Home News Forum Articles
  Welcome back Join CF
You are here You are here: Home | Forum | TrueCrypt Full Drive Encryption 'Hacked'


You are currently viewing our boards as a guest which gives you limited access to view most of the discussions, articles and other free features. By joining our Virgin Media community you will have full access to all discussions, be able to view and post threads, communicate privately with other members (PM), respond to polls, upload your own images/photos, and access many other special features. Registration is fast, simple and absolutely free so please join our community today.


Welcome to Cable Forum
Go Back   Cable Forum > Computers & IT > Security & Virus Discussion

TrueCrypt Full Drive Encryption 'Hacked'
Reply
 
Thread Tools
Old 31-07-2009, 10:56   #1
Raistlin
Been around a while ...
 
Raistlin's Avatar
 
Join Date: Feb 2004
Location: There's no place like 127.0.0.1
Services: Depends on the person and the price they're offering
Posts: 12,365
Raistlin has disabled reputation
TrueCrypt Full Drive Encryption 'Hacked'

Sort of.....

If you're running as Administrator, or routinely let unsavory types have physical access to your machine, then your TrueCrypt full drive encryption might not be secure

Basically some guy's developed a 'BootKit' that captures the initial authentication that you do to the encryption at boot time.

TBH, if you're the sort of person that worries about having full drive encryption, then you're probably not going to get caught by this. Still an interesting read though.

http://www.h-online.com/security/Boo...--/news/113884
__________________
Citroen Xsara Owners Club

Last edited by Raistlin; 31-07-2009 at 11:17.
Raistlin is offline   Reply With Quote
Advertisement
Old 31-07-2009, 11:23   #2
punky
Gone
Alpha Bravo Charlie Champion
 
Join Date: Jun 2003
Age: 31
Posts: 14,760
punky has a golden aurapunky has a golden aura
punky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aurapunky has a golden aura
Re: TrueCrypt Full Drive Encryption 'Hacked'

If you are going to allow physical access to the machine, then nothing can stop breaking the encyption. You can install a keylogger on the keyboard, or build it into the same model keyboard and swap it, then swap it back later. You can't do anything about that realistically.

For the most important senarios theft, remote intrusion, etc, this is useless.
punky is offline   Reply With Quote
Old 31-07-2009, 15:24   #3
DaiNasty
Old dog, New tricks
 
DaiNasty's Avatar
 
Join Date: Dec 2006
Location: Lincoln UK
Age: 63
Services: 50Mb, TV & Phone
Posts: 3,511
DaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronze
DaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronzeDaiNasty is cast in bronze
Send a message via MSN to DaiNasty
Re: TrueCrypt Full Drive Encryption 'Hacked'

Sounds a bit like the 'frozen ram' trick.

http://www.schneier.com/blog/archive...oot_attac.html

as Rob M says, if you have physical access then all bets are off.

Can't you just picture the Feds breaking down your door armed with cans of liquid nitrogen..
__________________
-= David =-

Under socialism ideology always trumps rationality.
DaiNasty is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Google Search




All times are GMT +1. The time now is 08:33.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
Copyright © 2003 - 2012, Cable Forum.
(server1.cableforum.co.uk)

SEO by vBSEO 3.3.2