Truecrypt

nospam writes:

> In article , Stefan Lindstrom
> wrote:
>
>> Lewis writes:
>>
>> > Now, if you mount the first volume with the arlo password, it
>> > will show up as a 100GB drive with, say, 70GB used and *TEN* GB
>> > free, right?
>>
>> Nope, your 20GB hidden data looks like free space if you haven't
>> entered the second password. Which means that if you mount only the
>> first volume and start using the system you risk overwriting your
>> plans for world domination.
>
> then is it a read-only image? otherwise, the second partition can
> easily be corrupted.

No, it's encrypted and looks like free space and will be treated as
free space (i.e. potentially overwritten) if you only mount the first
volume. The whole point with plausible deniability is that no one can
say that there even is a second volume hidden there unless they have
the password.

Of course, every time you use the first volume you should also mount
the second one. It's only when someone grabs your hard disk that they
shouldn't be able to find the second volume even after you've given up
the password to the first one.

I'm no expert at Truecrypt's workings, check their web site for more
info.

/Stefan
 >> Stay informed about: Truecrypt 

In article ,
Randy Howard wrote:
>On Thu, 7 Feb 2008 06:26:33 -0600, Stefan Lindstrom wrote
>(in article ):
>
>> Lewis writes:
>>
>>>
>>> Now, if you mount the first volume with the arlo password, it will
>>> show up as a 100GB drive with, say, 70GB used and *TEN* GB free,
>>> right?
>>
>> Nope, your 20GB hidden data looks like free space if you haven't
>> entered the second password. Which means that if you mount only the
>> first volume and start using the system you risk overwriting your
>> plans for world domination.
>
>That doesn't sound very secure at all.

It's secure, it's just not safe. You're not supposed to ever actually
use the outer volume; it's there in case you are forced to disclose
your passcode. At that point, in theory, you're willing to lose the
data rather than have someone find it.
--
There's no such thing as a free lunch, but certain accounting practices can
result in a fully-depreciated one.
 >> Stay informed about: Truecrypt