Live data from Hacker News

New Year's Resolution: Full Disk Encryption on Every Computer You Own

eff.org

101–110 of 187 posts

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#101
post #84
post #58

Earlier quoted context omitted.

The RIP Act in the UK allows for jail time for refusing to give a key.

What if the key doesn't exist? The point of a hidden OS is plausible deniability. When used correctly, there shouldn't be any evidence that another OS exists. For instance: what if there wasn't a hidden OS, and you do keep random data in your unused HD space? They'd be jailing you for refusing to give something that doesn't exist.

> They'd be jailing you for refusing to give something that doesn't exist.

That doesn't sound like a desirable outcome.

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#102
post #84
post #58

Earlier quoted context omitted.

The RIP Act in the UK allows for jail time for refusing to give a key.

What if the key doesn't exist? The point of a hidden OS is plausible deniability. When used correctly, there shouldn't be any evidence that another OS exists. For instance: what if there wasn't a hidden OS, and you do keep random data in your unused HD space? They'd be jailing you for refusing to give something that doesn't exist.

Like the non-terrorists subject to extraordinary rendition to Guantanomo bay so they could give the information about terrorism that they didn't have because they were not terrorists?

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#103
post #86

What's the performance penalty like? That's pretty much the only thing holding me back.

Pretty minimal. If you have TrueCrypt installed you can run a benchmarks of various algorithms. It's especially fast if you have a modern processor with AES-NI (hardware AES instructions) -- I get around 1GB/s Encrypt/Decrypt using AES on a Core i5.

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#104
post #84
post #58

Earlier quoted context omitted.

The RIP Act in the UK allows for jail time for refusing to give a key.

What if the key doesn't exist? The point of a hidden OS is plausible deniability. When used correctly, there shouldn't be any evidence that another OS exists. For instance: what if there wasn't a hidden OS, and you do keep random data in your unused HD space? They'd be jailing you for refusing to give something that doesn't exist.

My dad was the security officer in a major department of UK gov, and he asked this very question to legal. The response was that if the key doesn't exist, you must prove its non-existence. His protest on that fell on deaf ears. Furthermore, if the key is controlled under the Official Secrets Act, you will brake the law both when you hand them over you and when you don't.

Basically, laws that don't make absolute logical sense are fine, they'll just decide who to prosecute. Totally fine, nothing to see here.

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#105
post #14

It's sad we need encryption mostly for protection from not criminals, but our own government for even trivial data. What freaks me out most these days is how easily people fall into the belief that "oh well traveling is not a right so you have to give up rights when you fly or drive anywhere". No, if you are a citizen of the United States and unless you are actually crossing a border, you should have the unqualified…

This was always the case, Phil Zimmermann was very open about it, even back in 1991. Sun fellows know the same. There were even case stories from Romania around the nineties, a country which is not even 250 years old.

http://www.philzimmermann.com/EN/news/PGP_10thAnniversary.ht...

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#106
post #67

Earlier quoted context omitted.

To be fair, I trust TrueCrypt because it's "libre" and "open", but I've never looked at the source code myself. I trust that other people more knowledgable than me have taken a look at it, but if there is indeed a backdoor in it, then it will look on the surface like the most innocuous bug in the world. Don't get me wrong: I understand and appreciate your point, but I honestly don't know how most of us using TrueCryp…

While you are basically correct, the mere ability to check the source yourself and possibly be able to find (or even fix) said bugs-which-could-or-could-not-be-cleverly-hidden-backdoors puts it leagues ahead of any proprietary solution, where there is never any way to be sure there isn't just something like a void force_decrypt(string company_master_password) [1] in there. And to be perfectly honest, I'd rather trust…

be reassured, that "nobody" actually checks thoroughly in practice, so don't rely on it.

http://www.h-online.com/newsticker/news/item/Debian-package-...

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#107

Earlier quoted context omitted.

To be honest, I don't see why national borders are so strongly part of the equation. I suppose that depends on your worldview. I live within the Schengen Area, and to me it seem patently obvious that most 'bad things' in the world are hardly affected by national borders. They're typically supra-national (climate change, credit crunch, cracking, etc) or intra-national (most crime, etc. I don't mean to argue for more c…

Drug trafficking and illegal immigration?

drug trafficking, illegal immigration don't serve as counterpoints; you're putting the cart before the horse

The drugs trade is the flow of narcotics from source to sink. Stopping them at a national border is one approach; stopping them elsewhere in transit (as it leaves the source, on the open sea, at the destination by local police, etc) is another. And then you have one more: tackling the existence of a source and a sink. In other words, you look at supply (i.e. creation/generation of stock) and demand. I believe that this is perhaps the best approach, and it is definitely one to which borders are irrelevant. So I don't really accept that as a counterpoint to what I was saying. In some ways, the fact you thought it was illustrates my point: our focus on borders is simplistic and maybe distracting us from finding more effective approaches that might be inspired by a thorough analysis of the system dynamics.

People trafficking is to some extent the same thing: source, sink, and a flow over many miles from one to the other (maybe across a border, maybe not).

As for illegal immigration, you have a flow that exists because of inequality (i.e. it's a flow down a gradient) - a difference in living standards, job opportunities, safety, etc. This inequality makes the recipient country a sink and the donor country a source. But of course, once again we shouldn't be talking about countries. Some regions are more attractive than others, and people have always moved between them, generally to the gain of one region and the detriment of another. Population flows can be cross-border, or not, despite the similarity in causes. Once again; should borders really be the focal point at which destabilising migrations are addressed by modern, globalised societies?

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#108
post #42

Earlier quoted context omitted.

Might look odd if none of the files on the decoy have been modified in the last 6 months - logging in to do this regularly and in a believably meaningful way seems like a burden. The good news is unless you're an international crime lord, it seems unlikely there will be anyone on hand in the court to make this kind of leap (not a lawyer so that guess could be way off though).

An automated update of the decoy would be a good addition to such software.

Not sure exactly how this would be implemented, but it sounds like a bad idea, since they would just wait for your automated updater to decrypt the decoy. Even if it was in some limited fashion, the encryption key would be in RAM, so it would be as vulnerable as any running system.

(BTW, if you're worried about a state-level adversary, that means you should always turn off your computer when not using it, and wait a few minutes before physically leaving it to prevent a cold boot attack)

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#109

Earlier quoted context omitted.

Drug trafficking and illegal immigration?

Human trafficking is the new drugs. Apparently it's enormously more profitable to import sex workers and keep them in a kind of narcotic/whatever assisted slavery, because of the reuse of the person vs. the consuming nature of the drug.

We're getting way off topic but I'd be interested to see a source for that claim. I imagine that the costs associated with a prostitute (food, shelter) would be significantly higher than those associated with a stock of inert crystalline powder, pills, or resin. Even if nominally borne by the prostitute, those greater costs still reduce the profitability of the overall enterprise.

Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own

#110
post #61

Earlier quoted context omitted.

The reason I trust (to the extend I trust anything on this planet) Tarsnap is that Colin Percival (the creator) is a cryptographer and the FreeBSD security officer. Leading to me have a higher confidence in him than most of the other "secure" backup services I have seen.

Yeah that's what I mean - it looks more trustworthy than something over-designed with 5 carefully-crafted price plans. Think I'll give it a shot soon. Thanks!

and when there was a critical security bug in Tarsnap, he behaved with extraordinary integrity and openness (http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-...).

More than anything else, cpercival earned my trust simply by being honest. There are precious few companies I could say this about.

Post reply on HN