truecrypt hidden volume
Dear Expert,
If I use true crypt software hidden volume in my flash drive, there is a way to know it is hidden, someone realize there is hidden data.
If I use true crypt software hidden volume in my flash drive, there is a way to know it is hidden, someone realize there is hidden data.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
According to comment 2, I'd probably be wrong.
ASKER
msimn:
so you are saying there is an idea to prove there are hidden volume in the flash drive. If yes how because am writing research paper..
so you are saying there is an idea to prove there are hidden volume in the flash drive. If yes how because am writing research paper..
I suggest you start reading with these precautions: http://www.truecrypt.org/docs/?s=hidden-volume-precautions this gives you a lot of suggestions where to start to identify a hidden volume.
Also keep this in mind: http://xkcd.com/538/
Also keep this in mind: http://xkcd.com/538/
ASKER
hi there are procedure that i can follow to detect the hidden file.
G55,
it is very difficult to detect a hidden volume, you have to basically have access to the initial non hidden file, and then write the data to fill up the supposed free space, the links above explain the flaws with nesting an encrypted file (as a volume) in another.
I have seen TC take a beating from major forensic software, and finding the exact point of where one starts and the other ends is hard enough, let alone once its detected you still have to get into it!
it is very difficult to detect a hidden volume, you have to basically have access to the initial non hidden file, and then write the data to fill up the supposed free space, the links above explain the flaws with nesting an encrypted file (as a volume) in another.
I have seen TC take a beating from major forensic software, and finding the exact point of where one starts and the other ends is hard enough, let alone once its detected you still have to get into it!
1) The free disc space left will not make sense.
2) The hidden partition will show up in the disk management (diskmgmt.msc - windows) or disk utility (mac).
So someone with your flash drive with some knowledge of computer storage will figure out that there are something they couldn't see (yet) inside that flash drive.