fuzzbang · HackerTrans

Thats because there is more than one program providing this sort of information. MAPP is for AV and other security software companies. There is also: CIPP http://www.microsoft.com/security/cipp/ and another one for "Defence" which is all government, military and intelligence agencies (apparently).

fuzzbang

13년 전discuss

Which you apparently didn't read thoroughly. I clearly state that the secure way to use TrueCrypt is to never mount the hidden volume in protected mode. That will enable the scenario you describe. I even state the reason why you want use it the way I suggest is to minimize the amount of hidden data that is overwritten.

fuzzbang

13년 전discuss

Excellent. You read my directions on how to use TrueCrypt correctly! :)

fuzzbang

13년 전discuss

No, it is not false. The important thing with a spinning disk is locality of reference. You want the blocks which store the file content to be as close together as possible, to minimize the head seek times. This means you want as long a chain of contiguous blocks as possible. This does not mean that you want all those blocks to be at the beginning of the disk. In fact, the exact opposite. You want to start that chain at a random location so you are more likely to have a large number of contiguous unallocated blocks. See the implementation of HFS+ Extents, or Ext4, or UFS for examples of how this works.

fuzzbang

13년 전discuss

They can prove it sufficiently to force you to hand over your password. File systems have a particular behaviour, they allocate blocks in certain ways. Most notably, they use all of the space available to them equally (or, pseudorandomly anyway). If a file system never allocates any data in the last N bytes, where N is a very large number, that is indication that the file system is treating the volume as Size-N. Since this behaviour is the signature of a hidden volume in a TrueCrypt container, that is "proof". It will be sufficient proof for a court of law.

Essentially you are arguing that the file system implementation exhibited implausible behavior (it allocated only from the first N% of bytes), and that TrueCrypt exhibited implausible behavior ("ok, normally that would mean a hidden volume, but not in this case!").

All of which is to say, that TrueCrypt's implementation of Hidden volumes (as typically used by end users) is not actually plausibly deniable.

fuzzbang

13년 전discuss

It is not that difficult to prove that a hidden volume exists. The TrueCrypt implementation of hidden volumes means that the "hidden" partition is all allocated at the end of the visible partition. If you have a 20G TC volume with a 4G hidden volume, the file system in the non-hidden volume will never allocate a block beyond 16G. This shows up as very anomalous file system layouts at the block level. Simple visualization of the block allocations will show a clear delineation where the hidden partition starts. The TC implementation of hidden volumes is definitely not robust as plausible deniablility.

The police forensics investigators know to look for this already. It is in their recommended best practices for how to handle TrueCrypt volumes.

The safest way to use a TrueCrypt hidden volume is:

  * Create the largest regular volume that you can. 
  * Create the smallest hidden volume that you can.
  * Never mount the hidden volume as "protected"

The idea is that your sparsely populated cover volume won't create enough block allocations to have an obvious "end", and additionally, that those blocks will have a low likelihood of being allocated inside your hidden volume and overwriting your secret data.

fuzzbang

13년 전discuss

Or they aren't about to kill the same bug in MobileSafari, since it is worth exponentially more.

https://twitter.com/i0n1c/status/309585202810867712

fuzzbang

13년 전discuss

While there are definitely benefits to using a VPN, they do not provide anonymity. They provide privacy, and it is not the same thing.

"No one is going to go to jail for you". If a VPN provider is legally required to log your activity or face jail time, guess what? you're getting logged! To assume otherwise is just asking for trouble.

All of this is better addressed in this slidedeck.

http://www.slideshare.net/grugq/opsec-for-hackers

fuzzbang

14년 전discuss

Actually, @fygrave put together the document (using scigen and a draft from jonathan), so both of them should get credit.

fuzzbang

14년 전discuss

You should clean the data from the user before passing it to the shell. There is a trivial remote command execution vulnerability in the URL ("echo 'GET /;$(cat /etc/passwd)'|nc ..."). I assume there are more.

fuzzbang

17년 전discuss

You have to be more specific than that. These days information security is a huge field. Network security is a misnomer since almost no one works on "network security", which is about protocols not applications / operating systems.

I'd suggest being more specific about what sort of project you're interested in. Will you be doing original research on the size of botnets (you and everyone else in the world); maybe write a tool for something, I'd suggest writing a real webapp security assessment tool. I hate doing web app assessments. Another thing that would be really useful would be collaborative information sharing during a pen test (I've put a lot of thought into this one and could give you more pointers)...

If you want to play it safe, just write another fuzzer. Everyone writes fuzzers. Or you could write some VoIP security tools.

fuzzbang

17년 전discuss

Where is it announced? In particular, how does one find out where / when it is to show up?

fuzzbang

17년 전discuss

The Londoner is at the corner of Sukhumvit 33. Easy to get to. The Bull's Head is down Suk 33/1, very easy to get to by BTS. The Phrom Phong station exit is just in front of the mouth of the soi.

I don't know where the Langsuang Starbucks is, never been there.

fuzzbang

17년 전discuss

The Londoner is larger and doesn't get as packed as quickly (avoiding peak times, of course). Bull's head is a superior pub no doubt, but is not great for a largish meeting.

At any rate, anywhere will do. When is this scheduled for? I'm figuring on heading to the islands later this week.

fuzzbang

17년 전discuss

The Londoner brewpub on suk soi 33. Brewed beer > brewed coffee.

fuzzbang

17년 전discuss

When are you around in Bangkok? It seems there is something of a community out here, but I'm not aware of any previous meetings.

fuzzbang

17년 전discuss

I learned Thai by living with a Thai girl who spoke no English. Took about 6 months to become fluent. My suggestion is get a "long haired dictionary" and you'll pick up the language in no time. :)

The best way to learn is to have no choice but to speak the language. Then don't be afraid to fail. I learned Indonesian by speaking to taxi drivers and any other locals I came in contact with. Same process I used with Javanese.

The trick is to start with a basic vocabulary and set of phrases. Then treat the phrases as templates and swap words in and out. You'll be wrong a lot, but the native speaker might phrase it correctly and repeat it back... just repeat what they said and smile. Repeat this process until you're fluent. :)

fuzzbang

17년 전discuss

Firstly, US companies tends not to care about other countries. To the extent that they do, it is mostly European countries that are important. The reason is pretty simple -- money. First world countries can (and will) pay for things. It is generally more useful to have paying customers as your user base. (Here I include customers of other products, i.e. "eyeballs" that you can sell to advertisers. Advertisers want access to people who buy products.)

Secondly, the third world has shown rather resoundingly that it doesn't want non-Microsoft products. Here in Thailand I routinely see Thai people install Windows XP onto their iMacs and Macbooks. They don't use OSX, and I have never met a Thai using Linux. Even laptops which are supposed to have Linux pre-installed will routinely have XP installed by the shop before they are sold.

Here, the reasoning is a bit more complex. For starters, Thai language support. XP has very good Thai support (i.e. it actually has a Thai language locale). OSX does not at all, and Linux has extremely half-assed Thai language support. Obviously, Thailand isn't an important market to Apple and Linux using Thais haven't stepped up to do the translation. This is a unique issue for Thais, so we can ignore it for the general "Third World". I would suggest, however, that most Third World users don't speak English as a first language. Some African countries will do ok with French or English (or German!) locales, so we'll leave it at that.

Besides language issues, the main issue I've encountered here in Thailand is that Thai people want to learn marketable computer skills. They believe that since everyone uses Windows and Office, if they learn, for example, Linux and Open Office, they will have the wrong skill set. They want to emulate the West so they can be successful, and the West uses Microsoft. Thats what they want to use too.

Microsoft is quite deeply ingrained into the computing culture over here. If a Thai wants to add you to their IM list, they will ask you "do you have M?" <<are you on M[SN Messenger]?>>. Alternatively, they might just say "add email someusername42" <<add the MSN Messenger contact someusername42[@hotmail.com]>>. Microsoft defaults are just assumed (MSN Messenger, hotmail.com, etc.)

So, given that OSX and Linux can't penetrate into the third world (and in Apple's case, probably don't even want to)... why would you assume that Chrome OS will? That is, assuming that Google even cares (which is a huge assumption)...

fuzzbang

17년 전discuss

Here is a good article on trying to live on 30k a month. It is a pretty frugal lifestyle actually. Lots of toast for breakfast, not a lot of ordering Au Bon Pain.

http://www.ajarn.com/Banter/30kamonth.htm

fuzzbang

17년 전discuss

Actually, I speak fluent Thai, there is no word for Yes or No. There is ไม่ which is a negation word, and ใช่ which basically means "correct"/"right", not "yes". The Thai question format is generally: Q: Hungry? หิวไหม A: Not hungry. ไม่หิว A: Hungry. หิว

There are other question indicator words, but the one you're referring to is for "correct or not" type questions, e.g.

Q: This road, right? สอยนี้ใช่ไหม A: Right. ใช่ A: Not right. ไม่ใช่

Alternatively, for a lot of statements you can just respond with the polite ending words, ครับ for men and ค่ะ for women.

The question, "would you like one of these?" in Thai would be, "เอาไหม่"... literally, "want?". The correct response is then either: ไม่เอาครับ or, เอาครับ ... that is the polite form for "do not want", or "want". There is no other way to respond to that question (except without the polite ending).

comments