71–80 of 187 posts
Unfortunately, the amount of time I spend running/breaking the development version of Ubuntu prohibits full disk encryption, but I do have /home encrypted. Is that "good enough"?
That's what I intend to do the next opportunity I get. Your swap space could still leak confidential information, though.
On OSX with Lion - there is no excuse http://osxdaily.com/2011/08/10/filevault-2-benchmarks-disk-e...
Does it now play well with Time Machine?
Earlier quoted context omitted.
Looks very interesting, as services go. For this kind of thing, I'm strangely less inclined to trust a slick-looking, well-designed and heavily-marketed backup "solution".. If I do fork out for a service, I would probably rather go with the kind of company that has as their tagline: "Online backups for the truly paranoid" , like them. Pricing's not a killer either.
The reason I trust (to the extend I trust anything on this planet) Tarsnap is that Colin Percival (the creator) is a cryptographer and the FreeBSD security officer. Leading to me have a higher confidence in him than most of the other "secure" backup services I have seen.
If you go full disk encryption with TrueCrypt, make sure you look into their Hidden OS feature as well. A judge may be able to order you to give up the decryption key to the OS when accessing the drive prompts for one (last I checked the precedent is still somewhat shaky), because while they can't know what's being encrypted they can infer something readable is. They can't prove the existence of a Hidden OS, though,…
The RIP Act in the UK allows for jail time for refusing to give a key.
Earlier quoted context omitted.
Does it? Even if you have a CPU with AES-NI instuctions like an Intel Core i5 or i7?
unfortunately yes, see http://blog.siyuz.net/2010/11/17/truecrypt-7-0a-fde-on-ssd/#
That said I still use it on both of mine and definitely suggest it, it's a very small performance penalty for what will be a godsend if your laptop turns up lost or stolen.
https://code.google.com/p/cryptsetup/ It's an excellent precaution against the much more mundane and common threats like loss or theft though
If you go full disk encryption with TrueCrypt, make sure you look into their Hidden OS feature as well. A judge may be able to order you to give up the decryption key to the OS when accessing the drive prompts for one (last I checked the precedent is still somewhat shaky), because while they can't know what's being encrypted they can infer something readable is. They can't prove the existence of a Hidden OS, though,…
Might look odd if none of the files on the decoy have been modified in the last 6 months - logging in to do this regularly and in a believably meaningful way seems like a burden. The good news is unless you're an international crime lord, it seems unlikely there will be anyone on hand in the court to make this kind of leap (not a lawyer so that guess could be way off though).
Earlier quoted context omitted.
I'm not sure the cloud is as difficult to access as you may think. Many cloud services have built-in law enforcement interfaces (LEI) to make searching the data self-service and easier for law enforcement as well as the cloud providers. Source: http://news.cnet.com/8301-13578_3-10446503-38.html
The answer is, of course, to store your data online and encrypt it.
There remains the space for a cloud sync service that encrypts client side and provides good enough clients for every major platform.
Spider Oak comes close, but it's just too damn ugly an interface and isn't the "Install and forget" option that Dropbox is.
Earlier quoted context omitted.
I'm adding FDE too :) I use Knox for Vaults (on Mac), what do you use out of curiosity?
Knox is a better UI for the bultin in folder encryption on OSX?
Earlier quoted context omitted.
The answer is, of course, to store your data online and encrypt it.
Which is what we thought was happening with Dropbox and why people were up in arms about discovering that it wasn't the case. There remains the space for a cloud sync service that encrypts client side and provides good enough clients for every major platform. Spider Oak comes close, but it's just too damn ugly an interface and isn't the "Install and forget" option that Dropbox is.