Re: To the Experts: Thoughts on TrueCrypt?



Chris Lawrence wrote:

On Thu, 8 Jun 2006, TwistyCreek wrote:

flawlessly you keep pretending it will. You're right, since it's not
magic software it can't account for judges and juries believing beyond a
reasonable doubt that you have a hidden container, thus it will fail in
some number of scenarios greater than zero.

However that mode of failure is exactly the same for normal TrueCrypt
volumes too. It is not a failure of TrueCrypt in either case. Normal and

If you had been paying attention you'd realize nobody ever said it was.
It's a failure of the entire concept of hiding something when it might be
made obvious for a number of reasons that it exists, the fact that
operating systems will contain clues about its existence, and the fact
that by the very nature of most "computer crime" investigations the
knowledge that data should exist will most often be a factor.

If you had been paying attention you MIGHT have noticed that some of us
had even described scenarios where Truecrypt's hidden volumes would NOT
fail. Like when a computer is seized opportunistically, or without any
prior knowledge of the existence of any particular data.

It comes down to whether or not you are
believed when you claim to be unable to open any possible volume.

This is exactly what we've been saying all along. That the "hidden" part
is mostly snake oil and it boils down to who is best able to convince a
judge or jury they're telling the truth. You have a slightly better chance
of convincing your peers there's no hidden volume than you do of
convincing them you forgot your password, but all other things being equal
it's not that much of an advantage in many or even most real world
scenarios.

.



Relevant Pages

  • Re: To the Experts: Thoughts on TrueCrypt?
    ... magic software it can't account for judges and juries believing beyond a ... reasonable doubt that you have a hidden container, thus it will fail in ... Even if you had ideal and perfect steganography, ... It would not work for you for one of the following reasons: ...
    (alt.privacy)
  • Re: black ice usage question
    ... > reasons for or against me making this switch? ... but any FW will fail a test if not configured properly. ... PING test was initiated/solicited by the computer BI was on. ... on the Internet from behind the Linksys router using the DMZ of the router. ...
    (comp.security.firewalls)
  • Re: Fast User Switching triggers "Access is Denied" for StretchBlt()
    ... it doesn't say RASTERCAPS/RC_STRETCHBLT, StretchBlt will fail. ... > graphics API or pointer API (and any window API that uses thos things ... > reasons, which is the whole point of having error returns, so that you can ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Intelligence - one of degree?
    ... > One of the reasons I suspect you fail to see any ... > hope in something as simple as my network design, ... The reason I fail to see any hope in your current net ...
    (comp.ai.philosophy)
  • Re: Ministers are to consider making it illegal for teenagers under the age of 16 to have oral sex
    ... it may interest you to know that some judges ... warn juries to avoid such bias, as that is not the issue. ... deciding whether or not the photograph was indecent, ... Sorry but I won't be clicking on that site for obvious reasons. ...
    (uk.legal)