XPost: alt.comp.os.windows-10   
   From: this@ddress.is.invalid   
      
   Brian Gregory  wrote:   
   > On 22/01/2026 15:59, Maria Sophia wrote:   
   [...]   
   > > My model is simple and well thought out to be optimized for convenience.   
   > > 1. Encrypt the small amount of data that matters.   
   > > 2. Keep it in Veracrypt containers or a password manager.   
   > > 3. Do not rely on BIOS passwords or biometrics for data at rest.   
   > > 4. Optimize for convenience during daily use.   
   >   
   > My BIOS password is just another small obstacle in the path of a bad actor.   
      
     A *BIOS* password indeed a - IMO not so - 'small' obstacle, but, as I   
   mentioned, it's the *boot* password which adds essential protection.   
      
     So the BIOS password prevents booting from for example a Linux USB   
   stick (and accessing the disk that way) and the boot password prevents   
   booting Windows. After that, sign-in protection prevents signing in and   
   encryption (full or partial) prevents access to essential private data   
   (in case the 'drive' is removed from the system).   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)