:19   |   1 comment


Enterprises want three things in storage systems: First is some speech-recognition way of capturing videoconference data for indexing; second is semantic/AI analysis of emails and IM for content indexing; third is a better system for managing hierarchical layers of storage.