Slashdot Mirror

http://feraga.com/node/94 - why not use this instead on any key...

Encrypting your hard drive is a good step for most users but not for criminals or someone with anything to hide from the government.

With an encrypted hard drive, the government will simply jail you until you give them the keys to decrypt the drive. Same problem for using GPG or PGP to encrypt files. They can generally afford to wait longer than you can.

To protect yourself, you need use some subterfuge. If I had something significant to hide, I would run a normal install on the installed hard drive (probably as it came from the vendor) which I would use for non-secret surfing, etc. Then I would use a USB hard drive with a encrypted fully installed OS (like this howto) on it for anything secret. When I needed to do secret stuff, I'd plug in the USB key, reboot, do what i needed to, then reboot to the "clean" OS when I was done. Then hide the USB key.

With a little luck, if/when you get arrested they won't find the USB key. If they do, then you're back at the original problem but at least you can decide whether to give them the password or remain in jail for contempt.

The first thing I would do is build a self-contained Debian install, then you can add any tools from the Debian repositories with a simple apt-get.

For examples of how to install and configure everything check out the Howtos and Automated Installer at Feraga.com.

The first thing I would do is build a self-contained Debian install, then you can add any tools from the Debian repositories with a simple apt-get.

For examples of how to install and configure everything check out the Howtos and Automated Installer at Feraga.com.

Lets face it, it is just not possible to enforce this kind of law.

With Onion Routing Networks, Mixmaster Type II Anonymous Email, GPG/PGP Type I Anonymous remailers , and bidirectional encrypted anonymous e-mail addresses that can deliver to a news group
Add to this the use of unsecured 802.11 networks and there is just no way to stop a person that truly wants to be anonymous on the internet.

Unfortunately most do not know how to use them, so most of the internet is only sudo-anonymous.

For anyone that wants to experiment with Debian, DM-Crypt and Luks, check out the howtos and/or the USB installer at http://feraga.com./

I've been running lately from a USB Flash Drive (1GB) with everything but /boot encrypted for over a year and haven't had a issue. I'm sure its a little slower but dont notice it much.

This also allows you to leave a full installation with no private or incriminating data on the hard drive so if they ask to see the laptop......just let them.

I've been running linux from an encrypted USB stick for a while (as discussed on http://feraga.com/node/30 ) and it works fast enough for everyday use. Just make sure you buy a real USB-2.0 Stick.

Or a full version of Debian with encrypted partitions.

Check out: http://feraga.com/node/30