Sponsored by Dragon Age: Origins
Follow the Dragon Age: Origins development team on Twitter view!
twitter.com/DragonAge - EA presents BioWare's new dark fantasy epic Dragon Age: Origins. '9/10' from Game Informer.
50 Comments
- AzureRise, on 01/16/2008, -0/+24Because people like learning how to do things?
- Berkana, on 01/16/2008, -2/+21The irony about open source encryption and how our government deals with encryption with idiotic ignorance is that you can't export the compiled code because encryption of any significant strength is regarded as a "munition", but you can export the source code as text, which is protected as free speech.
- tenenbaum, on 01/16/2008, -0/+18Wait for the new True Crypt 5 with Linux GUI scheduled for January 2008 http://www.truecrypt.org/future.php
- Andareed, on 01/16/2008, -3/+14I prefer encrypted LVM volumes. I have my home directory encrypted with my login password, and when I login it auto-mounts my home directory. I don't know of an Ubuntu-specific tutorial on doing this, but you can generally follow this: http://gentoo-wiki.com/HOWTO_Encrypt_Your_Home_Dir ... .
- kinghajj, on 01/16/2008, -0/+10The main point of TrueCrypt is that a TC volume is indistinguishable from random noise. You can make a volume out of "unallocated" hard drive space, and there's no way for anyone, be it corporation, agency or government to prove that there's anything there. This means that such an agency couldn't demand that you give up your encryption key, because there's no proof that there's anything encrypted.
- NeMoD, on 01/16/2008, -0/+10It's nice to feel secure
- OnymousHero, on 01/16/2008, -0/+9If you live in Britain then be sure to utilise the 'hidden' volume feature of Truecrypt, as our police-state laws now make it an offence not to hand over encryption keys when asked.
- inactive, on 01/16/2008, -0/+8Anonymity is not a crime!
- avisgoth, on 01/16/2008, -0/+6Better yet, don't even give the file an extension. Truecrypt doesn't need an extension to mount an encrypted file. And people, use strong encryption with keyfiles.
- DigitAl56K, on 01/16/2008, -0/+6True, although the rules were relaxed some years back, the US still has some crazy laws that seek to limit distribution of encryption products even though a Google search turns up hundreds of products instantly and lots of freely available source code.
- DrFriendly, on 01/16/2008, -0/+5I thought that those laws were lifted after PGP sourcecode was printed on paper, flown over to europe and OCR'ed back into a computer.
- glory, on 01/16/2008, -0/+5TrueCrypt has a built-in way to prevent key loggers to gain access to the encrypted volume by means of using key files. These key files can be anywhere on your harddrive, and it can be any file, for instance an mp3 in your music collection. This way knowing the password alone will not be enough to open up the encrypted volume.
- wisam, on 01/16/2008, -0/+4and private
- ExSlashdotter, on 01/16/2008, -0/+4TrueCrypt is great not only in Linux, but in Windows too. And Mac users, don't forget you can make encrypted .DMGs right from your Disk Utility (Applications->Utilities->Disk Utility).
- Ebulating, on 01/16/2008, -0/+4just pick a number, then apply some series of roots and logarithms and trig functions to it. For example, raise your birth year to the power of your age, then take the cosine of it. paste that number into trucrypt, then perform another function and paste the second number.There are endless ways to do it. Just use your imagination.
- DrFriendly, on 01/16/2008, -1/+4like I said in a post above, you can use keyfiles to protect (reasonably) against keyloggers.
Truecrypt really is quite easy to use, I've used it in Kubuntu from the commandline, and it worked fine for me, eventhough I'm a total linux-noob.
This GUI isn't endorsed by the developers, so I don't know how safe you are using it... - Polymathic, on 01/16/2008, -3/+6http://www.msnbc.msn.com/id/22672241/
Here is a link to an article related to this subject of data encryption that came out today on MSNBC. You may find it interesting, as it discusses a child pornographer who is refusing to give up his PGP password that will unlock his "Z" drive. It is a VERY interesting constitutional argument worth looking at if the subject of data encryption is of interest to you, as this should be a precedent setting case once decided. - ubuwalker31, on 01/16/2008, -0/+3I'm going to wait until the supported GUI comes out. Apparently, according to the help file, the gui has trouble with partitions.
- Andareed, on 01/16/2008, -0/+3I use pam_mount to mount the encrypted volume, which just uses the password I type in as part of the login process.
- ilovenicotine, on 01/16/2008, -1/+4..and ***** whining about how digg "sucks" in the comments. raynar, you are a failboat captain.
- cawpin, on 01/16/2008, -0/+3I'm hoping they actually stick with that release schedule. I've been waiting for an official GUI for 2 years now.
- Solkre, on 01/16/2008, -1/+3Considering what might be on that drive, I think the penalty for not giving up the password would be preferable.
- maino82, on 01/16/2008, -0/+2I realize that posting your exact method here would defeat it's purpose, but could you give an example? That sounds like an excellent way to produce a key that you can access from anywhere (having an encrypted laptop HD and forgetting my key which is on a USB key at home is one of the things that has made me hesitant to encrypt my stuff).
- Tenoq, on 01/17/2008, -0/+2This was one of two deal-breakers for me with Linux. Now I have only one.
Fantastic work - and yes, I want to digg this how-to guide. :p
Just have to wait for Miranda now - without WINE (under WINE it's as stable as a two-legged table) - MikeCerm, on 01/16/2008, -0/+2Check out TCExplorer. It allows you to access cryptainer contents without mounting or needing admin rights.
http://sourceforge.net/projects/tcexplorer/
http://www.portablefreeware.com/?id=1311 - oobuntu, on 01/18/2008, -0/+2that's laughable considering chickentonight just dugg a picture of a cat sitting on a chair
- Winston84, on 01/16/2008, -0/+2You can use TrueCrypt without admin-rights in Winblows if it was installed on the host by an Administrator ..
(or rather : if an administrator installed the driver truecrypt.sys) - thestaton, on 01/16/2008, -0/+1x2. that's a good sign if they are try to force him to give up the password. I can't remember what I had for breakfast last week, and if a password is 50+ characters oh welll.
- thestaton, on 01/16/2008, -0/+1How does this compare to OSX's file vault?
- BassJunkie, on 01/16/2008, -2/+3All my "hidden" data is stored on a seperate computer that I use for backups on my lan. I use WOL from my router and mount the share from the terminal! I then shut it down when I'm done with it. Simple and effective - admittedly not quite as elegant as this solution nor is it encrypted but it's hidden good enough for me :-D
- jjsk8r85, on 01/16/2008, -1/+2I've not used truecrypt with linux yet, but I've been using it for quite some time on an 8gb USB key of mine. It's kind of a fail safe, if I happen to lose my key, no one can access my data (at least most people who would steal a usb key). It's a pretty robust utility and I've not had any problems with it thus far. Only problem I've found is that you can't mount/dismount on XP without administrative privileges. Good thing I know the administrator's password at work :)
- possum, on 01/17/2008, -0/+1crap I've been rickroll'd
- Ebulating, on 01/16/2008, -0/+1I have a trick were I use the windows calculator to compute a formula involving roots, powers, and logarithms.. Dead easy way to generate a random-seeming 64-digit password. which is about 212 bits. Of course, I could just use a true hashing algo, but Windows calc is everywhere.
- DrFriendly, on 01/16/2008, -1/+2Are the checksums your password is compaired with (for login) secure enough though? I can see the convenience of mounting your volumes this way, but aren't you adding another vector for attack, why not just prompt for the volume-password after login?
Truecrypt also allows for the use of keyfiles (to protect against keyloggers), which can't be used from the login screen. - Hurricane, on 01/27/2008, -0/+1The judge backed up his rights and ruled that he could not be forced to incriminate himself.....still USA at this point.
http://www.pcmag.com/article2/0,2704,2236166,00.as ...
Truecrypt provides waaay more deniability than PGP. - amorangi, on 01/29/2008, -0/+14th February is the new release date
- inactive, on 01/16/2008, -0/+1If you have a mess of passwords to keep track of, you might consider KeePass: http://keepass.info/
Granted, if your password file gets compromised, all your accounts contained within are *****, but a lengthy and complicated master password as well as a key file on a separate medium (and not losing your media!) should do the trick. - Hurricane, on 01/27/2008, -0/+1Only a few days left and no 5.0 yet.
- ilovenicotine, on 01/17/2008, -0/+1ME == PWNED!
- Hurricane, on 01/27/2008, -0/+1That would not work since your age would change each year, making it impossible to come up with the password without remembering which year you made it in.
- plr4ever, on 01/16/2008, -2/+2Well played sir
- raynar, on 01/17/2008, -1/+1i love you.
- scrumpy, on 01/16/2008, -7/+7TrueCrypt - the porno vault. Plus - hidden volumes for your "tax returns."
memdump.txt the 4gb jewel in the root. - orev, on 01/27/2008, -0/+0Except that any law enforcement official who's heard of google will be able to find truecrypt and see that it has such a feature. Then they can keep you in jail forever because you didn't give them the hidden volume password... even if you didn't make a hidden volume. Have fun with that.
- Nimroy, on 01/17/2008, -1/+0Crypt your drivers, block the adds. Fight the capitalism
Any way possible. - armo, on 01/16/2008, -3/+2Digg should have an extra section for them maybe, its certainly not news.
- raynar, on 01/16/2008, -2/+1nothing on digg is news anymore. Its a top 10 list for worthless crap.
- thefinger, on 01/16/2008, -4/+1Are we talking mainly about hiding porn? If so, forget it. People already know.
- Andareed, on 01/16/2008, -8/+3If you need that level of security, then fine. I doubt the government would find any of my encrypted files interesting, but that's just me.
- chickentonight, on 01/16/2008, -28/+3I don't understand why people would digg a howto guide.


What is Digg?