Hacker News Reader

If someone released such a tool, the feds would make sure to clone your hard drive before supplying the password to it, or write a patched version of the tool that reads it to remove the disk wiping call.

And then you'd be in really hot water.

View on HN

I expect cloning to already be standard forensic procedure, but perhaps I'm wrong. If not, it should be.

yep. Work on the copy, or the copy of the copy in my case. It's digital with a hash, not a vhs tape

Ah cloning, very good point. So that raises a new question: Is there any way to prevent decryption of a drive, when the password is forcibly obtained?

An interesting talk on disk antiforensics: https://www.youtube.com/watch?v=qZtkANvDxZA

Of course, having watched this, the feds might look for such tricks...

Reply on news.ycombinator.com