logoalt Hacker News

grueztoday at 12:45 AM2 repliesview on HN

If you read the linked thread, you'd see the reasons are:

1. SSDs (including phones) have TRIM/discard, so you need to disable it, otherwise the hidden volume would get wiped. You going out of your way to disable it is going to be suspicious.

2. Even if the above wasn't an issue, you can't really use the outer os to any meaningful extent, because you run the risk of overwriting the inner volume. That makes your decoy os suspicious. It's not definitive proof you have a hidden volume, but I doubt the authorities would care too much about that.


Replies

CGamesPlaytoday at 2:56 AM

I last used this feature probably more than a decade ago, but: you provide 2 passwords when decrypting. If the first password is the main volume, the second is attempted as a hidden volume. If both match, the main volume registers the hidden volume as free space but prevents writing to it. If the hidden volume doesn't match, the main volume will clobber the hidden volume.

So the main/hidden volumes really works like a duress: you might destroy your hidden volume while using the main one under duress, but that does not apply when using the main volume while able to additionally unlock the hidden volume.

If you are in a situation to need to worry about any of this, you're probably going to jail for one reason or another, anyways.

inigyoutoday at 5:48 AM

By using Veracrypt you're already proving there could be a hidden volume - and it won't TRIM anything, for that reason.