[{"data":1,"prerenderedAt":389},["ShallowReactive",2],{"project-28468790":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":42,"post_text":44,"what":45,"said":74,"maker_in_thread":188,"shape":191,"grid":196,"attempts":344,"same_week":352,"maker_shows":30,"maker_hidden":382,"reader_version":383,"card":384},"28468790","FractalCrypt 2.0","free deniable encryption cryptoarchiver","title","Show HN: FractalCrypt 2.0 – free deniable encryption cryptoarchiver","http:\u002F\u002Fgithub.com\u002Fzorggish\u002FFractalCryptGUI","github.com","zorggish",1631189595,2021,128,61,398,2533,16,"notable","security_privacy","deniable encryption","desktop_app",[21,24,25,26],"encrypted archive","hidden volumes","plausible deniability","roasted",-0.42,{"positive":30,"neutral":31,"mixed":30,"critical":32},1,14,18,34,{"privacy":35,"design":38,"idea":39,"docs":41},{"positive":36,"critical":37},0,12,{"positive":36,"critical":36},{"positive":30,"critical":40},5,{"positive":36,"critical":30},[30,36,36,30,36,36,36,43,43,30,30,30,43,30,30,30,43,36,43,30,36,36,36,43,30,30,30,43,30,36,43,43,40,30,30,36,43,43,30,30],3,null,{"problem":46,"audience":44,"pricing":58,"motivation":44,"time_to_build":44,"stack":64,"openness":72,"stage":73,"team_size":73},{"value":47,"source":48,"evidence":49},"Hiding encrypted data so its existence cannot be proven under compelled disclosure","commenter",[50,54],{"id":51,"by":52,"text":53},"28475204","bb88","> Whereas, using FractalCrypt you can safely give away the keys to unclassified volumes, and there is no way to prove that there are actually more volumes than you have…",{"id":55,"by":56,"text":57},"28469912","dane-pgp","> until they get the data they want. The game theory here is interesting. If they are sure that you have the information (for example, the private key to your bitcoin wallet)…",{"value":59,"source":60,"evidence":61},"free","maker",[62],{"id":63},"post",[65],{"value":66,"source":48,"evidence":67},"C++",[68],{"id":69,"by":70,"text":71},"28469162","ComodoHacker","Not a word about security analysis, threat model, etc. That's not how a security tool your life could depend on is presented these days. Also, is it a coincidence that the \"Made…","open_source","unknown",{"praise":75,"objections":82,"requests":122,"questions":148,"alternatives":162},[76],{"value":77,"source":60,"evidence":78},"Multiple hidden layers can give deniability beyond TrueCrypt's single hidden volume",[79],{"id":80,"by":11,"text":81},"28479555","This article is about the problem of using TrueCrypt, which allows you to create a single hidden layer; In case TrueCrypt usage is detected, the requirement to give out the…",[83,94,106,118],{"value":84,"source":48,"evidence":85},"Multi-snapshot and write-pattern attacks can reveal hidden data size",[86,90],{"id":87,"by":88,"text":89},"28471843","Comevius","This works like TrueCrypt hidden volumes, which are volumes created in the free space of volumes. This is not secure against multi-snapshot adversaries, like those who can take…",{"id":91,"by":92,"text":93},"28469352","cdumler","> The capability of plausible deniability is that the encrypted file is indistinguishable from noise; There is no way you can find out the amount of data stored in the…",{"value":95,"source":48,"evidence":96},"Interrogators can torture indefinitely; deniability fails under duress",[97,101,102],{"id":98,"by":99,"text":100},"28468952","akx","So... assuming there are bad guys demanding access to your data and you say \"oh yes, I've been using this plausible deniability encryption\u002Farchive format\", chances are that…",{"id":55,"by":56,"text":57},{"id":103,"by":104,"text":105},"28475371","anonypla","Old but relevant https:\u002F\u002Fdefuse.ca\u002Ftruecrypt-plausible-deniability-useless-by-game-theory.htm .Be careful with plausible deniability depending on your threat model as it's only…",{"value":107,"source":48,"evidence":108},"Mentioning FractalCrypt in the app reveals its use and undermines deniability",[109,113,114],{"id":110,"by":111,"text":112},"28469055","flixic","The app literally says \"Welcome to FractalCrypt!\" when you open it. Not only revealing the encryption format name, but clearly hinting to how it works. I'd much prefer an…",{"id":51,"by":52,"text":53},{"id":115,"by":116,"text":117},"28469951","hartator","Can’t the attacker just see that FractalCrypt is installed, read the same Readme, and ask for the 2nd key?",{"value":119,"source":48,"evidence":120},"No security analysis or threat model documented",[121],{"id":69,"by":70,"text":71},[123,130,137],{"value":124,"source":48,"evidence":125},"Allow user-set fixed container size unrelated to payload",[126],{"id":127,"by":128,"text":129},"28469054","moritonal","To expand on your second point, these kinds of systems should let you set the fixed-size of the volume, like 1G or 5G, with the payload being unrelated.",{"value":131,"source":48,"evidence":132},"Encode offset and size parameters in the key",[133],{"id":134,"by":135,"text":136},"28469715","3np","> First, it creates a cryptocontainer of a user-specified size, filled with random characters. To create the first volume, the program archives the user-specified files to the…",{"value":138,"source":48,"evidence":139},"Look-alike container format such as zip for cover",[140,144],{"id":141,"by":142,"text":143},"28469023","davidhbolton","In countries like the UK where you can be jailed or fined for not giving a password, this provides a way to do that and escape jail. Truecrypt did it and after the developers…",{"id":145,"by":146,"text":147},"28474187","FpUser","Unless the functionality is supported in common software like zip the mere fact of one using it can be a clue.",[149,156],{"value":150,"source":48,"evidence":151},"Can use of FractalCrypt be detected from the file?",[152],{"id":153,"by":154,"text":155},"28475063","m3kw9","Can it be detected that you are using fractalcrypt archive type?",{"value":157,"source":48,"evidence":158},"Is the output a standard ZIP file?",[159],{"id":160,"by":99,"text":161},"28469025","For one, it's not clear that this tool creates standard .ZIP files, so the bad guys using an off-the-shelf `unzip` tool would probably suspect things. If the tool does create…",[163,174,181],{"value":164,"source":48,"evidence":165},"TrueCrypt and VeraCrypt hidden volumes",[166,170],{"id":167,"by":168,"text":169},"28469039","arsome","Yeah, TrueCrypt or VeraCrypt are widespread enough right now and most people are just using them in normal, non-deniable form, so it seems like better cover currently.",{"id":171,"by":172,"text":173},"28470180","orev","Exactly this. In True\u002FVeraCrypt, there’s only the possibility of having two keys, the main and hidden one. Just the existence of this feature places everyone using the software…",{"value":175,"source":48,"evidence":176},"LUKS with offsets",[177],{"id":178,"by":179,"text":180},"28469271","tifadg1","for use within linux I wouldn't trust anything but luks. speaking of luks, it can theoretically accomplish this with offsets and payload align, but I'm not sure I'd trust it not…",{"value":182,"source":48,"evidence":183},"Steganography",[184],{"id":185,"by":186,"text":187},"28470135","inetsee","I am not an expert in encryption or plausible deniability, but couldn't steganography be used to conceal sensitive information? I realize steganography would be problematic if…",{"comments":30,"answered":36,"key":189},[190],{"id":80,"text":81},{"commenters":192,"max_depth":193,"maker_replies":30,"first_comment_mins":194,"lifespan_hours":195},43,6,21,55,[197,199,203,205,207,210,211,214,217,219,222,224,228,232,235,237,239,243,244,245,246,247,250,251,254,257,259,262,263,264,266,269,271,273,275,277,280,281,284,286,289,291,294,296,299,302,305,307,309,312,317,319,321,325,327,329,330,333,336,338,341],[87,36,30,198,88,36],"project\u002Fcritical\u002Fprivacy",[200,36,36,201,202,36],"28473064","other\u002Fneutral\u002Fnone","temptemptemp111",[204,36,36,201,88,36],"28483701",[206,36,36,201,104,36],"28475501",[208,36,36,209,88,36],"28481711","commenter\u002Fneutral\u002Fnone",[91,30,30,198,92,36],[212,30,36,213,135,36],"28469752","commenter\u002Fneutral\u002Fprivacy",[215,30,36,213,216,36],"28470145","malf",[218,30,36,213,135,36],"28478094",[220,30,36,213,221,36],"28469831","derefr",[223,30,36,213,92,36],"28470977",[225,30,43,226,227,36],"28477196","project\u002Fneutral\u002Fdesign","a1369209993",[229,30,43,230,231,36],"28470136","project\u002Fneutral\u002Fprivacy","thesz",[233,30,36,209,234,36],"28474489","anigbrowl",[236,30,30,198,52,36],"28487135",[98,238,30,198,99,36],2,[240,238,30,241,242,36],"28468996","project\u002Fcritical\u002Fidea","sildur",[167,238,36,209,168,36],[141,238,43,230,142,36],[160,238,30,198,99,36],[110,238,30,198,111,36],[248,238,30,198,249,36],"28469088","KingOfCoders",[127,238,43,226,128,36],[252,238,30,198,253,36],"28469096","XorNot",[255,238,43,256,56,36],"28469642","project\u002Fneutral\u002Fidea",[258,238,36,209,253,36],"28470177",[260,238,36,201,261,36],"28469668","qwerty456127",[55,238,43,256,56,36],[171,238,30,198,172,36],[265,238,36,201,234,36],"28474641",[267,238,36,201,268,36],"28475038","ativzzz",[270,238,36,209,227,36],"28477259",[272,238,36,209,172,36],"28482320",[274,238,36,209,234,36],"28494904",[276,238,36,209,227,36],"28477234",[278,238,43,256,279,36],"28474594","Seirdy",[51,43,30,198,52,36],[282,43,36,209,283,36],"28475960","lucb1e",[285,43,30,241,52,36],"28477140",[287,43,36,201,288,36],"28478658","chrisbuc",[115,290,30,198,116,36],4,[292,290,43,256,293,36],"28470344","matharmin",[295,290,30,198,116,36],"28470378",[297,290,36,209,298,36],"28470765","istjohn",[300,290,36,209,301,36],"28470871","p_j_w",[303,290,43,256,304,36],"28471739","j_walter",[134,40,43,306,135,36],"project\u002Fmixed\u002Fprivacy",[308,193,43,256,298,36],"28471030",[310,193,36,201,311,36],"28471057","tsujp",[313,314,40,315,316,36],"28469163",7,"project\u002Fpositive\u002Fidea","DarkmSparks",[103,318,30,241,104,36],8,[80,318,36,320,11,30],"maker\u002Fpositive\u002Fprivacy",[322,323,30,241,324,36],"28490212",9,"willbank",[178,326,36,201,179,36],10,[153,328,43,230,154,36],11,[185,37,43,256,186,36],[331,37,43,256,332,36],"28470243","shpongled",[334,37,43,256,335,36],"28470315","gzm55",[145,337,30,241,146,36],13,[339,31,36,201,340,36],"28475952","CodeWriter23",[69,342,30,343,70,36],15,"project\u002Fcritical\u002Fdocs",[345,348,351],{"id":346,"t":347,"points":43,"comments":36},"28432021",1630921475,{"id":349,"t":350,"points":43,"comments":36},"28432252",1630923858,{"id":4,"t":12,"points":14,"comments":15},[353,358,363,368,373,377],{"id":354,"name":355,"points":356,"category":357},"28539247","Replay",681,"dev_tools",{"id":359,"name":360,"points":361,"category":362},"28499910","Open-Meteo",443,"infrastructure",{"id":364,"name":365,"points":366,"category":367},"28481913","Medusa",373,"web_saas",{"id":369,"name":370,"points":371,"category":372},"28469399","Checkboxland",202,"creative",{"id":374,"name":375,"points":376,"category":357},"28468660","Appliku",183,{"id":378,"name":379,"points":380,"category":381},"28542977","Paper to HTML",153,"learning_science",false,"v2",{"id":385,"name":5,"line":6,"ai":382,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":28,"top":18,"kw":386,"maker":11,"domain":10,"tier":19,"attempts":43,"strip":387,"url":9,"mix":388,"praise":77,"objection":84,"sub":21},28468790,[21,24,25,26],"1001000331113111303100031113103351103311",[30,31,30,32],1793991033062]