From the AEGIS e-Journal, Volume 3 Number 10, October 2000
SecureClean AccessData’s SecureClean is a program that preeminently eliminates unwanted PC data. AccessData is a manufacturer of several high-quality programs related to data and password recovery, so it comes as no surprise that it came out with a product that can erase data so well that even its own products cannot recover it! (as this reviewer has had the opportunity to discover). AccessData has produced a very fine product that does what it says it does — no more, no less. It eliminates data in all the locations PCs store files, including RAM stack, file stack, free space, swap files, file names, spool files, and temporary files. It works on any PC magnetic media (hard drives, diskettes, and Zip drives), but not read-only CDs. It allows the user to specify either manual or automated cleaning options. AccessData’s SecureClean should be an integral part of any records storage and disposal policy. In this reviewer’s less-than-humble opinion, if you work with secure and sensitive data, either in the professional setting or at home, SecureClean is an inexpensive tool to keep private what you want private. Information on SecureClean can be found at http://www.accessdata.com/. ÆGIS, October 2000 12 Similar software is available as part of System Mechanic at http://www.iolo.com, and as Eraser at http://www.tolvanen.com/eraser/. DataDot Identifier In an attempt to deter theft, many pieces of property have serial numbers or other visible property identification numbers. The problem with many of these is that they are easily removable. The idea of a microdot concealed somewhere on the piece of property, in a location known only to the owner, is appealing. The device produced by DataBasix Technologies (http://www.leadcommander.com/index.html) called Asset Commander’s Data Dot Identifier is a good idea, and the software for logging and cataloging offered with the product is good. Ample warning stickers are included, though I would opt for even more stickers as warnings to potential thieves. This is a good product, but I think it could be better. The concept — concealing a small dot of identifying data (a microdot) on a piece of property — is good. The shortcomings are: 1. The microdots come in a solution/suspension of adhesive and the application brush is stiff and difficult to use. It took several different people who were invited to use the product 10 or more tries to pick up a microdot on the brush and then apply the dot to the piece of properly. 2. The dots are imprinted with a code that is legible only with the assistance of a (really cool) 40X hand-held microscope (which is included). This is good. The problem, however, is that, when applying microdot, it is hard to tell if the numbers are right side up or upside down. 3. The information on the microdot is not easily read on dark backgrounds. Another potential use for this product is in document copy control. Many of us in the business security field have had documents (reports, professional opinions, etc.) copied, altered, and misused. A microdot placed in a strategic spot on any document could be used to verify the authenticity of the document and to avoid unauthorized use of documents. 7. Free-Subscription/Unsubscription/Copyright Information •• ÆGIS e-journal is supported and maintained by voluntary efforts. This publication is owned, published, and copyright © 2000 by The LUBRINCO Group Ltd, Inc. and Financial Examinations and Evaluations, Inc. It is edited jointly by Richard Isaacs (RBIsaacs@lubrinco.com) and L. Burke Files (LBFiles@lubrinco.com). ÆGIS, October 2000 13 The LUBRINCO Group provides services in three high-threat areas, too specialized to be dealt-with in-house, that can adversely affect domestic and international bottom lines. • Protection of trade secrets and intellectual assets. o Anti-economic espionage. o OPSEC: The identification and protection of information that would give your competitors and adversaries an advantage. • International financial investigations and due diligence consulting. o Location and recovery of missing and hidden assets. o Establishing business relationships and strategic partnerships in Central and Eastern Europe, the offshore financial centers, Beijing and Shanghai, Central Asia, and Latin America and the Caribbean. o Anti-money laundering and financial fraud requirements under the International Money Laundering Abatement and Anti-Terrorist Financing Act of 2001 and the EU Revised Money Laundering Directive of 2001. • Protection of management, staff, and families. o In the high-threat environments of Latin America, Africa, the Mid- East, and Southeast Asia. o When traveling and living overseas. o When transporting items of substantial value. LUBRINCO identifies and quantifies threats and vulnerabilities, and their associated risk, then manages the vulnerabilities so you can transfer or live with the residual risk. We prevent disastrous financial loss to your company, and physical harm to you, your family, and your staff. For information on The LUBRINCO Group and its services, or for the archive of all past issues of ÆGIS e-journal in PDF format, please go to http://www.lubrinco.com/. To sign up for a complimentary subscription to ÆGIS e-journal or the ÆGIS e- journal PDF notification list, go to http://lb.bcentral.com/ex/manage/subscriberprefs?customerid=7768 or send an email to ejournal@lubrinco.com. To subscribe to our AvantGo channel, go to http://avantgo.com/channels/_add_channel.pl?cha_id=1773 ÆGIS, October 2000 14 To be removed from the subscription list, follow the instructions on the mailing you received, or send an e-mail to ejournal@lubrinco.com. If you know of anyone else who should be receiving ÆGIS e-journal, please send their e-mail address to ejournal@lubrinco.com. If there is a topic that you would like to know more about, send it to ejournal@lubrinco.com and the editors will consider it as the topic for an article in an upcoming issue. If you would like to submit an article for publication in ÆGIS e-journal, send it as an attachment to an e-mail to ejournal@lubrinco.com. Submission of an article certifies that (a) all information in the article is in the public record, or (b) that you are authorized to release any personal or corporate proprietary information contained in the article, and (c) that none of the article has previously been copyrighted. The submission of materials for publication in ÆGIS e-journal constitutes a license to The LUBRINCO Group Ltd, Inc., and/or Financial Examinations and Evaluations, Inc, their assigns, associates, or affiliates, to abridge and/or edit said submission, and to copyright and publish/republish any submitted materials in whatever written and/or electronic form they may choose. If you would like to go beyond normal fair-use in reproducing articles from this issue of ÆGIS e-journal, you may do so freely as long as appropriate source, copyright, accreditation, and link to the LUBRINCO website is included. This should be in the form
Article Title, from the October 2000 ÆGIS e-journal (© 2000 LUBRINCO & FEE), to be found at http://www.lubrinco.com/. ÆGIS e-journal is a forum for the exchange of information, ideas, operating styles, theories, and related topics for corporate managers who make decisions about threats typically outside the expertise available in-house, yet which have the potential to affect their company’s domestic and international bottom lines. Nothing appearing in ÆGIS e-journal should be construed as legal advice. The information provided is “general information,” not “specific advice.” The solution to any problem is highly dependent upon the precise facts involved. Thus, before making any reliance upon anything said here, you should consult with an appropriately skilled professional. Opinions expressed by contributors are not necessarily endorsed by the publisher, and may be presented to encourage a dialogue among subscribers. The publisher ÆGIS, October 2000 15 and any re-publisher cannot be held responsible for any loss incurred as a result of the application of any information published in ÆGIS e-journal. Please be safe, and be smart.