From: Bella Jones on
"Graham J" <graham(a)invalid> wrote:

> "Jaimie Vandenbergh" <jaimie(a)sometimes.sessile.org> wrote in message
> news:g0mmr5d2nbi5hpkb690mhh8dgs0gnqvbcj(a)4ax.com...
[...]
> >>
> >>Ah, ok... This RAID thing is a mixed blessing, innit.
> >
> > Usually you'd replace the dead drive yourself and then take a hammer
> > to it, job done. That's how my own RAID kit works.
> >
> >>How do you trust
> >>them not to scan and look for stuff?
> >
> > Quantity, protocol and apathy.
> [snip]
>
> Unless of course you are of interest to the people at GCHQ in which case
> even using a computer would be a risk you should not take ...

There isn't anything dodgy on there in that sense. But surely those
companies' staff have a good look in case they're looking for the next
Gary Glitter...

Also, (dumb query), can they see things that are passworded?

--
bellajonez at yahoo dot co dot uk
From: Jaimie Vandenbergh on
On 6 Apr 2010 19:43:40 GMT, bella jonez <bellajonez(a)yahoo.co.uk>
wrote:

>
>Could they get, for eaxample, my keychain password?

Not directly because it's well encrypted, but (if you've got a TM
backup on the drive that could be restored to a Mac) there's nothing
to stop a brute force dictionary attack.

Except the time (minutes to weeks, dependent on how good your password
is) and apathy. The apathy is the most convincing argument to me.

Cheers - Jaimie
--
"People can be educated beyond their intelligence" -- Marilyn vos Savant
From: The Older Gentleman on
Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:

> On 6 Apr 2010 19:43:40 GMT, bella jonez <bellajonez(a)yahoo.co.uk>
> wrote:
>
> >
> >Could they get, for eaxample, my keychain password?
>
> Not directly because it's well encrypted, but (if you've got a TM
> backup on the drive that could be restored to a Mac) there's nothing
> to stop a brute force dictionary attack.
>
> Except the time (minutes to weeks, dependent on how good your password
> is) and apathy. The apathy is the most convincing argument to me.
>
Interesting thread. Thanks, all.

--
BMW K1100LT Ducati 750SS Honda CB400F Triumph Street Triple
Suzuki TS250ER GN250 Damn, back to six bikes!
Try Googling before asking a damn silly question.
chateau dot murray at idnet dot com
From: Rowland McDonnell on
Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:

[snip]

> In the same situation, GCHQ would simply arrest you and then imprison
> you for refusing to release passwords, btw.

GCHQ isn't the home of the British Supra-Legal Secret Police Service,
you know. They can't do that. They can give the cops a hint, though.

Then the cops'd arrest you based on the evidence they had of your
alleged criminal behaviour (should such evidence be available to the
cops, that is), hold you in the cells in accordance with the law, then
if and when given the go-ahead by the DPP deciding that the case against
you was both likely to succeed and was in the public interest, they'd
present a case to a court of law and *that* is what'd get you sent down
or fined.

If in doubt, roast the actual disc platters on a fire.

I suspect Gas Mark 9 would do nearly as well.

Or you could sand off the data layer then mangle/chop up the platters.

Rowland.
(not trying to suggest that anyone here at all has anything on their
HDDs that could possibly be of interest to GCHQ, beyond their natural
desire to know absolutely everything all the time)

--
Remove the animal for email address: rowland.mcdonnell(a)dog.physics.org
Sorry - the spam got to me
http://www.mag-uk.org http://www.bmf.co.uk
UK biker? Join MAG and the BMF and stop the Eurocrats banning biking
From: Phil Taylor on
In article
<1jgjrp4.1kgiwxd1j7fp9jN%real-address-in-sig(a)flur.bltigibbet.invalid>,
Rowland McDonnell <real-address-in-sig(a)flur.bltigibbet.invalid> wrote:

> Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:
>
> [snip]
>
> > In the same situation, GCHQ would simply arrest you and then imprison
> > you for refusing to release passwords, btw.
>
> GCHQ isn't the home of the British Supra-Legal Secret Police Service,
> you know. They can't do that. They can give the cops a hint, though.
>
> Then the cops'd arrest you based on the evidence they had of your
> alleged criminal behaviour (should such evidence be available to the
> cops, that is), hold you in the cells in accordance with the law, then
> if and when given the go-ahead by the DPP deciding that the case against
> you was both likely to succeed and was in the public interest, they'd
> present a case to a court of law and *that* is what'd get you sent down
> or fined.

Has anybody yet been prosecuted for refusing to give up the password
for an encrypted file? It would seem that "I've forgotten it" would be
a perfect defence.

Phil Taylor