News for hackers. Stuff that matters.
Re:The paranoid #! Security Guide by tehwalrus on Sunday July 14, 2013 @10:41AM (#6040968)
This guy references a very very long video about "why you shouldn't use TrueCrypt hidden volumes" - the relevant question and answer is about an hour in (57 mins will do it) - http://www.youtube.com/watch?v=HHoJ9pQ0cn8&t=57m
Re:The paranoid #! Security Guide by autodidakto on Sunday July 14, 2013 @02:48PM (#6041736)
TLDW: Appelbaum believes it's better to defend your fifth amendment right than to lie (EFF agrees, Assange doesn't). And in areas of zero freedom, it's better to have the ability to give up your password (plausible confession -- my term) than to have the adversary believe that there's a hidden volume they haven't beat out of you yet.

There's more to this long running debate, but that's the gist of Appelbaum's position.

My take: Plausible deniability gives you the option to defend the fifth, lie, or give up your data, but your confession may never be plausible. Which is better depends on the sensitivity of your data and the willingness of your adversary.

Re:The paranoid #! Security Guide by irahul on Sunday July 14, 2013 @03:24PM (#6041886)
> . And in torture friendly areas, it's better to have the option to give up your password and be killed quickly than to have the adversary believe that there's a hidden volume they haven't beat out of you yet.

How will giving up the password ensure there isn't 'another' hidden volume?

Re:The paranoid #! Security Guide by andrewcooke on Sunday July 14, 2013 @04:22PM (#6042101)
how does this change if you're not american (no fifth, presumably)? or entering the uk (where not giving up the password is a crime)?
Re:The paranoid #! Security Guide by gnosis on Sunday July 14, 2013 @06:51PM (#6042573)
To call this a "a very very long video about "why you shouldn't use TrueCrypt hidden volumes"" is not accurate and does not do justice to a very interesting talk.

First, Part 1 is only 1 hour and 17 minutes long (though perhaps it felt much longer to you).

Second, while the subject of TrueCrypt comes up a couple of times in the Q&A period, it's not the main subject of the talk. The talk is about privacy, anonymity, surveillance, and what can be done about them.

I highly recommend watching this video, especially for people who might not be up to date on all the latest privacy-enhancing technology or who might not be very aware of how much digital surveillance there is these days. Even if you do know about these things, it's still interesting to hear an intelligent, articulate presentation about them.

Re:The paranoid #! Security Guide by mpyne on Sunday July 14, 2013 @08:51PM (#6043000)
> First, Part 1 is only 1 hour and 17 minutes long

There is no such thing IMO as only 1:17 when referring to a presentation/talk. I tune out after about 10 minutes, 15 or so tops (e.g. for the git imerge discussion).

Anything that is so complicated that it requires that much exposition is something that I will read about or probably not find out at all.

Re:The paranoid #! Security Guide by tehwalrus on Monday July 15, 2013 @03:37AM (#6044205)
I agree - the article refers to it as such (or rather, says "if you want to know why you shouldn't use hidden volumes, watch this", which is crazy - I sat through an hour of obvious stuff for the one argument I wanted to hear! :/