Home > Hard Drive > Able To Use A Safeboot Encrypted Hard Drive In Another (identical) Computer?

Able To Use A Safeboot Encrypted Hard Drive In Another (identical) Computer?


Maybe this is because (as your post said the other day), you're still running XP, an 8 year old operating system, despite Vista's security advances. stored somewhere on the disk, or maybe transmitted over the network (not implemented in current version).Now we can safely steal/confiscate the user's laptop, as we know how to decrypt it. As such, the corporate move to use full disk encryption is only there to protect the corporation from the SEC or some-such, not really to protect the data. Clive Robinson • October 23, 2009 9:32 AM @ Jonadab the Unsightly One, "Inserting a hardware keylogger between the keyboard and the computer accomplishes the same thing with less fuss." Actually http://magicnewspaper.com/hard-drive/transplanting-hard-drive-w-vista-into-another-identical-laptop.html

So I was able to get the hard drive in order to continue testing on my own (which may or may not be a good idea since they didn't want to It's up to your helpdesk how they interpret though. This scheme defeats most physical security attacks on commodity hardware, even more on dedicated hardware, and can only fall victim to attackers that connect tools to the chips themselves for reprogramming. On this usb stick i have linux kernel and specialy crafted initrd. https://forums.techguy.org/threads/able-to-use-a-safeboot-encrypted-hard-drive-in-another-identical-computer.1090742/

Recover Data From Encrypted Hard Drive

It contains nothing. Since I cannot see anything, my guess is that it is the whole partition, so both OS and data.SafeBoot wrote:Chances are it can be recovered easily though - your helpdesk have Relaying on BIOS to secure your laptop is a bit of a stretch to me... I think the biggest threat on something like this would be an business insider.

You want security measure would stop the evil maid??? There are a few approaches...1. Let's assume the laptop uses full disk encryption like e.g. How To Decrypt A Hard Drive With Bitlocker If you've never had to enter a password either though the encryption was pretty pointless.

BIOS [email protected]: hidden volumes do *not* make the Evil Maid attack any more difficult. Recover Data From Mcafee Encrypted Hard Drive Never had a chance to study this, but apparently there is a way for the OEM to bind (pair) given HDD with a given SATA controller. So I have no real idea if it will work or not. But that's why you have a security plan encompassing threats on multiple fronts.

Clive Robinson • October 23, 2009 9:12 AM The first and most obvious question is, 1) Why have a hard disk? Recover Data From Bitlocker Encrypted Hard Drive October 16, 2009 11:49 AM Anonymous said... Reply With Quote May 7th, 2008,03:59 PM #11 MAyers57 View Profile View Forum Posts Visit Homepage Elder Geek Join Date Aug 2007 Location NJ, Posts 484 thx for the reply. Unfortunately the laptop I tested backed up @ 2~3Kb/s, but the resulting image was easily transferred back to a fresh drive on the same hardware without any problems.

Recover Data From Mcafee Encrypted Hard Drive

At this point, USB dongle may be removed and stored in safe place. https://community.sophos.com/products/safeguard-encryption/f/sophos-safeguard-products/6148/is-it-possible-to-use-sophos-6-0-encrypted-hdd-in-another-pc-start-the-operating-system I also sometimes use the coprocessor as a firewall, etc. Recover Data From Encrypted Hard Drive As Eward and Trent said, have pointed out, this is just wrong: > The real defense here is trusted boot, > something Trusted Computing is > supposed to enable. Encrypted Hard Drive Data Recovery Jason! • October 23, 2009 7:37 AM My laptop of a decade ago had a BIOS password.

As soon as I get them I will try a RAW ghost and let you know the outcome! great post to read See slide 25 in: http://www.stoned-vienna.com/downloads/Presentation.pdf Stoned was loaded with a running windows system, and must be done with admin level privs. All that would happen in your instance would they would have gotten your key when you went to access the data on the USB. As an example I mentioned further up the blog page the dangers of "Self-Generating Storage Keys" and low entropy. How To Decrypt A Hard Drive With Mcafee Endpoint Encryption

Once your machine is compromised, hidden partitions won't help. There are many open questions here: how is the passphrase obtained from the user? When I first connected the drive to my Mac it appeared to be unformatted, but partitioned (and if I remember correctly partition was MBR, not positive). see here It's great to see self-encrypting drives gaining mindshare for the benefits that come from hardware encryption versus traditional software FDE.

That said, there exists well-understood common sense defenses against "Cold Boot," "Stoned Boot" "Evil Maid," and many other attacks yet to be named and publicized. How To Decrypt A Hard Drive Mac The proper solution would be to *boot* from the USB key, i.e. Guest • October 23, 2009 10:42 AM @davidwr >Tamper-evident seals over the hard disk to detect removal I think this is best Master • October 23, 2009 10:44 AM For those

October 18, 2009 11:37 AM simo said...

This is not a solution, mind you, just another deterrent. Calum • October 23, 2009 8:54 AM Isn't it fairly straightforward to have a script hash the boot partition on boot and flag changes? October 18, 2009 4:55 AM Anonymous said... Decrypt Efs Without Key tradesource replied Feb 1, 2017 at 3:51 AM Trying (and failing) to...

Does this matter the answer is unfortunatly yes unless your system designers are aware of the issues and take appropriate steps (which I'm assuming the NSA have). This works against Truecrypt on both 32bit and 64bit systems correct? I find it interesting that so many of Schneiers readers, however, find this a practical threat -- for 99% of the world, this is merely theoretical. this website I'm getting to the point where I just may purchase an identical drive and see if I can restore it to that.

Filesystem seems damaged.Not an exFAT boot sector. 1 P HPFS - NTFS 0 32 33 38873 127 38 624500736Can't open filesystem. HJohn • October 23, 2009 8:54 AM Reinforces something I've long believed that most people here already know.