Slashdot Mirror

1. STFW
2. Drop Linux, it's useless for any practical purposes (and if it's useful now and then, use colinux)
3. In your nice Windows(TM) machine, use SafeBoot; it's a $20 quite decent and flawless full disk encryption
4. If you want to have virtual encypted disks, there's a myriad of options, one of them is DriveCrypt.
5. Piss off.

...then both share a common flaw: you have to unpack the container to work on the files within, and that leaves the unpackaged files open to interception.

I've been using ScramDisk to store my critical data. For those using a newer OS than I do, there is an updated version called DriveCrypt. Both gves you the choice of what sort of encryption to use and you can use up to four passwords on any given file. It also supports stegnography.

In short, I don't give a rats ass about what sort of encryption PKZIP or WinZip supports - if the file contains things I want protected, I'll zip it as normal and then drop it into a ScramDisk container.

why is this different from using drivecrypt plus pack+
aladdin usb token?

it works well. and im sure a quick stamp on the usb token would wreck it irreparably.

so hiding your message in something like word or excel is a waste of time because a tool like this veracity will detect the change.

I like scramdisk. A pity they've gone commercial but good they've done it in Europe.

so anyone else have a favourite (free & opensource?) encryption tool

One way to make the attackers task more difficult would be to encrypt the boot partition with an on-the-fly encryption program like drivecrypt pluspack or safeboot. Drivecrypt or Safeboot Admittedly, these sorts of programs won't prevent someone with physical access from shutting down the machine, but they will make data compromise more difficult.

Well, in the Windows world, users have a habit of storing data files..... everywhere. There are some good encyrption programs out there that encrypt/decrypt at the sector level such as DriveCrypt. Personally, I'd rather buy laptops with a couple hundred extra Mhz rather than lose a laptop with sensitive information. For OS X, GPG does me fine for those files I deem truly sensitive (of course, my Mac is a personal use only machine--not allowed on the corporate network).

A token can be easily misplaced, duplicated, or bypassed. A password is NOT a big deal to enter when you sit at your desk. If they're too lazy/clueless to enter a password, they shouldn't be responsible for any secret information.

Use a program like Scramdisk or the commercial version Drivecrypt. Keep all of your critical files on the encrypted partition. When you leave your desk, activate the screenserver with a keystroke.

Unless someone knows your password, you're safe. If they reboot, the encrypted disk is inaccessible.

What's the big deal?

DriveCrypt has options for quick-kill and hotkey unmounting of encrypted volumes, and since this looks like it does the same thing, only better, maybe they could look into making it erase or publish the contents of the encrypted volume after receiving a distress call from the user's pacemaker?
Now _there_ is a deadman switch!

I'm using DriveCrypt on my 16MB USB pendrive to store private/sensitive data in a virtual encrypted drive. I like this product because you can install the encryption drivers right on the USB pendrive itself and use it on any system without installing the encryption drivers. When mounting the the encrypted drive the driver asks for the password and I'm AOK as long as I don't share the encrypted drive.

If my pendrive is stolen I at least know that my private data is unusable.