Re: Easy to destroy media??

Re: Easy to destroy media??

Secure Home | Search | About
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Re: Easy to destroy media?? Anonymous 03-06-2007
Posted by Anonymous on March 6, 2007, 9:56 am
If you were  Registered and logged in, you could reply and use other advanced thread options


> Anonymous wrote:
> > I have some sensitive files encrypted with GPG. I want to have the option
> > of quickly destroying the PGP keys for those files in case the files into
> > the wrong hands.
> >
> > Thumb drives look like they would be too hard to destroy. Printing the keys
> > on paper would be easy to destroy but OCR is too unreliable.
> >
> > Is there some other portable media which can easily be destroyed by burning
> > or shredding?
>
> The more 'easily destroyable' your key is, the more likely it will
> accidentally be destroyed...

True, I'm dealing with that.


> Floppy disks may be the the answer. The innards can be accessed in a
> fairly short time and burning would render them unreadable. Shredding
> would render them unreadable to all but the most well-resourced attacker.

That's a good idea, I was hoping for something pocket sized though.

> Why not encrypt file with a standard single file encryption/ partition
> encryption and use a strong password/passphrase? That way you will not
> need to destry GPG keys, you just don't give the password.

I want to be able to testify truthfully as to what the password is and have that
be useless because no keys can be found.

I also want to eliminate _any_ chance of the password being cracked by keeping
the keys off of the computer which holds the files.

> This does raise an interesting question. What _would_ be the best way to
> store data that is secure, yet destroyable?


I don't know. Another thought is maybe a big magnet in the office, would that
wipe out a thumb drive??


Thanks for your reply





Posted by Unruh on March 6, 2007, 10:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options



>> Anonymous wrote:
>> > I have some sensitive files encrypted with GPG. I want to have the option
>> > of quickly destroying the PGP keys for those files in case the files into
>> > the wrong hands.
>> >
>> > Thumb drives look like they would be too hard to destroy. Printing the keys
>> > on paper would be easy to destroy but OCR is too unreliable.
>> >
>> > Is there some other portable media which can easily be destroyed by burning
>> > or shredding?
>>
>> The more 'easily destroyable' your key is, the more likely it will
>> accidentally be destroyed...

>True, I'm dealing with that.


>> Floppy disks may be the the answer. The innards can be accessed in a
>> fairly short time and burning would render them unreadable. Shredding
>> would render them unreadable to all but the most well-resourced attacker.

>That's a good idea, I was hoping for something pocket sized though.

>> Why not encrypt file with a standard single file encryption/ partition
>> encryption and use a strong password/passphrase? That way you will not
>> need to destry GPG keys, you just don't give the password.

>I want to be able to testify truthfully as to what the password is and have
that be useless because no keys can be found.

It is in most jurisdictions illegal to destroy evidence.



>I also want to eliminate _any_ chance of the password being cracked by keeping
the keys off of the computer which holds the files.

>> This does raise an interesting question. What _would_ be the best way to
>> store data that is secure, yet destroyable?


>I don't know. Another thought is maybe a big magnet in the office, would that
wipe out a thumb drive??

No. they are not magnetic. And besides a big magnet will not even destroy
a hard drive or floppy disk. It needs to be a very verystrong alternating
magnetic field. But fire is far more effective.

>Thanks for your reply





Posted by Johann Beretta on March 6, 2007, 10:04 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
wrote:

<snip>

>It is in most jurisdictions illegal to destroy evidence.

<snip>

AFTER you have been presented with a subpeona. One can destroy evidence all day
long with no legal ramifications if it hasn't been requested. (in the US at
least)




Posted by Juergen Nieveler on March 6, 2007, 2:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

> I want to be able to testify truthfully as to what the password is and
> have that be useless because no keys can be found.

Where's the point in that? You can claim that it's the right password
as long as you like - nobody can verify that information, therefore the
people doing the interrogation will assume that you're still lying.

Juergen Nieveler
--
"I know the human being and fish can coexist peacefully"
George W. Bush --Saginaw, Mich., Sept. 29, 2000

Posted by Bogwitch on March 7, 2007, 6:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Anonymous wrote:
>
>> Anonymous wrote:

[snip]

>> Floppy disks may be the the answer. The innards can be accessed in a
>> fairly short time and burning would render them unreadable. Shredding
>> would render them unreadable to all but the most well-resourced attacker.
>
> That's a good idea, I was hoping for something pocket sized though.

How small are your pockets! :-)

>> Why not encrypt file with a standard single file encryption/ partition
>> encryption and use a strong password/passphrase? That way you will not
>> need to destry GPG keys, you just don't give the password.
>
> I want to be able to testify truthfully as to what the password is and have
that be useless because no keys can be found.
>
> I also want to eliminate _any_ chance of the password being cracked by keeping
the keys off of the computer which holds the files.

Have you considered using the hidden container feature within TrueCrypt?
It would give you a level of 'plausible deniability' that it appears you
are seeking. If nothing else, how about storing the keys in a hidden
container?

> I don't know. Another thought is maybe a big magnet in the office, would that
wipe out a thumb drive??

I doubt a big magnet would have an effect on a flash memory stick.

It would be possible to create a high voltage USB socket fitted with a
large panic button. You could hold the usb memory device in that and if
the panic button is depressed, the memory chip can be destroyed. You
would have to mess about with getting the voltages right and probably
write off a few keys in the process. It is possible tha memory devices
are protected by buffer circuitry to prevent damage in such an event, as
I said, experimentation would be required.

Bogwitch.

Similar ThreadsPosted
Re: Easy to destroy media?? March 6, 2007, 7:59 am
Re: Easy to destroy media?? March 6, 2007, 11:37 pm
Re: Easy to destroy media?? March 7, 2007, 8:36 pm
Re: Easy to destroy media?? March 15, 2007, 3:16 am
Removable Media Device UAP February 6, 2006, 12:01 pm
Attackers targeting media players November 22, 2005, 11:06 pm
Encryption software for removable media September 27, 2006, 6:24 pm
easy one March 3, 2006, 3:37 pm
Easy Money January 30, 2006, 6:11 pm
Utimaco Safeguard Easy breach October 12, 2006, 10:54 pm

The site map in XML format XML site map

Contact Us | Privacy Policy