Silk Road forums
Discussion => Security => Topic started by: Smarties on July 06, 2013, 02:00 pm
-
I've just had an extremely unamicable split with my partner of six years. She's very bitter, has cut a load of my clothes up, and has already been down the police station telling them things about me. The things she says she's been telling them are not drug related but I can not be 100% sure so need to protect myself and my laptop.
I already know about Truecrypt but a while ago I also saw a thread talking about a programme that will abliterate everything on your hard drive by writing 1's or 0's all over it or something like that. Anyone know what it's called?
I've also been reading rumours that Truecrypt can now be cracked. Any truth in these?
Any help is desperately appreciated. She's being a proper bitch and wants me done for anything she can.
-
The program is called DBAN, burn it to a disk and run it. Or you can encrypt the drive with Truecrypt which secures it and also does a secure erasure before encryption if you wish. I'd personally recommend just getting rid of the drive and laptop all together, dump it somewhere miles from your house after doing some basic wipes or encryption if you think you have the time and doing a complete house wipedown.
-
Regarding TrueCrypt being cracked, that is untrue, but it doesn't mean they can't find out your password, infect the computer with malware etc to circumvent the encryption.
-
you can also use CC clean to wipe a hard drive or Eraser-- both free
-
I do remember some students at a university were able to crack some truecrypt encryption method.. but I would not worry about that. Just use truecrypt how the program explains itself.
About people informing the police about somebody: if it's just her then they probably think she is very annoying since they can't do anything anyway with information of one person. Or think she's a borderliner ;)
But it's always good to encrypt your stuff (and remember the password later on or else you will have lost all your data...).
Good luck.
-
First and foremost: I have to agree with the above. If this is time sensitive, you need to place that laptop somewhere far away.
If not, do you know where sensitive information is stored on your computer? E.G. the folders? If so, save time and download Eraser or Bleachbit. Run it on these folders.
Truecrypt can't be cracked as of now by virtue of the algorithms not being able to be cracked. Furthermore, if you make a secret partition, they can't tell which is the real one.
Note, if you aren't already truecrypted, you can't really do it now as all your data will be deleted with the formatting I believe.
If you are a vendor, I recommend physically relocating the device somewhere with DBAN to run overnight. When it is done, it is safe.
-
Might want to get a new hard drive and install/encrypt that. Make it bigger than the one you've already got and consider it an upgrade to get more space. After she cools down you won't need to have worry about anything occurring with your laptop, you'll be more security conscious, and you'll have a bigger hard drive.
-
Te rumors that TryeCrupt can be cracked are not true.
A TC volumes unencrypted key will be stored in RAM as long as the volume is mounted. This is mentioned in the TrueCrypt documentation: http://www.truecrypt.org/docs/unencrypted-data-in-ram
It is possible to dump the content of RAM, or use a DMA (direct memory access. Exposed via ie: fw or thunderbold port) hack to extract the key (or even freeze the computer and physical move the RAM chips to another computer as the chips keep their state for a few seconds after begin disconnected from power if below a certain point).
However, all these methods require physical access to the machine, and that the volume is already mounted when they get it.
If you unmount you volumes whenever you leave the machine you should be safe. The true crypt file format is basically nothing but random noise and has no no other known attack vector than brute force.
In conclusion: Use good long passwords and unmount your volumes whenever they are not in use and you should be safe enough.
-
you can also use CC clean to wipe a hard drive or Eraser-- both free
What?! ummm nooo CC clean? really is that what we've become now?
-
The only near 100% true way to erase all the data is to have it replaced with other data. Even using a program like Dban doesn't mean everything will be wiped clean.. even says that on there site. Still Dban is a great choice and it's free. There's a paid service and I believe it's linked on the DBAN site that says it's 100% foolproof.
If it were me I'd probably use Dban to wipe, reinstall the OS and do it a couple of more times for good measure. Go through the registry files, system files and things like that to trace any left over information. Windows is notorious for leaving all kinds of junk and evidence on your computer even after wiping or uninstalling files and programs. Other option you could use DBAN and if you were using windows install a Linux suite like Ubuntu which should theoretically overwrite any left over window files or registry files.
-
I've just had an extremely unamicable split with my partner of six years. She's very bitter, has cut a load of my clothes up, and has already been down the police station telling them things about me. The things she says she's been telling them are not drug related but I can not be 100% sure so need to protect myself and my laptop.
I already know about Truecrypt but a while ago I also saw a thread talking about a programme that will abliterate everything on your hard drive by writing 1's or 0's all over it or something like that. Anyone know what it's called?
I've also been reading rumours that Truecrypt can now be cracked. Any truth in these?
Any help is desperately appreciated. She's being a proper bitch and wants me done for anything she can.
How many times does it need to be said, my friend? You do not trust anyone with anything relating to the underground world. Girlfriend or wife, closest friend or brother, they will all sell you out for the right price. But who could blame them? It is easy to say you would not say anything when you are NOT staring down the barrel of 10+ years. Many people have no idea what this is like - one who has not been through it could only imagine the mental insanity one goes through. You need to make these decisions for your loved ones before they get you into trouble. No human being should be trusted with your life or freedom. You can only trust yourself, because you are the only one who truly gives a damn about yourself at the end of the day. Never trust a man because he says he loves you, and certainly never trust a woman just because she fucks you and keeps you company. Plenty of people have had issues with their own mothers selling them out (myself included). Most women are weak snakes. Most men are snakes in dog costumes. Look out for yourself, friend. In this world, if you cannot do that, you simply cannot be free.
-
sure it wasnt a silk road friend :-X
-
Look out for yourself, friend. In this world, if you cannot do that, you simply cannot be free.
Just quoting this in case OP skipped over it.
-
Take a hit out on her on BMR and keep the computer :)
Fuck rats.
-
http://www.dban.org/download
run it overnight.
-
Use DBAN. Or encrypt everything with DiskCryptor using a long passphrase with keyfiles. The data will be lost forever either way.
-
This thread is rife with misinformation about TrueCrypt.
1 - Yes, you CAN use TrueCrypt on a drive with information already on it, TC will securely Guttmann wipe the original data and then encrypt it. It just takes 50 times longer than if the drive was empty.
2 - Yes, TrueCrypt CAN be cracked with a program that is freely downloadable from TPB, if you use a short easy to remember password for TrueCrypt it can be Brute Force cracked in no time at all, by one CPU, let alone a cloud service of hundreds of thousands of CPUs that LE undoubtedly have access to. The longer your passphrase, the longer it takes to be cracked by any amount of hardware.
LE can also disect your Windows hibernation file for TrueCrypt header algorithm keys which can give them access, so if your computer has hibernated while you have a TrueCrypt volume mounted, i'd suggest you liquify your HDD/SDD with a blowtorch, buy a new one and not use any Windows Hibernation in the future.
Really, I will suggest that nobody uses any form of Microsoft products ever again (did you hear that Bill?). XBOX included. Windows OS especially. Go with Tails, it doesn't track your movements or leave footprints & it fits on a thumb drive.
-
Don't worry about it. The chances of your computer being seized based on the questionable testimony of an emotional ex are pretty slim. If you're really worried just park the laptop somewhere else for a while & pick up a used one to pass off as your own.
If you do get a visit, just stay cool & you'll be fine. She's going to come off like the unhinged vindictive gf while your only crime will be having put up with her for so long. Just explain that she's a pathological liar & that she's taking the breakup a little hard. Then show them some of your sliced up clothes & ask them whether they'd advise a restraining order - or (even better) just tell them she's got a drug habit & she's been using your machine to order shit in your name & that's the reason you broke up. ;)
-
The police have better things to do than take the side of some pissed off ex-girlfriend. Let her inform away, it's not credible unless she has some kind of evidence. She better be careful too, because if you have been doing illegal shit and she ignored it then she is just implicating herself in the whole mess by ratting you out. Idiot is going to get herself thrown in jail right along with you, if she manages to even get their attention.
-
Hopefully, she will get herself thrown in jail instead of you.
I bet most LEOs are totally repulsed by such "scorned girlfriend" cases and assume she is just as guilty as you.
I wouldn't worry unless you have a lot if traffic.
Need to replace laptop hard drive, install new OS, and thermite the old drive.
(Okay, I like thermite & it's effective.)
Stay safe.
-
Might want to get a new hard drive and install/encrypt that. Make it bigger than the one you've already got and consider it an upgrade to get more space. After she cools down you won't need to have worry about anything occurring with your laptop, you'll be more security conscious, and you'll have a bigger hard drive.
You do realize that not only the serial number of the drive, but the file which holds how many times the drive has been active/duration can be accessed....I would just toss the laptop instead of making your self look suspicious with the new disk. Just say you were angry and smashed it over the breakup.The police will use ex gf's info to initiate or further investigations. Yes, the girl could be implicated as a conspirator, but charges will be unlikely especially with the vindictive bitch testifying....
-
Thankfully nobody has come yet but she's still trying to mess me about big time.
If I did a DBAN wipe of the HDD before chucking it and upgraded to a bigger drive would this be OK? Would there be anything incriminating stored anywhere else such as on the RAM memory etc?
Fortunately I'm not a vendor and I did try and keep my SR activity quite from her but a while back she got suspicous after seeing parcels from overseas being delivered that she opened one once while I was at work and saw what was in it. The bitch!
-
If I did a DBAN wipe of the HDD before chucking it and upgraded to a bigger drive would this be OK? Would there be anything incriminating stored anywhere else such as on the RAM memory etc?
That'd do. The RAM is irrecoverable as soon as it loses power, so while changing the HDD you'd lose anything. Good luck
-
under what circumstances are police allowed to open your laptop and snoop around? what if its password protected - are they allowed to hack past this under the same or different circumstances?
-
If I did a DBAN wipe of the HDD before chucking it and upgraded to a bigger drive would this be OK?
Yes. No need to blowtorch it, smash it with a sledgehammer, or liquify it with thermite. ::)
Would there be anything incriminating stored anywhere else such as on the RAM memory etc?
No. You're right to be cautious, but unless you're buying or selling massive amounts of shit then there's no way in hell that LE would be able to recover anything of value.
under what circumstances are police allowed to open your laptop and snoop around? what if its password protected - are they allowed to hack past this under the same or different circumstances?
Only with a warrant. Or if the cops bust in and see your laptop just sitting there with no password protection, they may be able to rifle through it depending on where you are (or will anyway and say that the evidence was legally acquired when it was anything but). ALWAYS use password protection and full disk encryption.
-
http://www.dban.org/download
run it overnight.
One thing i have experienced with DBAN is that often it will run with some unspecified errors. I recently had to clean all my HDs and after running DBAN while the HDs were apparently clean, the prompt after the program executed was "run with some errors." When i used a commerically available product to test whether any data could be pulled from the deletede HDD i was able to pull up some file names. I could not find any actual content to go along with them, but some artifacts remained. DBAN is open source.
Why don't you just get a new HDD? if I were in jeaopardy of getting a call from LE i would not hesitate to just destroy the HDD and get a new one.