If you dont understand basic security...

[blackangst1]

So I have a friend who was in need of creating an encrypted partition due to his work. I recommended Truecrypt. So, after a quick tutorial, we installed it and he said he understood and refused to read the TC guide. After we created his volume with 512SHA and AES/Twofish cascaded he moved his stuff into the container. He wanted to use a keyfile stored on a USB stick as it was a laptop and wanted that extra layer of security.

Fast forward 2 months. He loses his USB stick with no other keyfile backup (which I told him to make and keep at home). Basically he asked if there's a program to crack his container. ROFL...After picking my mouth off the floor, I proceeded to advise him even lettered agencies of the US government would be hard pressed to do it...if at all. He said there has to be a way lol. I made the comment "We encrypted this so no one could get to it right?" "yes" he said. "This includes me."

/sigh I wish he had done what I initially advised and use a strong (25+ character) password but noooo he knew better.

Anyway its funny IMHO, although he's screwed.

 

[Crusty]

There's a difference between not understanding technology and just being stupid. Your friend is just stupid

 

[blackangst1]

Yeah youre right I guess. I warned him: you lose that USB stick youre fucked....he's all OOHHH NNOOO I wont lose it! Im not a fan of separate keyfiles UNLESS its kept offsite and not touched. Kind of defeats the purpose but at least your stuff is safe. I much prefer to embed a keyfile into an MP3 or something on your HD

 

[Crusty]

Originally posted by: blackangst1
Yeah youre right I guess. I warned him: you lose that USB stick youre fucked....he's all OOHHH NNOOO I wont lose it! Im not a fan of separate keyfiles UNLESS its kept offsite and not touched. Kind of defeats the purpose but at least your stuff is safe. I much prefer to embed a keyfile into an MP3 or something on your HD

So that when you no longer can decrypt the MP3 file you have your key?

 

[blackangst1]

Originally posted by: Crusty

Originally posted by: blackangst1
Yeah youre right I guess. I warned him: you lose that USB stick youre fucked....he's all OOHHH NNOOO I wont lose it! Im not a fan of separate keyfiles UNLESS its kept offsite and not touched. Kind of defeats the purpose but at least your stuff is safe. I much prefer to embed a keyfile into an MP3 or something on your HD

So that when you no longer can decrypt the MP3 file you have your key?

Touche. Personally I dont keep a separate keyfile. I have a 43 character password. It would be, however, easy to take a stick, throw 20 or so MP3's on there, pick one to bury your keyfile in, and never use it. Keep it tucked away. Should any suspicion arise, hey! Its all MP3's! And guess what-you can safely play the MP3 a keyfile is stored in.

I was speaking just on the subject of stored keyfiles

 

[Crusty]

Originally posted by: blackangst1

Originally posted by: Crusty

Originally posted by: blackangst1
Yeah youre right I guess. I warned him: you lose that USB stick youre fucked....he's all OOHHH NNOOO I wont lose it! Im not a fan of separate keyfiles UNLESS its kept offsite and not touched. Kind of defeats the purpose but at least your stuff is safe. I much prefer to embed a keyfile into an MP3 or something on your HD

So that when you no longer can decrypt the MP3 file you have your key?

Touche. Personally I dont keep a separate keyfile. I have a 43 character password. It would be, however, easy to take a stick, throw 20 or so MP3's on there, pick one to bury your keyfile in, and never use it. Keep it tucked away. Should any suspicion arise, hey! Its all MP3's! And guess what-you can safely play the MP3 a keyfile is stored in.

I was speaking just on the subject of stored keyfiles

It's a lot better to have a printed hard copy stored in a locked location, preferably somewhere with security(like a bank). Data is the most important thing somebody has on their computer, and sometimes you can not recreate it. Obviously, having backups of data is equally important as safeguarding your data in the event of something major happening like the scenario in the OP.

The big problem I have with personally storing important information like that is that it's a lot easier for the USB flash drive to be lost, misplaced, stolen, or perhaps erased by a family member that stumbles upon it. Hence the emphasis on using a locked location.

 

[Zugzwang152]

Brute force time

Next time recommend he use DES so that if he loses the key the data is recoverable

 

[FLegman]

Did someone called my name (Brute Force) ? look i haven't been to the gym for a while so i doubt i can be of any help here...sorry !!
Lol

 

[Crusty]

Originally posted by: FLegman
Did someone called my name (Brute Force) ? look i haven't been to the gym for a while so i doubt i can be of any help here...sorry !!
Lol

Your name is Flegman...