A stolen laptop puts your cloud at risk
A stolen laptop puts your cloud at risk

It is possible to steal all the data you have saved on the Internet from a stolen hard drive. To do this, hackers would need to steal the disk, the disk image, Windows credentials, Wi-Fi information, registry and browser history, and then use that to access cloud data.

That may sound like a lot of steps. But once a thief physically has possession of your PC, the only item on that list that's potentially hard to crack is your Windows credentials (your user name and password) -- and even that can be quite easy to access on older computers.

On pre-Windows 7 machines, system passwords can be guessed by "brute force" applications that automatically test every combination. That's because Microsoft did hackers a favor by limiting the number of possibilities.

Older Windows versions store your password by breaking it up smaller chunks. Brute force programs can go to work on multiple chunks at once, cracking even very long passwords fairly quickly.

"If you are using XP, our ability to recover your password is about 100%. That's just how it is," Elie Bursztein, a researcher in the Stanford University Security Lab, said at the Black Hat cybersecurity conference last week.


Last updated August 09 2011: 6:59 PM ET
Join the Conversation
How they hack you

Cybercriminals have a big tool chest of attacks they can use to steal information. Here are some common methods.

Market indexes are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer Morningstar: © 2014 Morningstar, Inc. All Rights Reserved. Disclaimer The Dow Jones IndexesSM are proprietary to and distributed by Dow Jones & Company, Inc. and have been licensed for use. All content of the Dow Jones IndexesSM © 2014 is proprietary to Dow Jones & Company, Inc. Chicago Mercantile Association. The market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved. FactSet Research Systems Inc. 2014. All rights reserved. Most stock quote data provided by BATS.