Encryption Question = Truecrypt - GoFuckYourself.com

mkx · 12-28-2007, 06:14 AM

So I dropped my harddrive filled with unedited content, id's, etc. that I wouldn't want in the wrong hands. I took it back to the store I bought it from to get fixed but instead of fixing it they just gave me a new one. I had the whole drive encrypted with TrueCrypt. Providing they don't try to crack the password is my data private if Western Digital decides to try to fix my drive and take a look inside?

kmanrox · 12-28-2007, 07:18 AM

i'm no expert but I'd say you're alright.

a1ka1ine · 12-28-2007, 07:21 AM

as long as you didnt use a 3 character password your cp is safe! haha j/j

a1ka1ine · 12-28-2007, 07:24 AM

but seriously, truecrypt data just looks like random numbers and stuff, cracking 256bit aes/twofish encryption shouldnt be possible by a home user for like 25 years the amount of processing power that would take. if you have a short (under 20 chars) password try and make them longer next time but still you will be fine stop worrying :D

V_RocKs · 12-28-2007, 07:29 AM

Should be just fine. They most likely will send it to the manufacturer who will then confirm it is dead on either repair it, low level format it and sell it, or they will destroy it.

Validus · 12-28-2007, 01:46 PM

I love TrueCrypt

u-Bob · 12-28-2007, 02:20 PM

Quote:

Originally Posted by Validus

I love TrueCrypt

same here

mkx · 12-28-2007, 10:06 PM

so even the feds can't decrypt this stuff unless they crack the password? they can't force truecrypt to help unencrypt it? the password must be stored somewhere, I am sure truecrypt can get it, no?

sortie · 12-28-2007, 10:44 PM

Quote:

Originally Posted by mkx

so even the feds can't decrypt this stuff unless they crack the password? they can't force truecrypt to help unencrypt it? the password must be stored somewhere, I am sure truecrypt can get it, no?

Any repair person would be a fool to not immediately blank the hardrive. Avoid any possible accusation that they used any information from the computer in anyway, should be the rule if they want to keep their job and stay out of jail.

Think about it like this: you get a computer to work on then crack the password and find a crime. You are in trouble if you admit you cracked the password and you are in trouble if you don't report the crime.
Lose/lose on that one.

a1ka1ine · 12-29-2007, 03:06 AM

Quote:

Originally Posted by mkx

so even the feds can't decrypt this stuff unless they crack the password? they can't force truecrypt to help unencrypt it? the password must be stored somewhere, I am sure truecrypt can get it, no?

the password isnt stored anywhere, the data is scrambled according to your password, you can try unscrambling it with any other password but it will all be garbage until the right password is used, which is why using a long password is good

rowan · 12-29-2007, 01:20 PM

The only way a used hard drive leaves here is in pieces. It was more fun shotputting the older 5 1/2" drives but even the little 3 1/2" ones make a bit of a clatter when they hit the concrete!!

12-28-2007, 06:14 AM	#1
mkx Confirmed User Industry Role: Join Date: Nov 2003 Location: Toronto Posts: 4,001	Encryption Question = Truecrypt So I dropped my harddrive filled with unedited content, id's, etc. that I wouldn't want in the wrong hands. I took it back to the store I bought it from to get fixed but instead of fixing it they just gave me a new one. I had the whole drive encrypted with TrueCrypt. Providing they don't try to crack the password is my data private if Western Digital decides to try to fix my drive and take a look inside?

12-28-2007, 07:18 AM	#2
kmanrox aka K-Man Industry Role: Join Date: Oct 2001 Location: The Gutter Posts: 29,295	i'm no expert but I'd say you're alright. __________________ Crypto HODLr Crypto mining Angel investor

12-28-2007, 07:21 AM	#3
a1ka1ine Confirmed User Industry Role: Join Date: Apr 2002 Posts: 3,387	as long as you didnt use a 3 character password your cp is safe! haha j/j

12-28-2007, 07:24 AM	#4
a1ka1ine Confirmed User Industry Role: Join Date: Apr 2002 Posts: 3,387	but seriously, truecrypt data just looks like random numbers and stuff, cracking 256bit aes/twofish encryption shouldnt be possible by a home user for like 25 years the amount of processing power that would take. if you have a short (under 20 chars) password try and make them longer next time but still you will be fine stop worrying :D

12-28-2007, 07:29 AM	#5
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,422	Should be just fine. They most likely will send it to the manufacturer who will then confirm it is dead on either repair it, low level format it and sell it, or they will destroy it.

12-28-2007, 01:46 PM	#6
Validus Confirmed User Industry Role: Join Date: Jul 2001 Location: Calgary, Canada Posts: 4,012	I love TrueCrypt

12-28-2007, 10:06 PM	#8
mkx Confirmed User Industry Role: Join Date: Nov 2003 Location: Toronto Posts: 4,001	so even the feds can't decrypt this stuff unless they crack the password? they can't force truecrypt to help unencrypt it? the password must be stored somewhere, I am sure truecrypt can get it, no?

12-29-2007, 01:20 PM	#11
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	The only way a used hard drive leaves here is in pieces. It was more fun shotputting the older 5 1/2" drives but even the little 3 1/2" ones make a bit of a clatter when they hit the concrete!!