Re: Stego-empty hard drives...

[Alexander Oelzant <aoe@oeh.univie.ac.at>]

Bill Stewart wrote:
> >Robert Hettinga wrote:
> >> Stegoing an encrypted partition as "blank" hard drive space without
> >> actually writing over it unless you wanted to?
> >> 
> >A freshly formatted partition has a fill value. Noise would indicate
> >that is is not fresh. This would not be proof that it contained
> >encrypted data but it would indicate some sort of use. 
> 
> It's really a shame how often MSMail files get corrupted,
> and how quickly the things can grow to 100-200MB if people from
> Marketing keep sending you mail with attached Powerpoint files.
> Does anybody know a compressed disk driver that lets you start
> at an arbitrary offset in a file so the headers look fine?

just installed the cryptfs patch for linux (from ftp://ftp.csua.berkeley.edu/
pub/cypherpunks/filesystems/linux/) which works nicely on 2.0.35 if you
mangle along the .rej files. it can use any offset
you want and also stego your fs if you like ... oh! wrong os for you?
then again you could certainly astonish your average customs officer
with it ... them probably not expecting your linux to use a ms file
for storage :-)

hth. alexander

-- 
aoe@oeh.net