Live data from Hacker News

My USB Drive Has a Hidden Encrypted Vault

rootkitlabs.com

121–130 of 175 posts

Re: My USB Drive Has a Hidden Encrypted Vault

#121
post #8

Earlier quoted context omitted.

This is self-soothing, not a real security plan. It doesn't matter how competent a security agency is, because there's a whole ecosystem of vendors selling into that space; knowledge of how to attack encrypted disks like this is outsourced, and, importantly, those firms have incentives to mop up even random stuff like this, because vendors will be selected in part based on lists of how many different circumvention an…

This isn't stand-up-to-state-actors security. This is keep-state-actors-from-noticing security. They know you're guilty, they'll get it. The XKCD version of password cracking works no matter how secure your hardware. But while states realistically can crack most anything it doesn't mean they can crack *every*thing. There are simply too many flash drives crossing the border every day. But there is a big flaw I see: 8g…

> But there is a big flaw I see: 8gb. You're carting around an 8gb flash drive these days??

What is the problem? I have promotional flash drives from 1 Gb up to 8 Gb, that I use to store music for my car, or to carry pdfs to print in shared printers. I don't care if they break or get lost. I know people that carry similar promotional items with similar capacities. What is suspicious about 8 Gb drives? Maybe the lack of external branding, like "SanDisk" or "Walmart"?

Re: My USB Drive Has a Hidden Encrypted Vault

#122
post #99

Earlier quoted context omitted.

If I was building a black box to detect hidden data on a USB stick, I'd include a feature whereby it measures power consumption and flags USB drives that don't consume the expected power for that type of drive.

What an unreasonably complex device to imply you’re going to make 50,000 copies of and ship out to every border agent in the nation after telling them every SINGLE flash drive crossing the border MUST be scanned. That’s so much wasted time, energy, and money. Are you building a similar device for SD cards? HDDs? SSDs? External drives? You’re going to build a database of exact charge draws for every device in existenc…

A complete USB voltmeter/ammeter costs $1.

https://www.alibaba.com/product-detail/MX17-Current-and-Volt...

Ignore the case and connector, on the basis that the circuit will be integrated into a larger scanner, and the cost will be substantially less. Most USB controllers already monitor current, so even the Law enforcement, airports and so on already boxes to scan USB devices. They don't use them for every USB drive, just those that they decide they have cause to scan.

Re: My USB Drive Has a Hidden Encrypted Vault

#124
Another day, another one of these projects.

>With Phantomdrive, hopefully you’ll slip past authoritarian government representatives, corrupt police, and anyone else that doesn’t respect basic encryption rights.

Apart from the SD card on the board making it obvious something is going on, and the iron bar comes out

Re: My USB Drive Has a Hidden Encrypted Vault

#125

Earlier quoted context omitted.

This isn't stand-up-to-state-actors security. This is keep-state-actors-from-noticing security. They know you're guilty, they'll get it. The XKCD version of password cracking works no matter how secure your hardware. But while states realistically can crack most anything it doesn't mean they can crack *every*thing. There are simply too many flash drives crossing the border every day. But there is a big flaw I see: 8g…

> But there is a big flaw I see: 8gb. You're carting around an 8gb flash drive these days?? What is the problem? I have promotional flash drives from 1 Gb up to 8 Gb, that I use to store music for my car, or to carry pdfs to print in shared printers. I don't care if they break or get lost. I know people that carry similar promotional items with similar capacities. What is suspicious about 8 Gb drives? Maybe the lack…

I found a 8GB USB drive in my pocket after doing the washing the other day (RIP).

I'd been using it to boot the debian installer from.

Re: My USB Drive Has a Hidden Encrypted Vault

#126
post #99

Earlier quoted context omitted.

I think part of the entire design is that it's quite hard to detect. 1: Reads/Writes are just routed to a COTS SD-card. 2: Unless the (correct?) password is detected in the write-data that starts the disconnect procedure. The only way to detect it from what I can see is to profile writes then append a "password:" string multiple times to measure the write-delay, only works if the CPU cost is large enough to overtake…

If I was building a black box to detect hidden data on a USB stick, I'd include a feature whereby it measures power consumption and flags USB drives that don't consume the expected power for that type of drive.

laughs in that flash drive I have that just gets hot instead of working

Re: My USB Drive Has a Hidden Encrypted Vault

#127
post #122

Earlier quoted context omitted.

What an unreasonably complex device to imply you’re going to make 50,000 copies of and ship out to every border agent in the nation after telling them every SINGLE flash drive crossing the border MUST be scanned. That’s so much wasted time, energy, and money. Are you building a similar device for SD cards? HDDs? SSDs? External drives? You’re going to build a database of exact charge draws for every device in existenc…

A complete USB voltmeter/ammeter costs $1. https://www.alibaba.com/product-detail/MX17-Current-and-Volt... Ignore the case and connector, on the basis that the circuit will be integrated into a larger scanner, and the cost will be substantially less. Most USB controllers already monitor current, so even the Law enforcement, airports and so on already boxes to scan USB devices. They don't use them for every USB drive,…

I'm confused here, what are you trying to detect?

You're not going to get the uA level of detection to be able to decipher between a R/W operation and some sort of crypto in the CPU with these cheap components.

Re: My USB Drive Has a Hidden Encrypted Vault

#128

Earlier quoted context omitted.

Try to explain how the hidden content would be found? It effectively doesn’t exist until the password is in place. It isn’t hidden, it isn’t connected at all.

I’m no expert but I can imagine a scenario where an x-ray scan can notice an SD card embedded into the controller and flag that for follow-up SD card the author says was added to offset the cost of eMMC but would presumably stand out as anomalous with whatever AI is classifying the scan

Yeah the SD card is going to be glaring for anybody with actual investigation into this device.

But saying that, the sheer amount of fake flash storage out there now, that's just a glorified USB-SD reader in a box.

Re: My USB Drive Has a Hidden Encrypted Vault

#129

Earlier quoted context omitted.

The xkcd approach worked in that case; the wrench in that case was legal, not physical, but boy would it have hurt nonetheless.

He deleted everything ultimately. He printed it out in ultra tiny font in order to comply, but it was nearly impossible for law enforcement to use it. The FBI never decrypted the files.

FBI = legal

Re: My USB Drive Has a Hidden Encrypted Vault

#130
post #40

Earlier quoted context omitted.

>If you're using off-the-shelf "hidden" encrypted volume schemes, you're not going to be evading state-level adversaries; This would evade 99% of them. Most "state-level" adversaries are just high school dropouts working border jobs told to "investigate suspicious things". I once had a police officer literally raid my room for drugs during a massive party we were throwing in university, for example. They took everyth…

I was arrested once and interrogated in great detail about how to access the data on a bluetooth usb dongle . Just to say, I know what you mean.

In court I had to explain how a TPM works, to the prosecution.....
Post reply on HN