4 ms·
If you go full disk encryption with TrueCrypt, make sure you look into their Hidden OS feature as well. A judge may be able to order you to give up the decrypti
by Jach 15y ago
If you go full disk encryption with TrueCrypt, make sure you look into their Hidden OS feature as well. A judge may be able to order you to give up the decryption key to the OS when accessing the drive prompts for one (last I checked the precedent is still somewhat shaky), because while they can't know what's being encrypted they can infer something readable is. They can't prove the existence of a Hidden OS, though, so your 'real' encrypted area is just noise and can't be legally proved anything else so a second key can't be demanded.
- hetman 15y agoMight look odd if none of the files on the decoy have been modified in the last 6 months - logging in to do this regularly and in a believably meaningful way seems like a burden. The good news is unless you're an international crime lord, it seems unlikely there will be anyone on hand in the court to make this kind of leap (not a lawyer so that guess could be way off though).
- jpdoctor 15y agoAn automated update of the decoy would be a good addition to such software.
- fl3tch 15y agoNot sure exactly how this would be implemented, but it sounds like a bad idea, since they would just wait for your automated updater to decrypt the decoy. Even if it was in some limited fashion, the encryption key would be in RAM, so it would be as vulnerable as any running system. (BTW, if you're worried about a state-level adversary, that means you should always turn off your computer when not using it, and wait a few minutes before physically leaving it to prevent a cold boot attack)
- esrauch 15y agoWell, the point of the decoy i that you don't care if they can access it isn't it?
- worldimperator 15y agoAnd you can be happy if it's a judge and not some convincingly dark smiling guy with a mask.
- coob 15y agoThe RIP Act in the UK allows for jail time for refusing to give a key.
- josscrowcroft 15y ago"RIP privacy", amirite??
- Groxx 15y agoWhat if the key doesn't exist? The point of a hidden OS is plausible deniability. When used correctly, there shouldn't be any evidence that another OS exists. For instance: what if there wasn't a hidden OS, and you do keep random data in your unused HD space? They'd be jailing you for refusing to give something that doesn't exist.
- Natsu 15y ago> They'd be jailing you for refusing to give something that doesn't exist. That doesn't sound like a desirable outcome.
- DanBC 15y agoLike the non-terrorists subject to extraordinary rendition to Guantanomo bay so they could give the information about terrorism that they didn't have because they were not terrorists?
- polymatter 15y agoMy dad was the security officer in a major department of UK gov, and he asked this very question to legal. The response was that if the key doesn't exist, you must prove its non-existence. His protest on that fell on deaf ears. Furthermore, if the key is controlled under the Official Secrets Act, you will brake the law both when you hand them over you and when you don't. Basically, laws that don't make absolute logical sense are fine, they'll just decide who to prosecute. Totally fine, nothing to see here.
- Jach 15y ago
- kgo 15y agoActually it works the other way around, and is considered to be a problem by many security experts. If you don't have a Hidden OS partition, and the court requests the password, it's impossible for you to prove you DON'T have one. Just like it's impossible to prove you just forgot your password. So you're better off making a hidden OS partition and not using it, just so you can access it.