[ARCHIVED THREAD] - Building a Secure Thumb Drive? (Page 1 of 2)
Posted: 9/11/2009 10:42:46 AM EDT
I've finally gotten around to building a secure thumb drive to keep on me at all times. I just don't know how. I remember talka few years ago on different programs that provided security, encrypted data and basically set up an OS within the thumb drive itself so no footprint was left behind on the host computer. I have no idea what these programs were 
If someone could help me build my SHTF thumbdrive I would greatly appreciate it. I plan on storing standard stuff like maps, FM's, scans of important docs, pictures, etc. I am starting with a Sandisk cruiser micro 8GB. |
| Truecrypt is the name of the Software.. IMHO, get a Iron Key, sooo much easier. |
|
I wouldn't mix a live-OS thumbdrive with your important docs personally. Do completely blow away any vendor software on the key like that awful u3 stuff.
Big +1 on TrueCrypt. OpenSource, free, works on various platforms, http://www.truecrypt.org/ I keep my own thumbdrive of similar nature. I keep a 185mb truecrypt file, heaviest encryption used, which contains tax info, docs, background paperwork, resume, bank info, password lists, etc. 185mb size so that it fits onto a mini-CD (credit card sized CD-R) if i ever need to burn it to go. I also keep copies of truecrypt software on the key (unencrypted) as well as other software, putty psftp pscp clients, torpark (http://download.cnet.com/xB-Browser/3000-2144_4-10586817.html), ff3portable (http://portableapps.com/apps/internet/firefox_portable) and other wifi networkrelated tools. comsec/sigint/crypto |
|
Quoted:
I wouldn't mix a live-OS thumbdrive with your important docs personally. Do completely blow away any vendor software on the key like that awful u3 stuff. Big +1 on TrueCrypt. OpenSource, free, works on various platforms, http://www.truecrypt.org/ I keep my own thumbdrive of similar nature. I keep a 185mb truecrypt file, heaviest encryption used, which contains tax info, docs, background paperwork, resume, bank info, password lists, etc. 185mb size so that it fits onto a mini-CD (credit card sized CD-R) if i ever need to burn it to go. I also keep copies of truecrypt software on the key (unencrypted) as well as other software, putty psftp pscp clients, torpark (http://download.cnet.com/xB-Browser/3000-2144_4-10586817.html), ff3portable (http://portableapps.com/apps/internet/firefox_portable) and other wifi networkrelated tools. comsec/sigint/crypto And what do those do? FWIW, I would love to go with an Ironkey, but 150 clams is a bit more than I am interested in spending on pocket media storage right now... |
|
Quoted:
Quoted: other software, putty psftp pscp clients, torpark (http://download.cnet.com/xB-Browser/3000-2144_4-10586817.html), ff3portable (http://portableapps.com/apps/internet/firefox_portable) and other wifi networkrelated tools. comsec/sigint/crypto
And what do those do? FWIW, I would love to go with an Ironkey, but 150 clams is a bit more than I am interested in spending on pocket media storage right now... The links might explain them better. putty/pscp/psftp are all Secure Shell Protocol clients useful for moving files securely to unix servers or using a unix server to pipe connections through it. Odds are, if you don't know of SSH you'll never need the clients b/c you don't have a server or servers to use them against. torpark - Anonymous web-browsing, uses internet proxies and runs of your keyfob. ff3portable - version of firefox that runs off your keyfob, keeps your bookmarks and cache files local - not completely secure but a world better than using a loaner / kiosks pc's installed web browser. |
|
Truecrypt and a flash drive will do fine. The bigger risk to any old joe like us isn't that your truecrypt drive won't self destruct like the iron key or that the .gov is going to be trying to crack it but that we'll just be lazy and forget to put our latest important documents on it or we'll quit taking it with us and it'll burn it up with the fire that takes down the rest of the house.
Put it on your key ring, keep it up dated, use true crypt so if you lose it someone won't get scans of all your documents. |
|
True Crypt.
Create a FAT32 partition for your data and also copy all three installers (Mac, Linux, and Windows) to the drive. You can then use it on any computer anywhere. With TrueCrypt you can also set it up to use what is called a key file. It could be anything, such as a text document, PDF, picture, anything at all. That file has to be included in the decryption process. It is a great (and free) program. |
| the key to security such a drive is picking the right private key; currently, I would want a key in the 256bit range with 1024 even better. No words from a dictionary or names or anything else someone could guess from knowing who you are or any phrase that might be located somewhere in a computer file. Perhaps the first letters of the words in the first paragraph from a 1860 book that hasn't been printed in the last 150 years and would not be located in any computer file intermixed with numbers and other symbols. |
|
http://www.ar15.com/forums/topic.html?b=10&f=18&t=627630
Quoted:
just get a regular usb drive (edit: actually, 3 of them) and create a truecrypt partition container. this. is. the. solution. http://www.ar15.com/forums/topic.html?b=10&f=18&t=619648 ar-jedi here is my encrypted directory structure: auto/ - pics of my truck and wifes car. - scan of vehicle registrations for above. - scan of vehicle insurance for above. - pdf repair manual for my truck. bins/ - binaries of applications, e.g. Acrobat, Truecrypt, EchoLink, Firefox Portable, PortaPutty, etc financial/ - prior year tax return - scan of bank account statement. - scan of employer paystub. - scan of employer 401K account. - scan of Fidelity brokerage account statement. - scan of one each credit card statements. firearms/ - scan of any transaction records proving i'm the lawful owner. - pics of weapons for insurance purposes. - name, address, & number of a couple of FFL's. - PDF versions of teardown/cleaning manuals. gps/ - PDF manuals for my Etrex and Magellan RM800. - latest application to download new firmware to gps's in case of corruption. ham/ - scan of amateur radio license. - scan of RACES/ARES cards. - pics of rigs for insurance purposes. - field expedient antenna construction articles. - PDF user manuals for VX170, IC24AT, IC703+, V8000, FT8800, etc - FRS/GMRS/MURS frequencies. - various frequency reference guides for local police/fire/govt. house/ - scan of deed. - scans of mortgage paperwork. - scans of any township docs (tax assessment, etc). insurance/ - scan of homeowner's insurance policy. - pictures of items which have non-trivial replacement costs (e.g., wife's engagement ring). - scans of appraisals for any items which have non-trivial replacement costs. - scan of life insurance policy - scan of will maps/ - East coast, state, and county maps in PDF format. - above, annotated with PDF postnotes regarding "places of interest". medical/ - PDF of FM4-25.11, basic military first aid. - PDF for proper application of a tourniquet in the field. - various other first aid reference manuals. numbers/ - scan of household address book, includes all family/friends/etc. - PDF of number directory at work. - text file with contents of cellphone memory. passports/ - scans of my and my wife's passports. pics/ - family pictures. - parents / siblings pictures. shtf/ - SHTF planning documents - PDF survival guides, desert/blizzard/shelter building/etc - 14 part PDF survival document from WHO > 1 - Cleaning and disinfecting wells.pdf > 2 - Cleaning and disinfecting boreholes.pdf > 3 - Cleaning and disinfecting water storage tanks.pdf > 4 - Rehabilitating small-scale water distributions systems.pdf > 5 - Emergency treatment of drinking water.pdf > 6 - Rehabilitating water treatment works.pdf > 7 - Solid waste management in emergencies.pdf > 8 - Disposal of dead bodies.pdf > 9 - Minimum water quantity.pdf > 10 - Essential hygiene messages.pdf > 11 - How to measure chlorine residual.pdf > 12 - Delivering safe water.pdf > 13 - Emergency sanitation - planning.pdf > 14 - Emergency sanitation - technical.pdf wallet/ - scans (front and back) of everything in my wallet, incl credit cards, DL, social security card, employer ID, healthcare cards, etc. note that it's important to scan the back as there is always useful info there –– for example, generally the "report lost/stolen card" contact number for your credit card company is on the back. –––––– anyway, that's what i have on my 1GB USB key. my Truecrypt file is 400MB big, and i keep a copy of that same file on my home PC, my wife's laptop, my work computer, and obviously on my USB key on my person. once a year i snail-mail a burned CD to my parents out in PA, and tell them to put it in with their important papers. forgot to say that you should dupe everything for your wife/SO/GF + 1,048,576. the HUGE ADVANTAGE with using TrueCrypt over a "hardware encrypted USB drive" is that you can store, copy, transmit, duplicate, etc etc your TrueCrypt vault (= a file) as many times as you want, in as many places as you want, on as many types of media as you want. in other words, you fell into the water, your USB key is ruined? no problem, your TrueCrypt vault is also on your PC's hard drive at home, on your PC at work, on another USB flash drive in your BOB, on another USB flash drive in your BOV center console, on a CD at your parents house in a drawer, on a CD in a safe deposit box in a bank, on a networked server fileshare on the other side of the world, etc etc etc. 2 is 1, 1 is none. having one HW-encrypted store of your stuff is a single point of failure. ETA, from a prior post Quoted: FYI is there any advantage to the thumb drive over a couple of CD's? the USB drive is easily updatable as new info is found/old info is changed. the USB key is easier to hang around your neck, or stuff in your BOB/pack. but keep reading... Quoted: Can you set a password for the thumb drive? don't encrypt the entire USB key. instead, see my link above for TrueCrypt software (open source, free, very good). use it to make an encrypted container, and that's where your docs will go into. ETA: the main reason you don't want to encrypt the entire key is that in order to decrypt the key on some random computer you found, you would first need to install the decryption software. which you would get from where? so there is a chicken-vs-egg problem. hence, make a container within the USB key; encrypt that. OUTSIDE THE CONTAINER, place the truecrypt installer application AND use the "Make Traveller" function from within truecrypt. the latter will add all the necessary bits to the USB key to unencrypt the container without having to actully install truecrypt on the PC. and, having the actual installer application is just backup. don't make the container larger than about 600-650MB. why not? keep reading... Quoted: Is it EMP proof? no one knows. so, in true ARFCOM fashion, "get both". make a CD copy once every 6 months or so, and perhaps keep a second USB key in an RF proof box somewhere with the rest of your electronic SHTF stuff. nevertheless, if there is an EMP strong enough to take out your USB key, it probably means you have huge problems forthcoming! as noted way way way above, i periodically make a copy of my USB key onto a CD, and send it off to my parents in another state (aka cheap offsite storage). this is why you should not make the encrypted container larger than 600-650MB –– otherwise it will not fit onto a CD. |
|
IronKey = RIP OFF.
Sorry, an "automatic eraser" of files after X tries with a password is not worth an extra ONE HUNDRED AND TWENTY DOLLARS. Chances are, you, yourself, the USB drive owner will be the one accidentally trashing the data. Just use a good key and pass phrase that doesn't involve your dog's name and kid's birthdays and you will be fine. The blog "Listening to Katrina" has a bunch of tips on using a USB drive, and TrueCrypt's help files has instructions for doing the basic steps for an encrypted container. Just put the EXE and DLL on the drive (unencrypted, duh) and you can use it on any computer. If you are paranoid, get the Unix version too. An encrypted container can be moved all sorts of ways, CD ROM, hard drive, uploaded to the internet, etc. IronKey, well, gee, you can put it on the key. Yes, True Crypt will yield to an arbitrarily fast and long brute force attack, but if you aren't cooling your heels in jail on other convictions while the police crack your child porn you'll be fine as anybody with it will lack the reason to put in the effort and just wipe it and use it themselves for something else. For financial and other data to be safe while carried around, you have to think of the medium (the USB drive) as disposable and the data as important. If it's encrypted and you lose it, no biggie, go to Target and make a new one based on the backup on your computer. Lose the IronKey and you are out 150 bucks. |
I agree 100%. For the overinflated price of one Ironkey, you could have a fleet of secure little data pods stashed all over the place! TrueCrypt is fantastic and powerful (and free), so make use of it. Just because something costs 9X more doesn't make it 9X better; quantity has a quality all of its own. I know those guys (Soviets) are out of business now, but the logic is still valid. 
|
|
I need to learn how to do this too.
My survival thumb I wear around my neck every day but it does not have scans of my important papers (birth certificate, passport, drivers license, etc) as I am afraid that I might loose the thumb and someone else get it. It would be nice to have it secured so I could have everything on there. My thumb is a 16GB unit so it has a ton of stuff on there - manuals, maps, contacts, photos, etc... Just no high-risk docs yet. |
|
Quoted:
I am afraid that I might loose the thumb and someone else get it. It would be nice to have it secured so I could have everything on there. download application here: http://www.truecrypt.org/ read quickstart tutorial here: http://www.truecrypt.org/docs/?s=tutorial ar-jedi |
|
shane does a good job of explaining how to set up a jump drive on his blog http://www.theplacewithnoname.com/blogs/klessons/index.html.
|
|
I have all my important documents in a file protected by TrueCrypt as others have suggested.
Along with that I use the Portable Apps Suite from here The suite includes the following: * Mozilla Firefox, Portable Edition (web browser) * Mozilla Thunderbird, Portable Edition (email) * Mozilla Sunbird, Portable Edition (calendar/tasks) * ClamWin Portable (antivirus) * Pidgin Portable (instant messaging) * Sumatra PDF Portable (PDF reader * KeePass Password Safe Portable (password manager) * Sudoku Portable (game) * Mines-Perfect Portable (game) * CoolPlayer+ Portable (audio player) * OpenOffice.org Portable* (office suite) - Writer (word processor) - Calc (spreadsheet) - Impress (presentations) - Base (database utility) - Draw (drawing) I took the ones out I didn't want and added my normal password manager and JPG viewer. Of specific interest to me was the portable versions of Firefox and a portable PDF reader to use on the documents that I have. Audio and video players have been useful also when the PC I was using did not have them or for some reason weren't working. Oh yeah it's free and there are other apps on the web site that you can add. |
|
Quoted:
I know nothing about computers but I we have 2 flash drives and I would like to secure one of them. can someone email with details on how to set it up like this please I have no idea where to start and how to do it. thanks in advanced. There is a ton of info on Shane's blog, which is linked above. If you can post here, you should be able to handle the instructions on Shane's blog! Plus, a lot of the info above is incredibly helpful as well. |
|
Quoted:
You can get a good USB drive for under $20... take some time to figure it out or ask someone you trust for help. You can buy a pile of food or other preps with the $80 you save. You also get to learn a few new things about comps you didn't know before too! |
|
Quoted:
I know nothing about computers but I we have 2 flash drives and I would like to secure one of them. can someone email with details on how to set it up like this please I have no idea where to start and how to do it. did you read the all the posts in this thread, including the one five above your reply? here's a direct link: http://www.ar15.com/forums/topic.html?b=10&f=17&t=627589&page=1#10693326 ar-jedi |
|
Quoted:
True Crypt. Create a FAT32 partition for your data and also copy all three installers (Mac, Linux, and Windows) to the drive. You can then use it on any computer anywhere. Unless you are on a computer that doesn't allow for software installs. Is there a way to run Truecrypt directly from the thumb drive, without having it installed on the host computer? And if so, is it possible to do this on PC/Mac/Linux all from the same drive? |
|
Windows: http://www.truecrypt.org/docs/?s=truecrypt-portable
I believe on Mac OS/Linux Truecrypt has to be installed, and it does require administrative privileges on Windows (because it temporarily installs the Truecrypt driver to mount the encrypted drive/partition/file) |
|
Quoted:
Is there a way to run Truecrypt directly from the thumb drive, without having it installed on the host computer? And if so, is it possible to do this on PC/Mac/Linux all from the same drive? yes and yes. http://www.ar15.com/forums/topic.html?b=10&f=17&t=627589&page=1#10693326 http://www.truecrypt.org/faq Can I run TrueCrypt if I don't install it?
Yes, see the chapter Portable Mode in the TrueCrypt User Guide. Will I be able to mount my TrueCrypt volume (container) on any computer?
Yes, virtual TrueCrypt volumes (in contrast to TrueCrypt-encrypted physical system partitions/drives) are independent of the operating system. You will be able to mount your TrueCrypt volume on any computer on which you can run TrueCrypt (see also the question 'Can I use TrueCrypt on Windows if I do not have administrator privileges?'). ar-jedi |
|
Quoted:
Quoted:
I know nothing about computers but I we have 2 flash drives and I would like to secure one of them. can someone email with details on how to set it up like this please I have no idea where to start and how to do it. did you read the all the posts in this thread, including the one five above your reply? here's a direct link: http://www.ar15.com/forums/topic.html?b=10&f=17&t=627589&page=1#10693326 ar-jedi yes I did read it. I have 2 usb drives and I tried and I guess I messed something up. |
|
Ok so I am working on this. I have a trueCrypt container on my Laptop to which I have synced some files. I also have some pics resized and saved in the container. I have a tumb drive to which I have loaded TrueCrypt traveler to. My question is how do I get my container to my thumb drive and still have it secure. It seams that I can copy the data but its not secure or if I copy the mem folder it wont open. Do I need to create a container on the thumb drive first?
Thanks for the help. |
|
Quoted:
Do I need to create a container on the thumb drive first? nope –– just copy the entire TrueCrypt container (e.g., filename.tc) from the laptop to the thumbdrive. the container is just a file, that's all. you can move it anywhere you want, USB drive, CDROM, file share location on the 'net, etc. ar-jedi |
| TrueCrypt made a new drive under my computer for the container that shows up when mounted. Its drive z. I also have a file Truecrypt made in my documents which I called Memdump. I have tried to copy the drive z which copys to the thumb but nothing is secure. I have copyed the file Memdump to the thumb but it won't open. I am not sure what I did wrong but I do not have a file with the .tc on the end. |
| I guess I am trying to look at the files on the thumb drive and maybe I can't. When I used the truecrypt on the thumb drive and mounted the version on the thumb drive it still put a new disk drive on the computer and the data was there. So maybe this is how it works? I know just enough to be dangerous. |