[Help] Protecting my Windows PC at a BYOC LAN Party

[Mark7805]

Hey guys,
I'm trying to plan Windows and networking security on my machine. Attending my first BYOC LAN in ages, lots of attendants to worry about. Super paranoid. Any tips that can fast track my thinking is greatly appreciated

Ideally I want to freely use my PC while on LAN but I'm worried about all the LAN traffic, potential physical threats, and what I can't control, and write off as risk acceptance. There will be security guards during down time.

So far I have the following:
1) Disable all self-hosted applications on machine
2) Windows Firewall Public option and force file/printer sharing off
3) Potentially setup PC as a deep-freeze (Not sure if I like this idea convenience vs. security wise)
4) Software-based Anti-theft (obviously not fool proof in this day and age, but you never know)
5) Disable USB slots via motherboard and regedit. (Look into Applocker as well - I know nothing about it at the moment)
6) Considering Kensington locking mechanism

Thanks

 

[Shihab]

To safeguard against 90% of potential threats, simply don't leave your device unattended. :|

Looking at the steps you've already undertaken, it seems to me it would've been easier to just setup a throw-away, Windows installation with only the games you're planning to play, nothing else attached. Then nuke it when you get back home. Still extreme tho...

That said, is your party adjacent to a Defcon conference or something?

 

[Mark7805]

To safeguard against 90% of potential threats, simply don't leave your device unattended. :|

Looking at the steps you've already undertaken, it seems to me it would've been easier to just setup a throw-away, Windows installation with only the games you're planning to play, nothing else attached. Then nuke it when you get back home. Still extreme tho...

That said, is your party adjacent to a Defcon conference or something?

Haha not Defcon-adjacent, but the PC will be left unattended at times is the main problem. I was considering using a single drive setup as well. Ie. clonezilla'ing the current main drive, then restoring when I get home.

 

[Bill_Bright]

Any tips that can fast track my thinking is greatly appreciated

Okay. My advice, don't go. But if you must, do NOT take your primary computer. Take a secondary computer, one build for this purpose that does NOT have any personal or sensitive information on it.

And when you get it back home, assume it has been compromised. Even if you personally know everyone who will be there, you must not assume they have been as diligent about security as you are.

 

[Mark7805]

Okay. My advice, don't go. But if you must, do NOT take your primary computer. Take a secondary computer, one build for this purpose that does NOT have any personal or sensitive information on it.

And when you get it back home, assume it has been compromised. Even if you personally know everyone who will be there, you must not assume they have been as diligent about security as you are.

I think my plan as of now is to attend and clone my main drive at home then reimage when I get back - in an offline environment. Still not fool-proof but might be the best chance I got.

I think my plan as of now is to attend and clone my main drive at home then reimage when I get back - in an offline environment. Still not fool-proof but might be the best chance I got.

I haven't used clonezilla in ages. From what I recall it worked for me most time, but if a hard drive is even the slightest bit finicky, it can be a pain in the butt.

Any other recommended software for simple disk cloning? I would assume acronis..?

 

[ThrashZone]

Hi,
Backup is mandatory no matter which way you go

Best to also make a standard user account and use it for additional restrictions applied

As far as backup/ imaging free software I primarily use free macrium reflect
Not for it's cloning feature but just for it's system imaging features
You should already be system imaging we'd hope