[MarkoTheHacker]

The goal: Privacy... from EVERYONE (hackers, thieves, and official authorities)

Tools I know:

- Veracrypt
- Linux LVM Encryption
- Just putting something in a WinRar with a password
- WD MyPassport standard encryption that they offer (password protection)

I am creating this thread with hopes that experienced people can comment which encryption are 99%s secure, and which have documented cases of the government or something having a backdoor/decyption key for it.


I heard good things about Veracrypt - but some poeple told me authorities in Russia can decrypt it.

Linux LVM encryption (the standard full disk encryption when isntalling a Linux system) I've heard VERY good things about and is so far the best option.

WinRar and WD MyPassport standard tools - I think are out of the questions.



Are there any other suggestions or comments on the information said above?

Thanks

[Lokeal]

"I heard good things about Veracrypt - but some poeple told me authorities in Russia can decrypt it."
These are mostly rumours, I have yet to find legitimate proof that this has been done.

IMO LUKS and Veracrypt both work great as long as they are secured with a solid password and the user knows what they're doing.
A secure password should use a mixture of lowercase and uppercase letters along with numbers and special characters and use at the minimum a 20+ character password. Personally I'll use the max amount of characters allowed, usually 64 characters.

WD MyPassport I haven't looked into it but the first thing I saw when searching for it was this link lol.
https://www.theregister.com/2015/10/20/w...ncryption/

However, this was from 2015 and things could of changed greatly :).

[MarkoTheHacker]

"IMO LUKS and Veracrypt both work great as long as they are secured with a solid password and the user knows what they're doing."

This is a very good specific short answer, however,
About the "user knows what they're doing" - can you be more specific please?

[Lokeal]

"IMO LUKS and Veracrypt both work great as long as they are secured with a solid password and the user knows what they're doing."

This is a very good specific short answer, however,
About the "user knows what they're doing" - can you be more specific please?

Well encryption is still susceptible to human error... If they have everything encrypted correctly with a strong password but leave the password written on a notepad next to their desk then they already have the password.

These aren't the only things that could happen... There's a whole bunch of things you need to be aware of if you want to be serious about your privacy. It's better to take a look at some encryption guides and privacy guides since there's a whole lot of information on this subject already :). It would take hours to write it all out here. As long as you pay attention to encryption topics you'll deffo hear when a certain encryption has been cracked. I'm sure they'd use it to take down the big fish first though.


TLDR; Encryption works as you'd expect it to but human error leads to the flaws. :)

[MarkoTheHacker]

Ah ok. I thought you were talking about things like some RAM cache or some deep technical method to recover the password from the physical hardware.

[Demoralise]

Twofish-Serpent-AES TrueCrypt with a random OTP password string followed by also encrypting it with VeraCrypt. You also want to set up a decoy OS so that you can give whoevernis trying to access the system a fake password which triggers them to access the decoy OS

[MarkoTheHacker]

Twofish-Serpent-AES TrueCrypt with a random OTP password string followed by also encrypting it with VeraCrypt. You also want to set up a decoy OS so that you can give whoevernis trying to access the system a fake password which triggers them to access the decoy OS

This is some next level sh*t.
I like A+ 👍
Thx for good post.

[Demoralise]

This is some next level sh*t.
I like A+ 👍
Thx for good post.

No worries! It is what I do to all of my computers. Whenever I want to securely erase my data I use a Redkey USB and run a DoD wipe (7 passes) on my entire drive making sure to delete every part of each file, not leaving any remnants then I run a random write to the free space