Password protecting a memory stick
Thread Starter
Join Date: Apr 2000
Location: gone surfin'
Age: 58
Posts: 2,333
Likes: 0
Received 0 Likes
on
0 Posts
Password protecting a memory stick
Is it possible to password protect data (folders or the stick itself) on a memory stick, in case it should fall into enemy hands ??
cheers Ginge
cheers Ginge
Join Date: Feb 2007
Location: Dublin, Ireland. (No, I just live here.)
Posts: 733
Likes: 0
Received 6 Likes
on
5 Posts
Have you looked at TrueCrypt? It's an Open Source project, which means that there's no cost, and also means that the source code is open to inspection for security holes or backdoors. I haven't tried it myself, though - so far I've only tried native Linux methods (LUKS) with varying degrees of success, but maybe I should, since TrueCrypt works on Linix and Windows.
Join Date: Jul 2009
Location: Manchester, UK
Posts: 37
Likes: 0
Received 0 Likes
on
0 Posts
As said you want to use TrueCrypt.
I work in the IT Department in a college and the software you get with these pendrives is not encryption. If you can use some tools to view the contents easy. With TrueCrypt you cant do that it is encrypted and hard to crack. The only problem with TrueCrypt is that you need to install it on every computer you intend to use the drive on. The good thing its compatible with Mac, Windows & Linux & its 100% free!
I use it and would recommend it.
I work in the IT Department in a college and the software you get with these pendrives is not encryption. If you can use some tools to view the contents easy. With TrueCrypt you cant do that it is encrypted and hard to crack. The only problem with TrueCrypt is that you need to install it on every computer you intend to use the drive on. The good thing its compatible with Mac, Windows & Linux & its 100% free!
I use it and would recommend it.
Join Date: Jan 2008
Location: Bracknell, Berks, UK
Age: 52
Posts: 1,133
Likes: 0
Received 0 Likes
on
0 Posts
TrueCrypt FTW 
Incidentally, you don't need to install it on each PC. You can set it to autorun a non-installable version of itself, which means no mucking about at all.
Incidentally, you don't need to install it on each PC. You can set it to autorun a non-installable version of itself, which means no mucking about at all.
Join Date: Nov 2000
Location: Cambridge, England, EU
Posts: 3,443
Likes: 0
Received 1 Like
on
1 Post
source code is open to inspection for security holes or backdoors
Official PPRuNe Chaplain
Join Date: Apr 2001
Location: Witnesham, Suffolk
Age: 80
Posts: 3,498
Likes: 0
Received 0 Likes
on
0 Posts
TrueCrypt works well, and is excellent for the paranoid - you can hide stuff at two levels: one that you give away under duress to MI5 when they are torturing you, and one that you don't reveal.
If you forget and write lots of stuff to the "non-hidden" part of the stick, it can sometimes overwrite the encrypted bit. I've not got that far into it, but a friend of mine lost a load of case notes that way.
If you hide a LOT of stuff on it, MI5 will realise there's more there than you've revealed, but they are not likely to be able to crack it.
I gave up using it because i could never remember the passwords. Writing them on the wall rather defeated the purpose.
If you forget and write lots of stuff to the "non-hidden" part of the stick, it can sometimes overwrite the encrypted bit. I've not got that far into it, but a friend of mine lost a load of case notes that way.
If you hide a LOT of stuff on it, MI5 will realise there's more there than you've revealed, but they are not likely to be able to crack it.
I gave up using it because i could never remember the passwords. Writing them on the wall rather defeated the purpose.
Join Date: May 2003
Location: UK
Posts: 154
Likes: 0
Received 0 Likes
on
0 Posts
GTW
Quote:
source code is open to inspection for security holes or backdoors
Yeah, right. This crypto stuff is so obscure that even with proper documentation and tech support it's not exactly easy to drive ... nobody but a serious mathematician (which doesn't include me, I gave up after two years at Cambridge) has the remotest chance of validating the source code.
Quote:
source code is open to inspection for security holes or backdoors
Yeah, right. This crypto stuff is so obscure that even with proper documentation and tech support it's not exactly easy to drive ... nobody but a serious mathematician (which doesn't include me, I gave up after two years at Cambridge) has the remotest chance of validating the source code.
Join Date: Jun 2009
Location: Georgia
Posts: 169
Likes: 0
Received 0 Likes
on
0 Posts
not quite, but close. what he was asking for was 1st hand personal experience: not quite what you get from Google these days.
The key feature they installed on this forum just last year, where people, if they see a post they dont like, can just skip on to a different post/thread has been a tremendous help!
The key feature they installed on this forum just last year, where people, if they see a post they dont like, can just skip on to a different post/thread has been a tremendous help!
cheerful pessimist
Join Date: Jan 2006
Location: Fenland
Posts: 70
Likes: 0
Received 0 Likes
on
0 Posts
Hi folks,
I have zero experience of encryption but I have mastered creating and opening zip files.
I suspect that in the coming days I will have to encrypt / secure some Word / Excel / PDF files and send them off via e-mail. I also want to secure them on my Windows laptop and back-up memory stick in case they go for a walk.
The rub is that like me some of the people receiving these files won't be encryption experts and I have to presume that they won't be able to install any other software on their computers (Windows?). They may well be on a different continent so delivering them by hand is out. What I send must be simple for them to open and in a form that won't set off the anti-virus alarms etc. Knowing nothing about it I kinda imagine doing a zip like operation at my end and then phoning them up and giving them a password which they use to unlock the files once they have arrived?
This is to do with a fraud inquiry and at this stage I don't even know who I will be sending them off to, so I can't phone them up in advance. I would like to be in a position to have a simple working solution to the encryption / opening problem in advance.
Is this something that the recommended TrueCrypt can handle or is there another tool for the job?
Many thanks.
eticket
I have zero experience of encryption but I have mastered creating and opening zip files.
I suspect that in the coming days I will have to encrypt / secure some Word / Excel / PDF files and send them off via e-mail. I also want to secure them on my Windows laptop and back-up memory stick in case they go for a walk.
The rub is that like me some of the people receiving these files won't be encryption experts and I have to presume that they won't be able to install any other software on their computers (Windows?). They may well be on a different continent so delivering them by hand is out. What I send must be simple for them to open and in a form that won't set off the anti-virus alarms etc. Knowing nothing about it I kinda imagine doing a zip like operation at my end and then phoning them up and giving them a password which they use to unlock the files once they have arrived?
This is to do with a fraud inquiry and at this stage I don't even know who I will be sending them off to, so I can't phone them up in advance. I would like to be in a position to have a simple working solution to the encryption / opening problem in advance.
Is this something that the recommended TrueCrypt can handle or is there another tool for the job?
Many thanks.
eticket
Join Date: Jan 2008
Location: Bracknell, Berks, UK
Age: 52
Posts: 1,133
Likes: 0
Received 0 Likes
on
0 Posts
TrueCrypt can handle that, and is something you should at least have a play with in order that you understand it's ins and outs before attempting to support it yourself.
Incidentally, to comment for Gertrude the Wombat, i've just had a proposal to the NPIA for a secure system using TrueCrypt turned down for various very minor failings within TrueCrypt (not enough to trouble any but the most paranoid, but still a consideration for commercial secrecy). They recommend BeCrypt (which is a paid-for product) instead.
However, I would suggest TrueCrypt is good enough for all but the moon landing denialists.
Incidentally, to comment for Gertrude the Wombat, i've just had a proposal to the NPIA for a secure system using TrueCrypt turned down for various very minor failings within TrueCrypt (not enough to trouble any but the most paranoid, but still a consideration for commercial secrecy). They recommend BeCrypt (which is a paid-for product) instead.
However, I would suggest TrueCrypt is good enough for all but the moon landing denialists.
Join Date: Apr 2009
Location: London
Posts: 11
Likes: 0
Received 0 Likes
on
0 Posts
I am sorry - just tried to be helpful. In my experience it's a great way to hide a document or even a whole directory and thought maybe that's what original poster was looking for.
Post is now removed
Post is now removed
