3 ms·

Keeping encrypted data in the US is increasingly futile - see http://arstechnica.com/tech-policy/news/2012/01/judge-fifth-amendment-doesnt-protect-encrypted-har

by bri3d 15y ago

Keeping encrypted data in the US is increasingly futile - see http://arstechnica.com/tech-policy/news/2012/01/judge-fifth-amendment-doesnt-protect-encrypted-hard-drives.ars http://arstechnica.com/tech-policy/news/2012/01/judge-fifth-... . Steganography is a good idea, though. (edited: corrected stenography -> steganography per too-aggressive spellchecker usage)

DanBC 15y ago
> Stenography is a good idea, though. Steganography is provably secure but requires a lot of cover data and careful implementation. Steganography is less useful for most purposes than most people want.
- cookiecaper 15y ago
  Unfortunately this is the case now. I am hoping that someone invents something that makes steganography more usable. "----BEGIN PGP MESSAGE----" is a little obvious for my taste, though of course encryption is much better than nothing.
cwp 15y ago
I think you mean steganography. "Stenography" is writing down what someone is saying.
- cookiecaper 15y ago
  Indeed, I should have paid more attention to my spell checker which does not recognize "steganography". Thanks.
- bri3d 15y ago
  Thank you! Corrected.
deleted 15y ago
[deleted]
cookiecaper 15y ago
It is not a settled question whether you can be forced to decrypt or not; some judges have considered encrypted drives protected and others have not. And the UK has compelled individuals to decrypt as well. The fact remains that you are much better off encrypting in the first place even if you are eventually forced to decrypt. You can challenge the order to decrypt, you can add more time to the investigation and give your lawyers more time to put together a strategy for whatever angle they consider most prudent, you can prevent surreptitious listening that may arouse interest in your activity in the first place, and so on. Even if you ultimately are forced to comply with an order to decrypt, which again is by no means guaranteed, you still do yourself a lot of favors by encrypting from the get go. And we haven't even mentioned protection from non-governmental entities like script kiddies, competitors, or tabloids.

by bri3d 15y ago

DanBC 15y ago

> Stenography is a good idea, though. Steganography is provably secure but requires a lot of cover data and careful implementation. Steganography is less useful for most purposes than most people want.

cookiecaper 15y ago
Unfortunately this is the case now. I am hoping that someone invents something that makes steganography more usable. "----BEGIN PGP MESSAGE----" is a little obvious for my taste, though of course encryption is much better than nothing.

cwp 15y ago

I think you mean steganography. "Stenography" is writing down what someone is saying.

cookiecaper 15y ago
Indeed, I should have paid more attention to my spell checker which does not recognize "steganography". Thanks.
bri3d 15y ago
Thank you! Corrected.

deleted 15y ago

[deleted]

cookiecaper 15y ago

It is not a settled question whether you can be forced to decrypt or not; some judges have considered encrypted drives protected and others have not. And the UK has compelled individuals to decrypt as well. The fact remains that you are much better off encrypting in the first place even if you are eventually forced to decrypt. You can challenge the order to decrypt, you can add more time to the investigation and give your lawyers more time to put together a strategy for whatever angle they consider most prudent, you can prevent surreptitious listening that may arouse interest in your activity in the first place, and so on. Even if you ultimately are forced to comply with an order to decrypt, which again is by no means guaranteed, you still do yourself a lot of favors by encrypting from the get go. And we haven't even mentioned protection from non-governmental entities like script kiddies, competitors, or tabloids.