Computer&Police Question???

[KE0SKN]

Ok, I have all my computers taken away from my by a warrent. No I did nothing wrong.. My uncle did and he did live with me do to medical reason. Any-ways My computer is Encrypted "details below" how long will it take for them to crack it so I can get it back?



O/S: Ubuntu Linux
HDA0: Encrypted - 17 carictor password as soon you turn it on
HDA1: Encrypted - 17 w/truecrypt
Login: 17 carictor Password

 

[KE0SKN]

AES - Encryption
Blowfish - Encryption
w/Whoorpool hash

 

[Sporkupine]

From a technical standpoint, they will not be able to decrypt it without bringing it to Fort Meade or the NSA. Unless you're suspected of something beyond horrible, it is very unlikely this will happen. More likely (and much more effective), is coming up with a legal way to compel you to give the password. My advice? Lawyer, stat! Just be glad you're in America, where rubber-hose cryptography is not allowed...

 

[Sporkupine]

Oh, yeah...
You didn't say anything to them about it being encrypted, did you? If so, DO NOT. In fact, don't discuss anything about the computers with them. That's what they lawyer you should get immediately is for. Just trying to help...

 

[KE0SKN]

i turned my uncle in and he admitted the crime to the detective. But they took all of his computers and mine. The detective knows its encrypted. But my computer is used for work and I need it to make money. I put together a computer to work with, but its slow really slow. So I was wondering if they would give-up and let me have my computer back.

 

[Sporkupine]

Wow...perhaps too much information, but you have my sympathies.

Anyhow, based upon my experiences, you will not be getting these machines back any time soon. And given the nature of the alleged offenses, and the fact that they know there is encrypted information present, they will do everything legally possible to force disclosure of the passwords, regardless of whose computers they are.

 

[KE0SKN]

Thank-God they don't, where rubber-hose cryptography

 

[n5ims]

So I was wondering if they would give-up and let me have my computer back.

Give up, no. They'll just keep it under the belief that the encryption is there to hide evidence. If you (after getting your lawyer's OK) provide them with the PW and other access to confirm that the computer contains nothing that they'll need, then you might - just might - have a chance to get your computer back quickly.

Let your lawyer drive the process to protect yourself though. They'll know what buttons to push and how to safely provide the necessary access to the PD to get it released back to you.

 

[KE0SKN]

thanks for you all for your help.. I will call a lawyer. aka (Lire)..lol

 

[poltergeisty]

When I use Truecrypt (kick *** encryption utility) I create containers to house all my private stuff. Each container may be keyfiled and password protected. The keyfile is located on the DVD The Matrix. So you need the DVD and the password to decrypt the container. Each container has the extension .DAA to make it look like a messed up Power ISO file. Or make it a MPG. Like messed up South park.mpg Depending on the nature of the data I might further encrypt the whole enchilada with 7z.

Now I have a question. If I so much as mention I have encrypted content on my computers does that give them the green light to legally get my password? Like I have anything to worry about, but I'm prepared for situations just like this.

Steganography - Wikipedia, the free encyclopedia <---Old Ninja trick.

Can't wait for Quantum computers and the new sht head laws to will peel the layers of you freedoms back even more.

 

[Sporkupine]

Now I have a question. If I so much as mention I have encrypted content on my computers does that give them the green light to legally get my password? Like I have anything to worry about, but I'm prepared for situations just like this.

First off, good choice. TrueCrypt is the gold standard for encryption, having been certified by DoD for classified information up to Top Secret. Using 7z's encryption on top of that would not matter...zip encryption is trivial to crack.

As to your other question, that is a bit of a legal grey area in the US right now, and I'm not really sure what the answer is. The best bet is to always practice "plausible deniability." If they are not aware that the TrueCrypt volume contains encrypted content, is is impossilbe for them to PROVE that it does. And of course, you would NEVER discuss this kind of thing with LEOs without an attorney, right?

That being said, I would imagine that the boys and girls at Fort Meade could crack it, but that's about it.

 

[poltergeisty]

Thanks for the info.

About 7z.. I use the 7z archive format not zip and I would encrypt file names plus make it an .exe file. So the container has got a lot of cracking to be done at Fort Mead. :lol:

Plausible deniability is what I like to practice. :lol: Like I mention I would name the container something like messed up South Park.mpg Of course now all my secrets are out.

 

[KE0SKN]

with windows make it a .dll file... they will never find it..lol

 

[Sporkupine]

with windows make it a .dll file... they will never find it..lol

Hmmm...I wouldn't do it quite that way. There's damn few 5GB .dll files. Now, something like oldwindows.swp would be a good choice.

 

[ff-medic]

having been certified by DoD for classified information up to Top Secret. Using 7z's encryption on top of that would not matter...zip encryption is trivial to crack..

Why did he not just " Z all " everything?
I'm in the Central Clearance Facility listings ! Social is 999 - 105 - 1029


FF - Medic !!

 

[ff-medic]

The detective knows its encrypted. But my computer is used for work and I need it to make money.

And the Detective did not ask for the password?

If there was no chance that your relative used your computer ; due to you having it encrypted..and you have nothing to hide - Why Lawyer up ; unless there is a possibilty of an " Impropriety / Event " that occurred and that you are not responsible for..and you need legal resources to protect your rights?

( sniff - sniff ) ; Story seems fishy to me. And through all the counter-terrorism investigations that occur, I'll bet if the F.B.I went in with their Evidence Techs..more than likely they would get in.

The Federal Govt is the Federal Govt. Its a computer...Not signals intelligence info - NSA ?

FF - Medic !!!

 

[ff-medic]

The best bet is to always practice "plausible deniability." QUOTE]


" Plausable Deniablility " leads most usually to reasonable doubt ; whcih leads to " Probable cause " ,which leads to a warrant for L / E ( Law Enforement ) a living hell. Which goes to an extended and sometimes..exhaustive investigation.

Body language, your speech , how you word your sentences, manner in which you talk. You play dumb..and you might..." Might " find yourself explaing your actions to a prosecutor.

If you have nothing to hide , do not suspect someone was on YOUR computer without you being present , or you were absent..then my advice is to cooperate.

I will not go into detail here..But there is ways of proving when, and who was on a computer. Now, that secion of the investiagion is not always flawless ; and sometimes it is hard to prove..BUT it can be proven , even if you were not there.

Terrorist files , bombing info , how to make homemade beer and wine without the ATF finding out , Jihad websites....Your computer and you were not there..can be proven by a competenat and knowledgable investigator.

You walk in with a Lawyer..........Your call.


FF - Medic !!!

 

[mancow]

Umm, am I the only one wondering why you aren't doing all you can to assist them?

You (your daughter) are the victims if what you say is accurate.

It just seems like a strange question and concern given the tragedy of the situation.

 

[mancow]

What a pain in the ***, cool, but seems like a real bit of work. What's on earth could require that level of protection? Are you working on developing the next multi billion dollar web sensation or something?

Pretty impressive but don't you now have to go make more secret dvds now that you let the secret slip?

When I use Truecrypt (kick *** encryption utility) I create containers to house all my private stuff. Each container may be keyfiled and password protected. The keyfile is located on the DVD The Matrix. So you need the DVD and the password to decrypt the container. Each container has the extension .DAA to make it look like a messed up Power ISO file. Or make it a MPG. Like messed up South park.mpg Depending on the nature of the data I might further encrypt the whole enchilada with 7z.

Now I have a question. If I so much as mention I have encrypted content on my computers does that give them the green light to legally get my password? Like I have anything to worry about, but I'm prepared for situations just like this.

Steganography - Wikipedia, the free encyclopedia <---Old Ninja trick.

Can't wait for Quantum computers and the new sht head laws to will peel the layers of you freedoms back even more.

 

[Sporkupine]

( sniff - sniff ) ; Story seems fishy to me. And through all the counter-terrorism investigations that occur, I'll bet if the F.B.I went in with their Evidence Techs..more than likely they would get in.

The Federal Govt is the Federal Govt. Its a computer...Not signals intelligence info - NSA ?

FF - Medic !!!

No. The FBI would not get in against that level of encryption without the password.

My point was simply that the NSA is probably the only agency that is able to break AES encryption, and the time and cost associated with doing so would make that an extremely unlikely situation. You would have to have done something truly incredible to make them even consider trying to brute-force the crypto.

Also, I was speaking about encryption in general, not this particular gentleman's situation.