Recent Posts

1

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by TheButterflyMon on February 04, 2012, 02:59:09 PM »

This is an important thread, please don't spam.

2

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by JamesMartinez on February 03, 2012, 08:32:22 AM »

It's really good firewall..When you are using an internet it need to take care that no other viruses and malwares should enter into the PC.For this you require a good firewall and you firewall is doing more than that. Where did you purchase this firewall and how much is the cost?

3

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by TheButterflyMon on February 02, 2012, 04:56:53 AM »

I used the net at the hotel (wireless). I use NOD32 firewall.

One more clue, when they removed and searched my HD, for the text string, with their forensics software, the search only took a few seconds (5 maybe). This tells me that whatever they were reading was small.

4

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by TheButterflyMon on February 01, 2012, 11:59:37 PM »

The fuzz picked me up from the hotel, kept me in jail for one night and, the next day, took me to the cyber-crimes office. My laptop was switched off, the HD was removed and plugged into a desktop running some forensics software. They did a text search (name of the guy) and looked at the images.
They were able to view images, stuff that I deleted long back. After this, the cyber-crimes office kept my HD and gave my laptop back to the cops. We returned to the police station where they pestered me with personal questions like how much I earn and where I work. They kept my laptop. I was never arrested and did not go to the embassy.

I have one, strong, password for PGP whole disk encryption.
If you read my original post, I said that I used PGP whole disk encryption on the entire drive, then created two partitions C & D and, then, installed XP on C.
I was thinking and this may not be what I actually did. For one thing, is it even possible to install the OS, install PGP, encrypt the whole drive, partition and then install the OS again? Maybe I'm missing something.

5

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by omeksioglu on February 01, 2012, 02:27:01 PM »

I am sorry to hear that you had such a bad trip. Did you go to your country's embassy? How come they don't give you your Laptop back! If you would had laptop an analysis could be done.

Was your laptop shutdown or hibernated? You specify that they were able to read data from drive C; do you use different passwords for C and D? If your computer was hibernated was C the only portion that was decrypted at hibernation?

Did police get you at air port? Did you use internet in India? Wireless or cable? Where? 

Was your password easy to break with rainbow-tables?

6

Off Topic / Re: Great VPN Service

« Last post by williamsen786 on January 30, 2012, 04:18:49 PM »

Most of the internet user is using vpn services because this provides a better way to access sites which can’t be open through our ip addresses. I got this hidemyass concept which is best for intent user cause in this you can hide your submask and ip address. If you thinking of buying vpn services than first take a look of their vpn reviews only than consider buying their services.

7

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by TheButterflyMon on January 27, 2012, 06:55:56 PM »

My stay in India was not pleasant and I still have not recovered from the incident.

If it helps you guys, I defragmented all partitions of my HD, with Diskeeper, a few days before the incident.

8

Computer Forensics and Anti-Forensics / Re: Hello world (Introduce yourself here!)

« Last post by ThomasJackson on January 27, 2012, 08:30:52 AM »

Hello guys..I am a new hear. I would like to make new contacts in this forum.

9

Computer Forensics and Anti-Forensics / Re: The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by fredbclem on January 27, 2012, 07:00:08 AM »

Well i don't think you have a very good trip of India. Yes indeed a software is available  for the Mac that can read the PGP encrypted hidden partition off my external HD. You can easily find it on net.

10

Computer Forensics and Anti-Forensics / The fuzz was able to read stuff of my PGP whole-disk encrypted laptop drive.

« Last post by TheButterflyMon on January 26, 2012, 03:52:53 PM »

Someone made forum posts that are critical of some Indian. I was in India and was picked up by the local fuzz. They took my laptop and phone. No, I didn't do anything; I don't even know this guy.

My laptop HD was encrypted with PGP whole disk encryption and my phone was a POS, so I didn't really worry about my data.

When I bought my laptop, I used PGP whole disk encryption on the entire drive, created two partitions C & D and installed the OS (XP) on C.

After a night in an Indian jail, they took me, and my laptop, to the cyber-crimes office.
Here they removed the hard-drive off my laptop and plugged it into a desktop computer which was running some forensics software.

Here is the kicker: They were able to read files from the C partition of my HD. Most of the files they read appear to have been deleted (by me) long ago. I only saw the screen for a few minutes.

HERE ARE MY QUESTIONS
1. How is it possible to read files from a drive encrypted with PGP whole disk encryption?

2. I no longer have my laptop but I do have a backup on an external HD. The backup is on a PGP encrypted hidden partition. I need to buy a new laptop and would like to buy a Mac. Is there any software for the Mac that can read the PGP encrypted hidden partition off my external HD?

Thanks.