3 ms·

The device is rated 1TB. Given all of the passwords you gave us we can account for .5TB and we cannot find a free-space map. Ergo there is at least one more p

The device is rated 1TB. Given all of the passwords you gave us we can account for .5TB and we cannot find a free-space map. Ergo there is at least one more password that you're not sharing with us. Seriously, other people aren't dumb.

stale2002 8y ago
That's not how partions work for these things. And the people who wrote these security systems thought of exactly this attack vector. If you create a passworded partion, it adds a bunch of extra unused space, that MIGHT be another passworded partion, or might just be random empty space. IE, maybe you have 3 passwords and 200 GB of extra space, or maybe it is actually 4 passwords and 150 GB of extra space that is random bytes. These 2 situations are identical and cannot be differentiated. The police tell you to access that 150GB of extra space, and it is impossible. Because it's random bytes, and there really isn't an extra partition.
- cryptonector 8y ago
  You're missing the point, which is that LEO and courts will (reasonably!) make the following inference: "MIGHT be another password-protected partition" -> "is a password-protected partition" You can disagree with that thinking all you want, but it won't do you any good if the people thinking that are in control of your destiny.
  - stale2002 8y ago
    Sure, but then nothing you do matters. Imagine the situation where you really ARE innocent. Jail for life? Possible, but whether you are innocent or not doesn't change anything. Yes, the police could just jail you for life or kill you. But that's ALWAYS the case. They'd do that to you anyway of you are innocent
    - cryptonector 8y ago
      Well, there is something you can do: don't use software that gives you plausible deniability. BTW, someone posted this fascinating link in this thread: https://web.archive.org/web/20100820175505/http://iq.org:80/~proff/rubberhose.org/current/src/doc/beatings.txt https://web.archive.org/web/20100820175505/http://iq.org:80/...
goblin89 8y ago
Partition will report it’s 1TB large[0]. You should perhaps read about the software before continuing to post comments claiming it’s unfit for purpose. There is a list of considerations that a TrueCrypt/VeraCrypt user with stricter security requirements would have to keep in mind, following all of it makes it fairly difficult to discover hidden partitions. The people who wrote and maintain the software aren’t dumb either. [0] https://security.stackexchange.com/a/58150 https://security.stackexchange.com/a/58150

stale2002 8y ago

That's not how partions work for these things. And the people who wrote these security systems thought of exactly this attack vector. If you create a passworded partion, it adds a bunch of extra unused space, that MIGHT be another passworded partion, or might just be random empty space. IE, maybe you have 3 passwords and 200 GB of extra space, or maybe it is actually 4 passwords and 150 GB of extra space that is random bytes. These 2 situations are identical and cannot be differentiated. The police tell you to access that 150GB of extra space, and it is impossible. Because it's random bytes, and there really isn't an extra partition.

cryptonector 8y ago
You're missing the point, which is that LEO and courts will (reasonably!) make the following inference: "MIGHT be another password-protected partition" -> "is a password-protected partition" You can disagree with that thinking all you want, but it won't do you any good if the people thinking that are in control of your destiny.
- stale2002 8y ago
  Sure, but then nothing you do matters. Imagine the situation where you really ARE innocent. Jail for life? Possible, but whether you are innocent or not doesn't change anything. Yes, the police could just jail you for life or kill you. But that's ALWAYS the case. They'd do that to you anyway of you are innocent
  - cryptonector 8y ago
    Well, there is something you can do: don't use software that gives you plausible deniability. BTW, someone posted this fascinating link in this thread: https://web.archive.org/web/20100820175505/http://iq.org:80/~proff/rubberhose.org/current/src/doc/beatings.txt https://web.archive.org/web/20100820175505/http://iq.org:80/...

goblin89 8y ago

Partition will report it’s 1TB large[0]. You should perhaps read about the software before continuing to post comments claiming it’s unfit for purpose. There is a list of considerations that a TrueCrypt/VeraCrypt user with stricter security requirements would have to keep in mind, following all of it makes it fairly difficult to discover hidden partitions. The people who wrote and maintain the software aren’t dumb either. [0] https://security.stackexchange.com/a/58150 https://security.stackexchange.com/a/58150