5 ms·
Travel on an airline with your life's data and devices? I wouldn't. Bring the devices if you must (with you, not under the plane), but the data should be put i
by dontbenebby 4y ago
Travel on an airline with your life's data and devices?
I wouldn't. Bring the devices if you must (with you, not under the plane), but the data should be put in a Veracrypt volume[0], note the SHA-256 sum, and upload it to somewhere secure, perhaps with a technology like SecureDrop[1]... or just stick that blob in a zip file or something and park it on some random SFTP server, that might actually stick out less and thus be more secure.
If you need secure passphrases, you can bootstrap entropt by creating a mnemonic, then putting that mnemonic into a hash algorithm so you have something that would require a very targeted decryption effort but easy to remember. Other sources of seed could include things like the serial numbers on currency.
For example, I used the serial number on the last two dollar bill my deceased grandfather as salt combined with a code word set up back in the 2000s as the password to the encrypted Kali virtual machine I set during the Trump administration and tore down after the 2020 election.
In my experience, I have found that when you are trying to live that cyberpunk lifestyle (confidentiality, integrity, availability)... you can often only achieve two while interacting with an enemy.
And make no mistake: ANYONE who tries to coerce you into giving up your most intimate data without a warrant to simply travel on an airline is an enemy. The tools and techniques I taught to journalists traveling to the most oppressive regimes in the world must now be deployed by private citizens beating hasty retreats from fascist regimes the world over.
Have a safe holiday season OP, if you can. It's like the fall of the USSR at there, complete with гла́сность[2] :-)
Sincerely,
Greg.
Edit: I messed up the formatting on the citations -- sorry.
--
[0] https://en.wikipedia.org/wiki/VeraCrypt#VeraCrypt_audit https://en.wikipedia.org/wiki/VeraCrypt#VeraCrypt_audit
[1] https://securedrop.org/ https://securedrop.org/
[2] https://en.wikipedia.org/wiki/Perestroika#Perestroika_and_glasnost https://en.wikipedia.org/wiki/Perestroika#Perestroika_and_gl...