3 ms·
No, because if the adversary is convinced you used a duress password, they'll just keep hitting you with a hammer.
by mholt 5y ago
No, because if the adversary is convinced you used a duress password, they'll just keep hitting you with a hammer.
- deleted 5y ago[deleted]
- emptyparadise 5y agoThat won't help them if the duress password is used to erase secrets in a way that would prevent even you from unlocking the drive again.
- 41b696ef1113 5y agoStep one for any kind of serious data extraction project would be to make a bit-for-bit duplicate of the origin.
- emptyparadise 5y agoThankfully a lot of data extraction projects serious enough to beat somebody with a hammer are not serious enough to tamper with TPM.
- Skunkleton 5y agoThe downside is they will keep hitting you with that hammer :(
- emptyparadise 5y agoUnfortunately they'd most likely do that even if you could give them the keys :(
- boring_twenties 5y agoThat's worthless, they will copy the drive before trying anything.
- emptyparadise 5y agoWhat if you don't store the keys on the drive?
- deleted 5y ago[deleted]
- munchler 5y agoThat scenario only works out in your favor if you prefer severe injury or death over disclosing the secret.
- emptyparadise 5y agoI'm sure that it adds a certain zen aspect to interrogation technique resistance.
- Brian_K_White 5y agoThere are levels of interest and risk etc. They aren't murdering everyone whos phone / laptop they check at a border. It would be perfectly fine to have an encrypted disk drive that presented different contents based on what password was used to unlock for instance. And with something fully arbitrarily scriptable like this, it doesn't have to simply wipe stuff, it can do practically anything. It could fake having a dead battery, or suffering some kind of crash or other normal annoying service interruption. It could fake a Microsoft account login problem due to some problem with the wifi or borked corporate account control etc. You could increase the believability by pretending to have very common bad security habits like having the duress password written down somewhere on your person or with the machine. If you are a spy and they have you in a hole, then your cover is already blown. They will remove and dissect the storage without even trying to boot it. But things like this could keep you from being noticed in the first place, and could sufficiently handle the vast majority of situations. In Russia right now, they are stopping random people on the street to look for certain telegram groups on people's phones. The randos aren't spies and aren't specifically targeted. The police are really only doing it to scare everyone else away from accepting any communication about Ukraine from outsiders. It would be exactly perfectly good enough if they simply didn't see what they were looking for.