Comments on: Quickpost: TrueCrypt’s Boot Loader Screen Options

By: James Morris (jamesm) 's status on Monday, 13-Jul-09 23:44:53 UTC - Identi.ca

James Morris (jamesm) 's status on Monday, 13-Jul-09 23:44:53 UTC - Identi.ca — Mon, 13 Jul 2009 23:45:02 +0000

[...] http://blog.didierstevens.com/2009/07/13/quickpost-truecrypts-boot-loader-screen-options/ [...]

By: Interesting Information Security Bits for 07/13/2009 | Infosec Ramblings

Interesting Information Security Bits for 07/13/2009 | Infosec Ramblings — Mon, 13 Jul 2009 21:03:03 +0000

[...] gives us a nifty little tip on hiding the fact that our laptop is encrypted. Quickpost: TrueCrypt’s Boot Loader Screen Options << Didier Stevens Tags: ( encryption truecrypt [...]

By: Bram

Bram — Mon, 13 Jul 2009 14:17:52 +0000

Kan je, indien je tijd & zin hebt, #Becrypt ook is op de rooster leggen ?

By: Didier Stevens

Didier Stevens — Mon, 13 Jul 2009 10:01:21 +0000

@Tim There’s an option to disable the boot manager (i.e. ESC key).

But the most important aspect to get this trick to work are your social engineering skills, not your technical skills

By: Security4all

Security4all — Mon, 13 Jul 2009 09:24:51 +0000

Simple but elegant. You rock as usual. Some organizations are lucky to have you as a volunteer.

By: Tim

Tim — Mon, 13 Jul 2009 08:35:01 +0000

This works, until someone presses escape. I am using Truecrypt for my windows partition but I also have a Linux distro installed on a other partion. Pressing escape will lead me to the GRUB bootloader installed in the linux partition.
I guess the same thing applies to this trick when you do not have a dualboot system, pressing escape will bypass the bootloader and I guess leaves you with some TrueCrypt error message or NTDLR error.
So I’d rather use the first obscurity method because it would be strange to see gibberish and after pressing escape seeing the windows or Truecrypt bootloader (fail)

It is a interesting concept though.

By: TrueCrypt boodschap moet laptop inspectie misleiden - BLOG PC Web plus -

TrueCrypt boodschap moet laptop inspectie misleiden - BLOG PC Web plus - — Mon, 13 Jul 2009 08:17:49 +0000

[...] juli 2009 door admin De Belgische beveiligingsonderzoeker Didier Stevens gebruikt het opstartscherm van encryptiesoftware TrueCrypt om personen die zijn laptop willen inspecteren te [...]