Practical whole disk encryption, or, how to frustrate data forensics.

When you get right down to it, the best way for an attacker to get hold of your data is to shut the box down, pull the drive, and rip a sector-by-sector image to analyze offsite. It might not be quick (depending on the speed of the hard drive, speed of the storage drive, and a number of other factors) but if you're not there when it's done you might not know that it ever happened. However, if you encrypt data at the level of the drive, they can copy the drive all they want but they won't be able …

Read more...

Data recovery in extremis: Space Shuttle Columbia

On 1 February 2003, the Space Shuttle Columbia was destroyed while re-entering the Earth's atmosphere following a touch-and-go mission due to the damage incurred by the orbiter during lift off some days earlier. The crew was killed and the shuttle lost, presumably with all of the data collected while in orbit going with it. Save for the data from experiment CXV-2, which gathered information pertaining to the point of critical viscosity of xenon gas.. while poring over the wreckage of the Columbia, the recovery team operating out of the Johnson Space Center found most of the fragments of a 400 …

Read more...

All that encrypts hard drives may not be crypto.

Earlier this week the information security community collectively slapped its forehead as computer magazine C't published the results of its security analysis of the the Easy Nova Data Box PRO-25UE RFID, an external hard drive that was advertised as transparently encrypting stored data at the drive level using the AES cryptosystem and a 128-bit key (an algorithm and keysize which the NSA has blessed as worthy of encrypting information carrying a security classification of SECRET or lower, incidentally). A key fob containing an RFID chip is used to unlock the drive and provide access to the encrypted data. Because all …

Read more...

Doesn't anyone sell flippin' bookcases anymore?!

It's been an interesting weekend, to be sure.. Lyssa and I have been in the market for a couple of things lately, namely a bookcase or media shelf of some kind that we can migrate our DVD collection to, and ring binders that we can move our CD collections into while we rip and encode everything. So, to that end, we spent Saturday driving around searching for stuff along those lines. In two days, we didn't find any bookcases anywhere we looked (well, that's not entirely true, I did find one bookcase, a floor model at OfficeMax, but the construction …

Read more...