39 replies to this topic

[rlastinger]

so, to be really paranoid:

1. setup a hdd password
2. use drivecrypt or other full disk encryption system to encrypt the disk.
3. create a container with 2 layers with truecrypt
4. in the inner container put a password protected rar file (3.x), in the outer container some pr0n.
5. encrypt the rar file with some unknown encryption system, one you made yourself for example.

finally put the laptop in a safe where the inner side is composed of some material which will ignite at >50 degrees celsius.
If you don't give m the key / password to the safe they will have to use a torch or drill to open it. This will cause enough heat to ignite the safe itself and the laptop with it.


It'll be a hassle to work with the data every day, but if it's for storage then it should be fine

Get a big magnet and set it up with a remote and keep the remote next to you at all times. If needed, turn the magnet on. That can get a little expensive though.

[pseudofed]

Get nude, that'll throw/turn em off I'm sure.

That's my default strategy. I've had mixed results with it.

[calard]

Can data be easily accessed on a day to day basis with pgp or do you have to go through a big unencryption process? I would like some security like pgp provides, but not just for when I leave my computer when I go on a trip or will not use it for a while. I need some convinience

[Blake]

ok I'm kinda missing something...

how does computer shutdown NOT make investigators loose evidence?
I mean if they shutdown and next boot everything is encrypted?

Secure deletion of files does work if you use DOD standard or the crazy w/e his name is standard forgot about the name.

PGP can't hold the record for longest not broken WDE because there where/are 2 known backdoors for it.

He means they pull the plug, no shutdown, then the drive is mirrored bit by bit, onto another drive using a machine or dd, the drive from then on will only be opened as a slave drive and never booted from.

As for the magnet theory, for the other ex military guys they will know what I mean, a degauss machine doesn't just turn on a magnet the magnets actually moves around in the machine making passes on the drive, it kind of works like shuffling cards around my pushing them in a pile all around a table scrambling all the bytes around. Multiple zero writes to every sector is the only way to truly a properly clean a drive.

[cross]

PGP WDE

has had and does have backdoor unless they fixed the latest one.

Link please? Anyone dispute this?

[No Dice]

DVD goes in the microwave and the thumb drive goes up my ass..

Sorry to say but you can encrypt and password protect all you want. In the end, the arresting agency will eventually get the password from you usually by their methods of persuasion..

SSH and proxy chain attack vectors will only delay the investigation. The bottom line is your dealing with an alpha/omega entity that can devote an entire office to a single case. I see it on a weekly basis.. at least on the US Fed Govt side.

[Kenny]

Hey all, I had thinking about the senario when the police want to search your pc for illegal tools...

What shall you do? Delete C:...takes some time

format the partion?


or what, i have some warez and a bit tools for hacking so if they came?

well to be honest...the police wont let you know they are coming... am pretty sure if they do you will be fast a sleep in bed..at around 5-6am or earlier.

so your in a catch22 situation... either you keep a clean pc...or do what i would do in your senario

have an external usb HD with say all your illegal stuff on...and hide it each night were you know for sure it will not be found and i don't mean under the bed ...that way you can load what ever tools your using...then secure delete via several passes after you finished using your tools...

thats if your really paranoid about your setup.

[rrhodes]

Buy a wireless network hard drive. Hide it in the wall. The police will take all of your PC's but I doubt they will kick holes in the wall looking for them. A buddy of mine did this when everyone was cracking down on MP3 downloads and got very paranoid. He even wired a light switch in the wall that powered the drive up.

Of course nobody ever came looking and he had to cut into the wall when the drive failed to replace it. LOL

[electroglyph]

that's a pretty damn good idea. too bad my cheapo kensington wifi finder would see it in a flash

PGP HD encryption gets my vote too.

[Blake]

DVD goes in the microwave and the thumb drive goes up my ass..

Sorry to say but you can encrypt and password protect all you want. In the end, the arresting agency will eventually get the password from you usually by their methods of persuasion..

SSH and proxy chain attack vectors will only delay the investigation. The bottom line is your dealing with an alpha/omega entity that can devote an entire office to a single case. I see it on a weekly basis.. at least on the US Fed Govt side.

Wow dice that is true dedication :-)

[No Dice]

It's either that or fight off the "sisters" at Shawshank

[GroovyDude]

PGP WDE

has had and does have backdoor unless they fixed the latest one.

Link please? Anyone dispute this?

hxxp://securology.blogspot.com/2007/10/pgp-whole-disk-encryption-barely.html

[beardednose]

i know I'm picking up an old thread (a la nose), but just encrypt. PGP is good enough. It stood up for me when I needed it. Nuff said.