Winamp and TrueCrypt

Figong

Figong

Well-Known Member
I noticed something that could be a complete disaster should one get no-knocked and computer taken into evidence. Due to how TrueCrypt works, it has 2 layers.. with 2 different passwords - that's assuming the hidden partition is known about at all. Not a problem, right? Yeah, wrong. Winamp with default settings will detect the drive if Winamp is open when TrueCrypt pwd is entered, and make a reference to the hidden drive as something that may contain music or another filetype Winamp is capable of opening. Just had it scream at me and ask me if I wanted to add files from the <insert drive letter here> drive. Figured I'd pass this along so there's no headache in that respect.
 
I

ilikecheetoes

Well-Known Member
i guess. but are you saying that leo is going to look at winamp and see it pointing to a drive that doesnt show up in disk manager; and then become suspicious?
Couldnt that wrong pointer just be to your external USB terabyte drive? Or a USB stick? Or your phone?
I'm not sure I'd get my panties in a wad over this one.
 
Figong

Figong

Well-Known Member
I'm more worried about COFEE being used, if it is... it'd show drive mapping directly to local HD, and would definitely point to something hidden.
 
I

ilikecheetoes

Well-Known Member
i just did some cursory research on cofee and it looks like a joke. A few crap tools you can get for free. If thats what LEO is using in your town you dont have anything to worry about.
 
Figong

Figong

Well-Known Member
Is what our normal police use, from what I was told - am paranoid about it.. is why everything that I have that's semi-sensitive or better is a Serpent-TWOFish-AES trifecta, they'll find Jimmy Hoffa before it gets cracked.
 
BarnBuster

BarnBuster

Virtually Unknown Member
Figong said:
I noticed something that could be a complete disaster should one get no-knocked and computer taken into evidence. Due to how TrueCrypt works, it has 2 layers.. with 2 different passwords - that's assuming the hidden partition is known about at all. Not a problem, right? Yeah, wrong. Winamp with default settings will detect the drive if Winamp is open when TrueCrypt pwd is entered, and make a reference to the hidden drive as something that may contain music or another filetype Winamp is capable of opening. Just had it scream at me and ask me if I wanted to add files from the <insert drive letter here> drive. Figured I'd pass this along so there's no headache in that respect.
Click to expand...
Nice catch, Fig. I use TC on flash drive. Alternative(s)?
 
Figong

Figong

Well-Known Member
BarnBuster said:
Nice catch, Fig. I use TC on flash drive. Alternative(s)?
Click to expand...
TrueCrypt is the best thing going right now, imho - people have tried to brute force crack it and it's quite solid, just don't want Winamp leaving trace evidence on an otherwise 'non-obvious' machine. Even 33GB of rainbow tables against it does no good, whatsoever.
 
You must log in or register to reply here.
Top