Live data from Hacker News

What happens if authorities seize your laptop?

bbc.co.uk

11–20 of 83 posts

Re: What happens if authorities seize your laptop?

#11
"Or you can scrub your laptop clean, storing everything on an external hard drive that you leave at home. Then you know you are safe from prying authorities, at least at the border."

That is unless you believe that those prying authorities have the will and the way to leave an undetectable backdoor in your laptop. Breaking the chain of custody in any laptop today is akin to destruction of trust in that device. Who is responsible then for paying for this damage?

Re: What happens if authorities seize your laptop?

#12

Is it possible to encrypt two files together with two different keys? Say I have my class notes from freshman Latin and I have my plans to take over the world. I encrypt them together into a single file "dont_read_super_secret.encrypted" and if I enter "fuzzykitty98" as the key then I see only the notes. But if I enter "downwithfreedom2000" then I see only the diabolical plans. Is that possible? If anyone builds this…

Truecrypt supports multiple encrypted partitions, and if you've got the details to decrypt one, you still can't tell if there are any others.

http://www.truecrypt.org/docs/plausible-deniability

Re: What happens if authorities seize your laptop?

#13

Is it possible to encrypt two files together with two different keys? Say I have my class notes from freshman Latin and I have my plans to take over the world. I encrypt them together into a single file "dont_read_super_secret.encrypted" and if I enter "fuzzykitty98" as the key then I see only the notes. But if I enter "downwithfreedom2000" then I see only the diabolical plans. Is that possible? If anyone builds this…

Of course this is possible.

You can even take it a step further: full disk encryption, one key will give an innocent Windows install, and another key will give the diabolical plans.

However, information is only compressible to the extent of redundancy involved, so this can be spotted: compare the amount of encrypted data with the size of the innocent data.

Re: What happens if authorities seize your laptop?

#14
"During their inspection of your laptop, the authorities will disregard files that are not germane to their investigation, says Rosenzweig, explaining that the official policy is to 'flush all non-criminal data'."

How exactly do they tell the difference, what if I use steganography to hide stuff in my family pictures? They won't flush anything, they will keep everything in case it's relevant.

Re: What happens if authorities seize your laptop?

#15
I don't travel with any hardware other than a DSLR and then I mail the SD cards home. I'll use internet cafes and my phone and that is it.

It gets broken, searched, x-rayed, fucked up and generally treated like shit.

At Zurich airport, they managed to break my old IBM T42. Had to get my company at the time to courier a new one overnight from the UK by road which cost £1150 just for the courier.

Re: What happens if authorities seize your laptop?

#17
A frightening thought: if it was practical to search each and every device going through the border, they probably would do so.

Happily enough, statistical sampling techniques can make that possible [1].

[1] S. Garfinkel. Searching A Terabyte of Data in 10 minutes. http://simson.net/ref/2013/2013-01-07%20Forensics%20Innovati...

Re: What happens if authorities seize your laptop?

#18

Is it possible to encrypt two files together with two different keys? Say I have my class notes from freshman Latin and I have my plans to take over the world. I encrypt them together into a single file "dont_read_super_secret.encrypted" and if I enter "fuzzykitty98" as the key then I see only the notes. But if I enter "downwithfreedom2000" then I see only the diabolical plans. Is that possible? If anyone builds this…

It'd be possible but difficult.

I don't know how to do it without some kind of markup / document system (no morning coffee yet). I figure it wouldn't be that hard.

You could use a TDMS file(v1), which each channel is an item. When ran you give the program a password, which it checks against each channel, calculating the salted hash of your password. When it finds a matching hash it decrypts the document (saved as data within the channel).

This gives you a lot of plausibly defensibility because nobody understands TDMS file structure, not even people who work with them (it is an open standard, just nobody cares). And secondly, you decrypt the document and you get something out, even if that something isn't exactly correct.

I could likely push out a windows version by Saturday I guess if you don't mind it'd be using SHA-256 instead of [b/s]crypt for password checking. Maybe future updates to include some form of internal compression + some type of signing who last modified the document(s).

Re: What happens if authorities seize your laptop?

#19
Hardware is cheap in the US, I'd leave my laptop at home and get something cheap (either a Chromebook or a used laptop), then access/transfer data and configuration over the net.

As for my phone, if I were in a position to be worried about customs installing backdoors, I'd prepare a recovery zip beforehand with all my data, then download it from my own server or a secure storage, and flash it after passing customs. Or better yet, travel with a SIM and buy a cheap Moto G, the resale value alone once back at home would make up its US price.

Re: What happens if authorities seize your laptop?

#20
post #13

Is it possible to encrypt two files together with two different keys? Say I have my class notes from freshman Latin and I have my plans to take over the world. I encrypt them together into a single file "dont_read_super_secret.encrypted" and if I enter "fuzzykitty98" as the key then I see only the notes. But if I enter "downwithfreedom2000" then I see only the diabolical plans. Is that possible? If anyone builds this…

Of course this is possible. You can even take it a step further: full disk encryption, one key will give an innocent Windows install, and another key will give the diabolical plans. However, information is only compressible to the extent of redundancy involved, so this can be spotted: compare the amount of encrypted data with the size of the innocent data.

There's an even bigger weakness: timestamps in files and the Windows event log. These will show if your "innocent" OS hasn't been booted for $long_time...
Post reply on HN