Reading this made me think that a good solution would be to write your own filesystem as a mod if an existing system. It just needs to differ enough from existing recognised systems. Then nobody would be able to read except you and the encrypted data effectively doesn't exist. It just would show up as an unreadible partition.
My USB Drive Has a Hidden Encrypted Vault
111–120 of 175 posts
Re: My USB Drive Has a Hidden Encrypted Vault
#112This only makes sense if the underlying thing that gets exposed after you put in the password is a block device... I'd want to then be able to have that encrypted with LUKS myself, I don't want to rely on this homebrew stuff.
Re: My USB Drive Has a Hidden Encrypted Vault
#113Reading this made me think that a good solution would be to write your own filesystem as a mod if an existing system. It just needs to differ enough from existing recognised systems. Then nobody would be able to read except you and the encrypted data effectively doesn't exist. It just would show up as an unreadible partition.
Not very practical for an USB device used to move data from one computer to another.
Re: My USB Drive Has a Hidden Encrypted Vault
#114If you're using off-the-shelf "hidden" encrypted volume schemes, you're not going to be evading state-level adversaries; if you can find these projects and conveniently use them, state vendors can and will write scanners that find them. They're paid to do it; new detections are how they get to charge for maintenance and new versions. Then you're down to two issues: (1) Concealing an encrypted volume jacks suspicion w…
>If you're using off-the-shelf "hidden" encrypted volume schemes, you're not going to be evading state-level adversaries; This would evade 99% of them. Most "state-level" adversaries are just high school dropouts working border jobs told to "investigate suspicious things". I once had a police officer literally raid my room for drugs during a massive party we were throwing in university, for example. They took everyth…
>Most "state-level" adversaries are just high school dropouts working border jobs told to "investigate suspicious things".
Even dumb cops know how to use a Cellebrite machine.
Re: My USB Drive Has a Hidden Encrypted Vault
#115Earlier quoted context omitted.
> Concealing an encrypted volume jacks suspicion way up; whatever pickle you were going to be in if you just kept an encrypted DMG on your desktop, you're trebly in now. Time to bust out the old "Can't tell if this MP3 is a steganographically important encrypted file or just a Nurse With Wound EP" trick then.
There once was a time when I'd be on Facebook all day, subscribed to many groups and pages that published really dank memes. And I would enjoy laughing at these memes, and the dankest memes I would duly collect and forward to my mother who is a boomer. And my mother would duly sift through these forwarded meme images for the dankest of the dank, and then she would eagerly forward them to her friend from church, who a…
I'm pretty sure the meme WAS the message. What other messages are being distributed through random meme sharing, where the recipient has to know it contains some secondary hidden message and requires the means to decode it?!
Re: My USB Drive Has a Hidden Encrypted Vault
#116Just chiming in that there are lots of threats that aren't state level attackers. In fact for most people the threat is never gonna be the border guard. It's your parents, an abusive partner, a sibling, a school admin or an employer.
Just because something does work vs the NSA or the FBI, that doesn't make it useless
Re: My USB Drive Has a Hidden Encrypted Vault
#117[dead]
Re: My USB Drive Has a Hidden Encrypted Vault
#118Earlier quoted context omitted.
There once was a time when I'd be on Facebook all day, subscribed to many groups and pages that published really dank memes. And I would enjoy laughing at these memes, and the dankest memes I would duly collect and forward to my mother who is a boomer. And my mother would duly sift through these forwarded meme images for the dankest of the dank, and then she would eagerly forward them to her friend from church, who a…
I'm pretty sure the meme WAS the message. What other messages are being distributed through random meme sharing, where the recipient has to know it contains some secondary hidden message and requires the means to decode it?!
It didn't matter; once I found out even the possibilities for steganography across a large catalog of JPEG images, it was game over for me. It doesn't matter if there were zero or five dozen secret messages in the files I forwarded. I didn't want to be a conduit for that possibility.
The risk, of becoming a mule, an unwitting accessory to some evil cause, was just far outweighing the rewards of sharing dumb crap with my mother, you know?
Re: My USB Drive Has a Hidden Encrypted Vault
#119Earlier quoted context omitted.
> the difference between truly random noise and an encrypted volume A LUKS volume with a detached header is indistinguishable from random data.
Have you actually compared the random data that various tools write to a disk to encrypted files? Load up binwalk and give it a rip, you will be surprised by how distinct the entropy graph is between the two
What you propose ("the random data that various tools write to disk") is not _random data_.
Compare the entropy graph of /dev/random against a LUKS volume with a decrypted header, and you will see no difference.
Re: My USB Drive Has a Hidden Encrypted Vault
#120If you're using off-the-shelf "hidden" encrypted volume schemes, you're not going to be evading state-level adversaries; if you can find these projects and conveniently use them, state vendors can and will write scanners that find them. They're paid to do it; new detections are how they get to charge for maintenance and new versions. Then you're down to two issues: (1) Concealing an encrypted volume jacks suspicion w…
6x not 50x
I use 100k rounds instead of 600k https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...