Re:Ask HN: Any startups working to capitalize on the coming ...
by enterthemist on Wednesday July 17, 2013 @11:02AM
(#6058025)
> I'm under no doubt whatsoever that if the NSA show up and grab all my hardware, and wave their $5 wrench menacingly, I'll give them all the keys/passphrases they ask for.
True enough, but we could also implement a duress code which would wipe data of your choosing and unlock the rest. There has also been some research into learned passwords (passwords which you dont consciously know, but rather exist in a mannerism of yours. e.g. the path your eyes take when trying to read some lines of code). That aside, no solution today protects against this including your truecrypt partition.
> I'm "sure enough" though, that they can't read my EncFS/GPG/TrueCrypt protected data without me knowing about it.
If they plant malware on your computer (without you knowing about it) would you still be so sure?
True enough, but we could also implement a duress code which would wipe data of your choosing and unlock the rest. There has also been some research into learned passwords (passwords which you dont consciously know, but rather exist in a mannerism of yours. e.g. the path your eyes take when trying to read some lines of code). That aside, no solution today protects against this including your truecrypt partition.
> I'm "sure enough" though, that they can't read my EncFS/GPG/TrueCrypt protected data without me knowing about it.
If they plant malware on your computer (without you knowing about it) would you still be so sure?