nihilist/blog-contributions
3
2
Fork 18
Code Issues 70 Pull Requests 1 Packages Projects 2 Releases Wiki Activity

Using the Host-OS in live-mode to prepare for long-term Sensitive Use #160

New Issue
Open
opened 2024-11-03 19:12:22 +01:00 by nihilist · 0 comments
nihilist commented 2024-11-03 19:12:22 +01:00
Owner
Copy Link

to be explained:

  • why running the host OS in live mode is vial to hide the forensic traces of the hidden volumes
  • rather than having to erase all system logs, all kernel logs, etc you can just run the Host OS in live mode, and shutdown the OS when the adversary is busting down the door

to be showcased:

  • install the packages you need in non-live mode (veracrypt + qemu, etc)
  • and then boot into the Host OS in live mode
  • from here you can see that anything you write in the system disk isnt persistent accross reboot, but what is saved on a non-system drive is actually saved.

meaning that with this setup we can now setup deniable encryption on that entire drive, to put whonix VMs in it, for long-term sensitive use.

to be explained: - why running the host OS in live mode is vial to hide the forensic traces of the hidden volumes - rather than having to erase all system logs, all kernel logs, etc you can just run the Host OS in live mode, and shutdown the OS when the adversary is busting down the door to be showcased: - install the packages you need in non-live mode (veracrypt + qemu, etc) - and then boot into the Host OS in live mode - from here you can see that anything you write in the system disk isnt persistent accross reboot, but what is saved on a non-system drive is actually saved. meaning that with this setup we can now setup deniable encryption on that entire drive, to put whonix VMs in it, for long-term sensitive use.
nihilist added this to the OPSEC Tutorials (paid contributions) project 2024-11-03 19:12:22 +01:00
nihilist added the
Doable
 label 2024-11-03 19:13:07 +01:00
nihilist added
pushed to prod (1 month external review)
 and removed
Doable
 labels 2024-11-08 18:43:23 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels   
/!\ On Priority - High Quality Tutorial

   
? Impossible Currently ?

   
Complex

   
Doable

   
Simple

   
To be improved / simplified / finished / fixed

   
pushed to prod (1 month external review)
No Label
/!\ On Priority - High Quality Tutorial
? Impossible Currently ?
Complex
Doable
Simple
To be improved / simplified / finished / fixed
pushed to prod (1 month external review)
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
OPSEC Tutorials (paid contributions)
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: nihilist/blog-contributions#160
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?