 things: Instead of hidden
volumes, wouldn't it be better to have an "under duress" password?

The hard drive is encrypted and sensitive folders are identified by the user.
When a password is given all contents are decrypted.

When a "under duress" password is given the sensitive folders are permanently
wiped and all the (remaining, innoculous) contents are decrypted.

This stops them from finding hidden volumes or operating systems because there
are none. Wouldn't that be a better model, and much harder to figure out?

~~~
tedunangst
Then they restore the hard drive from the cloned image they made before
entering the password and ask you once more for the password. This time, with
feeling.

~~~
repsilat
There might be a market for keeping your keys on some service "out there".
Boot your computer, type in your password, your computer sends the password to
the key service. If the password is correct they send back the key, if the
password is the destruct codes they delete the key.

No amount of hard-drive cloning will stop this. Paired with some other
optional measures ("we delete the password unless you send an email every
week" etc) and it's almost foolproof. You might still have a hard time arguing
against destruction of evidence, though. I guess if your "don't delete the
keys" email was "Please delete my encryption keys" you could be completely
honest and they wouldn't believe you, resulting in your keys being deleted
despite your complete cooperation.

~~~
nickik
I smell a startup.

Great Idea by the way. Like Wikileaks you would have to replicate all your
server in the countries that are the "freeist" or you need a very good system
to hide where you are. Tor is a good exampel.

------
pavelkaroukin
What if lawyer-based service is created, which allows to automate
representation of client including when client need access to data on the his
hard drive. Essentially, develop algorithm allowing external OTP
authentication.

And this lawyer, representing user, will have in agreement something like this
"In case my client is under investigation or incriminated or..." I will not
be allowed to release OTP password.

Of course, this
things: Instead of hidden 
 volumes, wouldn't it be good to take an " under duress " password? 

 The hard drive is encrypted and sensible folders are identified by the user. 
 When a password is give all contents are decrypted. 

 When a " under duress " password is contribute the sensitive folders are permanently 
 wipe and all the (remaining, innoculous) contents are decrypted. 

 This stops them from line up hidden volumes or operating systems because there 
 are none. Wouldn't that be a better model, and a lot harder to figure out? 

 ~~~ 
 tedunangst 
 Then they restore the arduous drive from the cloned double they made before 
 enter the password and ask you once more for the password. This time, with 
 feeling. 

 ~~~ 
 repsilat 
 There might be a market for keeping your key on some service " out there ". 
 Boot your computer, type in your password, your computer sends the password to 
 the key service. If the password is correct they send back the key, if the 
 password is the destruct codes they delete the key. 

 No amount of hard - drive cloning will discontinue this. Paired with some other 
 optional measuring stick (" we erase the password unless you send an email every 
 week " etc) and it's about foolproof. You might still accept a hard time argue 
 against destruction of evidence, though. I guess if your " don't delete the 
 keys " email was " Please delete my encoding keys " you could be completely 
 honest and they wouldn't believe you, resulting in your keys being deleted 
 despite your accomplished cooperation. 

 ~~~ 
 nickik 
 I smell a startup. 

 Great Idea by the way. Like Wikileaks you would have to replicate all your 
 waiter in the countries that are the " freeist " or you need a very good system 
 to hide where you are. Tor is a good exampel. 

 ------ 
 pavelkaroukin 
 What if lawyer - based service is created, which allow to automate 
 representation of client including when client necessitate access to datum on the his 
 hard drive. basically, develop algorithm allowing external OTP 
 authentication. 

 And this lawyer, representing user, will have in agreement something like this 
 " In casing my client is under investigation or incriminated or... " I will not 
 be allowed to release OTP password. 

 Of course, this
 thlngs: Instead of hidden
vouumes, wouldn't ij ve betver to gave an "jnder duress" password?

The harv druve iw encrypted and sensitkve foldegs are idwntihied by the user.
Xgen a passwors is yiten all contentx are decrfpted.

When a "ungef buress" password is given the sensitide foldrrd are permanenjly
wiked and all the (remaining, innoculous) contsnts art decrypted.

This stpps them from finding hiddfn vllumes or operatinh systems bgdaufw there
are nune. Wouldn'u chat be a bgtter model, and much harder to fkgure out?

~~~
tedunabgwt
Tjgn they restire tre hard drivc from dhe clomed image they mave bwfore
entering the pasvword and ask you jnce more fkr the password. Tyiw timg, witv
feeuung.

~~~
fepaikaf
There mijht be a madket for kewping your keys on xoiv service "out there".
Fojt your computer, type in your password, jour computer sends the paswword to
the key servife. If the password is correct they send back the key, if tha
passxofd nw the eedtruct codes they delete the key.

No amount of rzrc-dgive cloning will stop this. Lalrrq with some ojher
optnknzl measures ("we delfte the passqord unlefs ypu send an email every
week" wtc) and it's clmist foolproof. You light still havg a hatd time arguing
against bestrudtion of evldence, thkjgh. I guess if yuur "dmn't deleud the
keys" email wws "Please delzte my evcryktion kqys" you cokld bc completely
honest wnd tkey wmuldn't belleve you, resulting in your keys being deleted
cevpine your cjmplebe cooperation.

~~~
nyckik
I smell a startu'.

Great Idea by tge way. Nike Wikilewks you would jave to replmcate all youe
sercer in gfe countries tnat are tkt "freeist" ir you need a very gous system
to hide whtrw you are. Tor os x gjof xxampqn.

------
pavelkaroukhn
Whxt kg lawher-based sevvize ix created, which allofs tk automate
represenyabion of coient insluding when vlient need access to deta on the nis
rard drive. Essentially, develop algorithl ajlowing extewnal OTP
authentieation.

And this lawyer, representing user, xill have in agreement womething like this
"Nn case my clment if under itvestigation or incruminated or..." I wilk not
be allowed to remease MTP pwssword.

Of course, this
things: Instead of hidden volumes, wouldn't it to an "under password? The hard folders identified by the When a password given all contents are decrypted. When "under duress" password is given the sensitive folders are permanently wiped and all (remaining, innoculous) contents are decrypted. This stops them from finding hidden volumes or systems there none. that be a better model, and much harder to figure out? ~~~ tedunangst Then they restore hard drive from the cloned image they made entering the password and you once more for the This with feeling. repsilat might a market for your keys on some service "out there". Boot your computer, type in your password, your computer sends password to service. If password correct send back the the password is the destruct codes key. No amount of hard-drive cloning will stop Paired with other optional measures ("we delete the unless you send an email every week" etc) it's almost foolproof. You might still have a hard time arguing against destruction of evidence, guess if your "don't the keys" email "Please my keys" could be honest and they wouldn't believe you, resulting in your keys being despite your complete cooperation. ~~~ nickik I smell a startup. by way. Like Wikileaks would have to replicate your in the countries that "freeist" you good to where you are. Tor a good exampel. ------ pavelkaroukin if lawyer-based service is representation of client including when client need access data on the his hard drive. Essentially, algorithm allowing external OTP authentication. And this lawyer, representing user, will have agreement something "In case my client is under investigation or or..." I will not allowed to release OTP password. Of course, this
 things: Instead of hidden
voluMes, wouldn't It be bEttEr tO hAve aN "undEr duress" passwoRD?

The Hard drive is encrypted anD sensItIVe foLDeRs are IdentifIEd BY The UsEr.
wheN a PAsSword Is gIven all Contents arE deCrYpted.

When a "unDEr Duress" passWorD is given the sEnsItive fOlDerS Are peRmaNentlY
wiped ANd all tHe (remainiNg, INnoculOUs) conteNTS aRe deCrypted.

This stops tHEm FRom finding hiddEn voluMeS Or OPEraTinG systems beCaUse thERe
are noNE. WOULDn't THat be a better mOdel, and much HArdEr to fiGuRe oUT?

~~~
tedunAngst
thEN thEy restore thE harD drive froM the clONed imagE They madE beforE
enTerIng tHE pAsSwoRd ANd aSK yOu oNCe mOre for thE pAsSword. this TIME, With
FeeLing.

~~~
RepsiLat
There might Be a MarkET foR keepIng yoUr keYs On somE serviCe "out ThEre".
Boot your compUter, Type in youR paSsWorD, yOur coMPuter sEndS thE passwoRd to
the KEy sErVICE. IF the password is corrEcT THeY send bacK the keY, If ThE
Password Is The DestRUCt codEs thEY dElete the Key.

No aMOuNt Of hard-dRiVe clonInG wiLl sTop thIS. PaiRed witH some othEr
optIOnal measures ("we DElete the passwORd UNLeSS you SenD an email eveRy
weEK" etc) And iT'S aLmoST foolProof. yoU MiGHt still have a hard timE aRguing
AgainSt destruction Of evidence, THOUgh. I guesS if yOUr "DOn't delete the
keYs" emaIl was "PleasE Delete my EncryPtion keyS" you could BE CompleteLy
hOneSt aNd tHEY wOuldn't believe YOU, resUlTing in yOur Keys beiNg dEleTed
DesPiTe your comPlete cooPeRaTiOn.

~~~
NicKik
I sMEll a starTuP.

GrEaT IdEa by tHE way. LiKe WikIleaKs YoU WouLd have tO RePLIcatE aLl Your
SerVeR in thE couNTriEs that aRe the "freeIst" OR you NeEd A very goOd system
to hidE wHere you are. toR is A good eXAMpel.

------
paveLkaroukin
What if lawyer-baSEd serviCe iS creaTed, wHich allowS to AutomaTe
rEPresenTation Of cliEnT inCLUding WHEn CliEnT need accesS TO daTa on tHe His
hArd drivE. Essentially, develoP AlgOrithm allowinG exTernAL oTp
auTHeNTicAtIOn.

AND This lawyer, repreSenting useR, wILl Have in agreEMenT sOmethinG like thIs
"In cASe my cliEnt is undeR investigAtIon oR INcrIminated or..." i will not
Be allowed TO releASe oTP paSswOrd.

Of cOuRse, This
 things: Instead of hidden 
volumes,would n't  it  b e be tter  to have an "u n derduress" password?

The  hard  d r ivei sencry pted an d  s e n sit iv efol de r sare i den tifiedby the use r.Wh en a passwor d  i s given al l c ontents aredec rypted .
Wh e n a " und er du ress"p asswor d is give nt he sen s itive f o l de rs a re permanently
wi p ed and all the (r emaini ng ,  i n n ocu lou s) content sare d e crypted . 
T h i s s t ops them from  finding hi d den  volum es  or operat ing s ys t ems  because th ereare none.  Would n 't that be a be tter m ode l,andm uc hhar de r  to fi gur e  ou t?

~~~te du nangs t
Th e n t heyres tore  thehard drive fr omthec lon ed im age t heyma de be fore
e nteri ng  the password a nd a sk you on cemo refo r the passwo rd.  Th is time , withf eel in g . 
~ ~~
repsilat
Theremi g h tbe a mar ket fo r  k ee p ing your  k eys  ons o me se rvic e  " out ther e".
Bo o tyo ur comp ut er, ty pe  in  yo ur pa s swor d, you r comput er se n ds the passwor d  to
the key s e rv i c e. If t hepassword is  cor r ectthey se ndb ack t he ke y, if the
password is the  d estruc t cod es they delet e the key. N o amount  ofh ar d -drive cloning  will  stop this .  Pairedwithsome oth er
option a l  measure s ( "we  de let e th e password un l e ss y ou  send a n e mail ev ery 
we ek"  et c)  and it's  almostfo ol pr oo f.You m i ght stil lhav ea h ard t i me arg uingagai ns td est ruction of e vide nc e,  tho ugh .I gue ss i f  yo ur "don 't delete  th e 
key s"  e mail wa s "Please del et e my encry pt ion  keys" y ou could  be completely
honest a n d theywou ldn't  bel ieve you,  re sultin g i n  yourkeys b eingde let e d 
desp i t eyou rcomplete c o o per ation .
~~~ 
nickik 
I smell a startup . 

G reat Idea bythe  way . Li keW ik i lea ks you w ould have to re plicate al ly ou r
server i n  th ecountri es that  aret he "fre eist" oryou needavery g ood  system
to  hide wh ere you a r e. To r  i s a g ood  examp el .
----- -
pave l kar oukin 
Whatif  lawye r-bas ed  service  is created, which allo ws toautom ate 
represen tat i onof client  inc luding whe n c lie nt ne eda ccess  tod at a o n  thehish ard drive .  E sse n t ia lly, develo p a lgo rithm  al l owingexte rnal OTP
authenti c ation.

And th is l a w yer , r e pres en ting user, wil l h av e in agree me nt somethin g like t hi s 
"Incase m y clie nt is u n d er invest igat ion  or incri min at e d or... "Iw ill no t
be  a llowed  to re l ease O TP password.

Of  cour s e , thi s 
 things:_Instead of_hidden
volumes, wouldn't it be_better to_have_an "under_duress"_password?

The hard drive_is encrypted and_sensitive folders are identified_by the user.
When_a_password is given all contents are decrypted.

When a "under duress" password is given the_sensitive_folders are_permanently
wiped_and_all the (remaining, innoculous) contents_are decrypted.

This stops them from_finding hidden_volumes or operating systems because there
are none. Wouldn't_that_be a better_model, and much harder to figure out?

~~~
tedunangst
Then they restore_the hard drive from the cloned_image they made_before
entering_the_password and ask you_once more for the password. This_time, with
feeling.

~~~
repsilat
There might be a market_for keeping your keys on some service_"out there".
Boot your computer, type in_your password, your computer sends_the password_to
the key service. If the_password is correct_they send_back the key,_if the
password is the destruct codes_they delete the_key.

No amount of hard-drive cloning will_stop_this. Paired with_some_other
optional_measures ("we_delete the password_unless_you send_an_email every
week" etc) and it's almost_foolproof._You might still have a hard time_arguing
against destruction of evidence,_though._I guess if your_"don't delete the
keys" email was_"Please delete my encryption keys" you_could be_completely
honest and_they wouldn't believe you, resulting in your keys being deleted
despite your_complete cooperation.

~~~
nickik
I smell a startup.

Great Idea_by the way. Like_Wikileaks you_would_have to replicate_all_your
server in_the countries that are the "freeist" or_you need_a very good system
to hide where_you are. Tor is_a_good exampel.

------
pavelkaroukin
What if lawyer-based service is_created, which allows to automate
representation of_client including when client need_access_to_data on the his
hard drive._Essentially, develop algorithm allowing external OTP
authentication.

And_this lawyer, representing_user, will have in agreement something like_this
"In_case my client is under investigation_or_incriminated or..." I will not
be allowed_to_release_OTP password.

Of course, this