logoalt Hacker News

cromkatoday at 10:23 AM3 repliesview on HN

I think more useful would be to be able to boot into another data partition with a different password, which, in turn, would hide the other "daily" partition. I believe LUKS is capable of that. The storage dump looks like a random set of data and only a valid password can find and decrypt a matching hidden partition.

Ideally this should also work on lock screen, e.g. if you type in a non-standard PIN, it would boot from the "dummy" partition in the background, with a slight delay perhaps.

This way you don't have backup anything (I mean you should, but for normal purposes) and have a plausible deniability whenever you get randomly inspected, not just at border crossings that you anticipate.


Replies

grueztoday at 1:06 PM

>I believe LUKS is capable of that

Booting into a 30 GB partition on a 128GB phone is going to be mega suspicious, even if the remaining data is random.

show 1 reply
Cider9986today at 2:11 PM

Not possible to have a robust implementation with the current tech unfortunately.

https://veracrypt.io/en/Wear-Leveling.html

prmoustachetoday at 1:39 PM

Having different data partition forces you to hide stuff, which can be unlawful in some juridictions.

Not having the data in the first place in some specific contexts (like crossing borders) is easier.