A stolen laptop puts your cloud at risk
A stolen laptop puts your cloud at risk

It is possible to steal all the data you have saved on the Internet from a stolen hard drive. To do this, hackers would need to steal the disk, the disk image, Windows credentials, Wi-Fi information, registry and browser history, and then use that to access cloud data.

That may sound like a lot of steps. But once a thief physically has possession of your PC, the only item on that list that's potentially hard to crack is your Windows credentials (your user name and password) -- and even that can be quite easy to access on older computers.

On pre-Windows 7 machines, system passwords can be guessed by "brute force" applications that automatically test every combination. That's because Microsoft did hackers a favor by limiting the number of possibilities.

Older Windows versions store your password by breaking it up smaller chunks. Brute force programs can go to work on multiple chunks at once, cracking even very long passwords fairly quickly.

"If you are using XP, our ability to recover your password is about 100%. That's just how it is," Elie Bursztein, a researcher in the Stanford University Security Lab, said at the Black Hat cybersecurity conference last week.


Last updated August 09 2011: 6:59 PM ET
Join the Conversation
How they hack you

Cybercriminals have a big tool chest of attacks they can use to steal information. Here are some common methods.

Most stock quote data provided by BATS. Market indices are shown in real time, except for the DJIA, which is delayed by two minutes. All times are ET. Disclaimer.

Morningstar: © 2014 Morningstar, Inc. All Rights Reserved.

Factset: FactSet Research Systems Inc. 2014. All rights reserved.

Chicago Mercantile Association: Certain market data is the property of Chicago Mercantile Exchange Inc. and its licensors. All rights reserved.

Dow Jones: The Dow Jones branded indices are proprietary to and are calculated, distributed and marketed by DJI Opco, a subsidiary of S&P Dow Jones Indices LLC and have been licensed for use to S&P Opco, LLC and CNN. Standard & Poor's and S&P are registered trademarks of Standard & Poor’s Financial Services LLC and Dow Jones is a registered trademark of Dow Jones Trademark Holdings LLC. All content of the Dow Jones branded indices © S&P Dow Jones Indices LLC 2014 and/or its affiliates.