Security Basics mailing list archives

Re: Judge orders defendant to decrypt PGP-protected laptop - CNET News


From: Aarón Mizrachi <unmanarc () gmail com>
Date: Tue, 24 Mar 2009 13:13:19 -0430

On Viernes 20 Marzo 2009 07:30:34 Devnull escribió:
While true, the penalty for doing this may be much less than the
penalty that would be imposed if the data is sufficiently
embarrassing.

Kurt

In this type of situation, where I had an encrypted (theoretically
uncrackable) drive seized in a raid, what would be the best thing to
do? Would I not divulge the key/passphrase, or should I do so? Which
would have the least penalty?

In a judge, you have to divulge the key. 

I think that when you are honest, you will have some benefits that can help 
you. 

But as i mentioned above, this method were not designed for a simple judge. 
This may not happen in your country, but In kidnapping, extortion and commando 
stealing are wide spreaded in some countries. In such situations, honesty 
doesnt help you. You have to protect yours without the option of doubt or 
under torture effects. And the best method to avoid torture, is hiding the 
crypto. In my country, there are more than a hundred of such kidnapping cases 
every year.

Read: http://news.bbc.co.uk/2/hi/americas/7562722.stm

In some cases, the commandos stealed computers with finantial databases to 
commit more kidnapps based on a "best profit objetives".

We are thinking on laws, and how the law are circumvented... dont fear the 
law, say the true.

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

Learn all of the latest penetration testing techniques in InfoSec Institute's Ethical Hacking class.
Totally hands-on course with evening Capture The Flag (CTF) exercises, Certified Ethical Hacker and Certified 
Penetration Tester exams, taught by an expert with years of real pen testing experience.

http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------


Current thread: