Re:Show HN: HiddenVM – Use any desktop OS without leaving a ...
by cheztir on Thursday March 05, 2020 @03:09PM
(#22497606)
I think the original commenter was going for an encrypted copy-on-write setup, not some magical compressed fs. Just a base image (eg 50GB) with various encrypted delta images (1GB each) that are assigned to each user.
1. Each filesystem lives within an allocated area and knows not to overwrite its neighbors' data.
2. Some filesystems (the real ones) are privileged and know their actual allocated area. Others (the decoys) think they own areas of the storage volume that contain hidden data and therefore have the potential to overwrite the hidden filesystems if they are written to.
In the case of (1), you need to be able to explain why your computer has unallocated areas filled with pseudorandom data. That is never going to pass the plausibility test, imo.
In the case of (2), a lot of effort needs to be put into making the decoys look normal while not letting them overwrite the hidden data. There are a number of strategies you could use here that would work, but it will never be as convenient or simple as dual-booting and the more convenient you try to make it, the less innocent a hard drive will appear under close inspection.