Comments on: The Hidden Shadow http://blog.szynalski.com/2009/11/22/the-hidden-shadow/ Things I've learned, published for the public benefit Wed, 14 Jul 2010 21:17:16 +0000 hourly 1 http://wordpress.com/ By: a http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-165 a Wed, 25 Nov 2009 02:44:06 +0000 http://tszynalski.wordpress.com/?p=155#comment-165 BitLocker isn't flawed. Any machine with physical access can be compromised. COFEE can be used if the machine is still online before it is turned off to try and extract the encryption keys. And TrueCrypt FDE can be broken if someone can get an Evil Maid onto it, last I heard. These are just acceptable risks. BitLocker isn’t flawed. Any machine with physical access can be compromised. COFEE can be used if the machine is still online before it is turned off to try and extract the encryption keys. And TrueCrypt FDE can be broken if someone can get an Evil Maid onto it, last I heard. These are just acceptable risks.

]]> By: Tomasz http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-157 Tomasz Mon, 23 Nov 2009 12:14:04 +0000 http://tszynalski.wordpress.com/?p=155#comment-157 There is a way to exclude certain folders by means of a fairly obscure registry setting. I will cover this in my mini-FAQ on Volume Shadow Copy, which I'll be writing tonight. VSC is a pretty cool feature from a technological point of view. There is a way to exclude certain folders by means of a fairly obscure registry setting. I will cover this in my mini-FAQ on Volume Shadow Copy, which I’ll be writing tonight. VSC is a pretty cool feature from a technological point of view.

]]> By: daveyt http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-156 daveyt Mon, 23 Nov 2009 09:31:01 +0000 http://tszynalski.wordpress.com/?p=155#comment-156 Did someone just tamper/interfere with the computer? oops, that laptop just became inadmissable. Did someone just tamper/interfere with the computer? oops, that laptop just became inadmissable.

]]> By: Mark http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-154 Mark Mon, 23 Nov 2009 05:40:53 +0000 http://tszynalski.wordpress.com/?p=155#comment-154 @Paul: BitLocker is flawed. lol It can be hacked using Microsoft's own COFEE tool. Also, you can disable volume shadow copies manually ;) @Paul: BitLocker is flawed. lol It can be hacked using Microsoft’s own COFEE tool.

Also, you can disable volume shadow copies manually ;)

]]> By: Infestedtassadar http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-152 Infestedtassadar Mon, 23 Nov 2009 03:36:13 +0000 http://tszynalski.wordpress.com/?p=155#comment-152 To start off with, why wasn't he using FDE (full disc encryption, that truecrypt offers) vs a file container and the machine turned OFF? They cant force you to give the password (see the 5th amendment.) Ether way, the contents of his laptop more then likely wont be admissible in court, as the data on the machine is in a state of modification once the machine receives power. The officers should of performed a dump of the data in ram and pulled the power to the machine. To start off with, why wasn’t he using FDE (full disc encryption, that truecrypt offers) vs a file container and the machine turned OFF? They cant force you to give the password (see the 5th amendment.)

Ether way, the contents of his laptop more then likely wont be admissible in court, as the data on the machine is in a state of modification once the machine receives power. The officers should of performed a dump of the data in ram and pulled the power to the machine.

]]> By: Paul Whitaker http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-151 Paul Whitaker Mon, 23 Nov 2009 03:07:22 +0000 http://tszynalski.wordpress.com/?p=155#comment-151 Why not just encrypt the entire drive with Bitlocker? Why not just encrypt the entire drive with Bitlocker?

]]> By: tony http://blog.szynalski.com/2009/11/22/the-hidden-shadow/#comment-150 tony Mon, 23 Nov 2009 02:19:32 +0000 http://tszynalski.wordpress.com/?p=155#comment-150 haha. This is good story-stelling, although I like this feature (seems like a semi VCS), but there should be a wait to disable some folders or files if not, that is a lot of waste of disk space for every folder and file. haha. This is good story-stelling, although I like this feature (seems like a semi VCS), but there should be a wait to disable some folders or files if not, that is a lot of waste of disk space for every folder and file.

]]>