4 ms·

Use full-disk encryption (presumably this is table stakes for anyone with this level of paranoia) using two factors - your passphrase decrypts a keyfile, then t

Use full-disk encryption (presumably this is table stakes for anyone with this level of paranoia) using two factors - your passphrase decrypts a keyfile, then the keyfile is used to decrypt the partition. If you destroy the keyfile, then even knowledge of the passphrase won't allow you to decrypt the data. This can be used to defeat a rubber-hose attack [0]. Standard security vs. convenience trade-off applies, of course - if you keep the keyfile on a USB key, then if the USB key fails you lose access to your data. If you keep a backup of the keyfile somewhere else, then access to that backup plus a rubber-hose attack to get your passphrase allows an attacker to decrypt your data. 0: https://xkcd.com/538/ https://xkcd.com/538/

Miner49er 7y ago
You still need to do something to prevent a cold-boot attack [0]. 0: https://en.m.wikipedia.org/wiki/Cold_boot_attack https://en.m.wikipedia.org/wiki/Cold_boot_attack
- mises 7y ago
  Maybe try sdmem: http://manpages.ubuntu.com/manpages/trusty/man1/sdmem.1.html http://manpages.ubuntu.com/manpages/trusty/man1/sdmem.1.html Put it in a bash script with the above luks commands and profit.
asdfman123 7y ago
I believe reading that Ross Ulbrict's computer was completely encrypted and only accessible with a passphrase. The minute he logged out or closed his laptop's lide, the information was completely locked down. IIRC, they were able to get his information by an elaborate scheme acted out by plainclothes police where they grabbed his PC while his computer was unlocked. Without looking it up, I think someone bumped into him and one officer took his laptop while another one on the other side grabbed his phone.
- komali2 7y ago
  Two plain clothes FBI officers followed him into the Glen Park public library. A third, undercover, agent contacted Ross online and asked him to log into the silk road backend to fix something. The plainclothes engaged in a fake lover's tiff right behind Ross' chair, who then turned around to see what the commotion was. When he did so, the male officer pushed the laptop to the female officer, who took it and began extracting evidence. Ross stood up, and then was arrested without resistance. Evidence gathering happened in the library.

Miner49er 7y ago

You still need to do something to prevent a cold-boot attack [0]. 0: https://en.m.wikipedia.org/wiki/Cold_boot_attack https://en.m.wikipedia.org/wiki/Cold_boot_attack

mises 7y ago
Maybe try sdmem: http://manpages.ubuntu.com/manpages/trusty/man1/sdmem.1.html http://manpages.ubuntu.com/manpages/trusty/man1/sdmem.1.html Put it in a bash script with the above luks commands and profit.

asdfman123 7y ago

I believe reading that Ross Ulbrict's computer was completely encrypted and only accessible with a passphrase. The minute he logged out or closed his laptop's lide, the information was completely locked down. IIRC, they were able to get his information by an elaborate scheme acted out by plainclothes police where they grabbed his PC while his computer was unlocked. Without looking it up, I think someone bumped into him and one officer took his laptop while another one on the other side grabbed his phone.

komali2 7y ago
Two plain clothes FBI officers followed him into the Glen Park public library. A third, undercover, agent contacted Ross online and asked him to log into the silk road backend to fix something. The plainclothes engaged in a fake lover's tiff right behind Ross' chair, who then turned around to see what the commotion was. When he did so, the male officer pushed the laptop to the female officer, who took it and began extracting evidence. Ross stood up, and then was arrested without resistance. Evidence gathering happened in the library.