Arno Wagner <arno@...> writes: > On Tue, Oct 04, 2011 at 03:02:55PM +0000, Jan wrote: > > Arno Wagner <arno@...> writes: > Other than that, I think this would be a neat add-on, but not a > cryptsetup core project. Something like zuluCrypt (but easier > to do) > > Side note: We might think about adding a link-list for > such projects. Whom could I encourage to realize such a project? > Side note 3: All this only helps to a limited degree. A PC > with keylogger might just also have a video-grabber (or > cheap HD camera) pointed at the screen. Heinz Diehl <htd@...> writes: > Privacy on a machine outside of your control is a no-go. > There are by far more options to get access to your data if > somebody other than yourself has admin/root access to the machine > you're using. A simple script which does a copy of anything inserted > will do it. Or the admin himself logged in from another machine, and > many more... Tools like privatix (see http://www.mandalka.name/privatix/index.html.en ) are designed for MOBILE use to make internet cafes a SAFER place. This does not mean such systems offer perfect security. Booting your own OS safes you from "software attacks" like the ones Heinz Diehl mentioned (is this right?). Thus the "only" remaining thread comes from the hardware side. It seems to me the most COMMON thread there are hardware keyloggers. I thinks hardware based video-grabbers are not that common (what do you think?). They need a lot of disk space, don't they? In my scenario the attacker would need a hardware video-grabbers AND a hardware keylogger, I think this should be unlikely in common internet cafes, while a keyloger alone is likely. HD camera pointed at the screen don't seem such a threat to me since in internet cafes you can often turn the screen or move your body close to it, so its content is hard to see for others. My point is I want to be protected agains the likely threads, not the unlikely. If I have very very sensitive data, I agree, that using an internet cafe is no good. Originally I was looking for a rather safe way to use my gnuPG-key in internet cafes or foreign computers. _______________________________________________ dm-crypt mailing list dm-crypt@xxxxxxxx http://www.saout.de/mailman/listinfo/dm-crypt
