<story><title>TrueCrypt Discrepancy</title><url>http://16s.us/TCHunt/discrepancy/</url></story><parent_chain></parent_chain><comment><author>carbonica</author><text>The TCHunt program, whose website this link points to, is quite interesting. It seems to exist to simply point out something I always felt was self-evident, yet I commonly see misunderstood:&lt;p&gt;&quot;Q. Why write a program such as TCHunt?&lt;p&gt;A. To demonstrate that while encrypted volumes may be indistinguishable from random data created in one specific fashion that the volumes themselves can be easily distinguished from most other files on your system. Many people insist that their encrypted volumes are undetectable. I hope TCHunt will convince them otherwise, before they learn this fact the hard way. More importantly, you should never claim that an encrypted volume with a mp3 file extension (or whatever) is a corrupt file, etc. While that explanation may seem plausible to an average person, it will not stand up to forensic or legal scrutiny. Data corruption does not resemble AES encrypted data. If disclosing the location of your encrypted volumes may lead to legal issues, then say nothing and contact a competent lawyer.&quot;&lt;p&gt;Of course, as he notes, it can&apos;t tell the difference between regular and hidden volumes, but once again: the hidden volumes will still stick out like a sore thumb and clearly be encrypted data. While plausible deniability is technically maintained, believable deniability will always be harder.</text></comment>
<story><title>TrueCrypt Discrepancy</title><url>http://16s.us/TCHunt/discrepancy/</url></story><parent_chain></parent_chain><comment><author>plasma</author><text>Web browsers should support built-in checksum verification of downloads (when owners upload md5sum/signatures/etc with the files), instead of having to do it manually.</text></comment>