[CrashDavis]

So my notebook is behind a password, etc. and I suppose I could turn on the firmware password option and/or file vault to keep somebody from pulling the drive out and getting at my files.

BUT, couldn't somebody just plug in my Time Machine backup drive and get all my files?

What to do? Can an encrypted image file be used as the Time Machine backup?

Thanks for any advice!

[TETENAL]

If you turned on FileVault then the backup of that user would be encrypted as well. The downside is that Time Machine backs up FileVault accounts only when logged out and one can not restore individual files.

I would say the best way to protect against this is to make sure your backup drive is not stolen. For sensitive data create an encrypted sparse bundle image (more Time Machine-friendly than the old sparse image).

[ghporter]

The first rule of computer security is that if the bad guy can touch your computer you're compromised anyway-PHYSICAL security is paramount. So who would you be concerned about seeing what's in your backups? If this is at work it's a different issue from the backup drive being at home.

[mduell]

Keep your important files inside an encrypted disk image. It will eat up a lot of space on your Time Machine (changing one bit will result in the entire disk image being copied again), but it works.

[besson3c]

I agree with what ghporter said. If you aren't backing up to a drive in your LAN however, the security of the data transfer is also something you should think about.

[TETENAL]

Originally Posted by mduell 

It will eat up a lot of space on your Time Machine (changing one bit will result in the entire disk image being copied again), but it works.

Use the sparse bundle image type. Those are segmented into 8 MB bands, so they are more Time Machine-friendly.

[CrashDavis]

Thanks for the advice guys. The sparse bundle image sounds like a good idea.

ghporter, I'm probably just being a little paranoid. I'm talking about a home backup. In case of some bizarre circumstance that leads to the theft of my drive, I'd like to make it a little more difficult for someone to access my financial data (and other personal records) than simply plugging in the drive.

I'm thinking more about this now because I recently switched to a notebook after years of only using a desktop. I was never concerned that someone would do a grab and dash on that, and I did not backup to an external drive.

Thanks for the feedback!

[ginoledesma]

Some external enclosures have a security slot which you can route a security cable through. If yours has such an option, that poses a minor deterrent already.

My cousin was victim to such a theft, sadly. PowerBook and 2 external hard drives were taken in one blow. What she does now is have a separate backup drive which she only uses when she's using her computer physically, and then secures it when she's away.

In my case, I have a NAS I back up to (not using Time Machine, though), which joins the network wirelessly. It's somewhat of a compromise: data sniffing vs physical loss, but at least they can't find the unit by simply tracing a network or USB cable.

[timmerk]

Use this:

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux

It will encrypt your whole Time Machine disk and is transparent to the OS.

[tcns]

Originally Posted by timmerk 

Use this:

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux

It will encrypt your whole Time Machine disk and is transparent to the OS.

I can´t make Time Machine "see" the TrueCrypt encrypted drive.

Is there a workaround?

TIA.

[timmerk]

Originally Posted by tcns 

I can´t make Time Machine "see" the TrueCrypt encrypted drive.

Is there a workaround?

TIA.

Try running this line in Terminal:

defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1

Yes, I know it says Network Volumes, but hopefully it will work.

[timmerk]

Also, if that doesn't work, I read this tip:

* if the volume that you wish to use as a destination for Time
Machine is in a format that's unsupported by the application
* then create a disk image on the destination volume
* disk image formatted to suit Time Machine
* mount the image
* back up to the image.

You could then make a nice Applescript or something to mount it automatically.

[JKT]

You can put disk images in your System Preferences>Accounts>Login Items list to have them mount when you login.