<story><title>Judge: Fifth Amendment doesn&apos;t protect encrypted hard drives</title><url>http://arstechnica.com/tech-policy/news/2012/01/judge-fifth-amendment-doesnt-protect-encrypted-hard-drives.ars</url></story><parent_chain><item><author>simonsarris</author><text>I have question to those who know more about these things: Instead of hidden volumes, wouldn&apos;t it be better to have an &quot;under duress&quot; password?&lt;p&gt;The hard drive is encrypted and sensitive folders are identified by the user. When a password is given all contents are decrypted.&lt;p&gt;When a &quot;under duress&quot; password is given the sensitive folders are permanently wiped and all the (remaining, innoculous) contents are decrypted.&lt;p&gt;This stops them from finding hidden volumes or operating systems because there are none. Wouldn&apos;t that be a better model, and much harder to figure out?</text></item></parent_chain><comment><author>tedunangst</author><text>Then they restore the hard drive from the cloned image they made before entering the password and ask you once more for the password.  This time, with feeling.</text></comment>
<story><title>Judge: Fifth Amendment doesn&apos;t protect encrypted hard drives</title><url>http://arstechnica.com/tech-policy/news/2012/01/judge-fifth-amendment-doesnt-protect-encrypted-hard-drives.ars</url></story><parent_chain><item><author>simonsarris</author><text>I have question to those who know more about these things: Instead of hidden volumes, wouldn&apos;t it be better to have an &quot;under duress&quot; password?&lt;p&gt;The hard drive is encrypted and sensitive folders are identified by the user. When a password is given all contents are decrypted.&lt;p&gt;When a &quot;under duress&quot; password is given the sensitive folders are permanently wiped and all the (remaining, innoculous) contents are decrypted.&lt;p&gt;This stops them from finding hidden volumes or operating systems because there are none. Wouldn&apos;t that be a better model, and much harder to figure out?</text></item></parent_chain><comment><author>mattiask</author><text>What you want to do is to have a password that decrypts the content to something innocently looking. If the encryption program has the feature to both &quot;dual encrypt&quot; and do an ordinary encryption it should be hard to prove anything :) Not sure how you go about doing that algorithmically though so it would resist reverse engineering the program</text></comment>