- Joined
- Mar 10, 2009
- Messages
- 1,756
- Trophies
- 0
- Location
- Ankh-Morpork
- Website
- Visit site
- XP
- 205
- Country
Rydian said:I made sure to point out that section after the tutorial because there's multiple ways to make and use a truecrypt volume with various advantages and disadvantages.
I just have a static-size mountable file-partition for my porn, I don't need anything more complex than that.
I don't know about on Windows but on Linux you can do some really cool shit with that and PAM. Keep your key on a USB stick that also logs you in, take out the key and you're logged out/the session is locked and your encrypted partitions are unusable. I also have my bootloader on mine so you can't even boot my secure install without. You can have a much stronger key then as well seeing as you don't have to remember it. And much more plausible deniability if it ever comes to the point of "loosing" your key.
EDIT: But remember to encrypt your swap as well, and don't leave a battery powered/UPS protected system powered on when someone you don't trust can get physical access to it.
EDIT the second. If there are any mobo's with ram encryption available that could be ignored though. Don't know if you can get that for desktop PC's though.