News for hackers. Stuff that matters.
Re:BusKill – A USB kill cord for laptops by kortilla on Wednesday December 15, 2021 @09:07AM (#29566093)
The only problem is this is sort of obvious from a forensics perspective. Person is using truecrypt, they boot it up for you, and the partition is only half the size it should be.
Re:BusKill – A USB kill cord for laptops by gambiting on Wednesday December 15, 2021 @11:09AM (#29567926)
No, like the other reply pointed out too - it's not obvious. The first password unlocks the entire partition, the hidden one is just within the "empty" area of the drive. If you write a sufficiently large file while running the OS you could just overwrite and destroy the hidden partition without knowing that you did so. It's also impossible to tell that the hidden parition is there because encrypted data is indistinguishable from encrypted empty area of the drive.
Re:BusKill – A USB kill cord for laptops by ASalazarMX on Wednesday December 15, 2021 @12:37PM (#29569072)
Since Truecrypt bailed without explanation, do you know if Veracrypt also has this feature?
Re:BusKill – A USB kill cord for laptops by somehnguy on Wednesday December 15, 2021 @01:34PM (#29569836)
It does. Veracrypt is basically Truecrypt with some new features as far as I've been able to tell.
Re:BusKill – A USB kill cord for laptops by mPReDiToR on Thursday December 16, 2021 @01:21PM (#29581737)
After TC killed the project (for all intents and purposes) is there the ssme level of trust in VC?
Re:BusKill – A USB kill cord for laptops by gambiting on Thursday December 16, 2021 @04:38PM (#29584300)
The question always was what kind of attack are you trying to guard yourself against. I imagine top level agencies have a way to crack truecrypt/veracrypt encrypted volumes, but I also imagine they aren't using that capability against just anyone to not show their hand and risk the issue being fixed.
Re:BusKill – A USB kill cord for laptops by JadeNB on Wednesday December 15, 2021 @09:12AM (#29566158)
Your parent seems to point out that's not how it works: you've got access to the ful partition either way, meaning you can accidentally overwrite the other partition.
Re:BusKill – A USB kill cord for laptops by alias_neo on Wednesday December 15, 2021 @11:04AM (#29567865)
If I remember right, the hidden partitions are indistinguishable from random data on your disk and it was necessary to provide an offset to the first block (or whatever) so it could be decrypted. You could easily overwrite it accidentally because it just looks like free space.