Уровень 0 · материалов: 7
В кластер входят документы, описывающие технические способы защиты данных от физического доступа и принудительного раскрытия через шифрование, в то время как общие советы по кибербезопасности без привязки к шифрованию дисков в него не входят.
Общие признаки: шифрование дисков, скрытые тома, защита от физического захвата серверов, противодействие государственному надзору, по plausible deniability (правдоподобное отрицание)
Группа выше: Защита данных от изъятия и государственного доступа
Смысл: The main idea is that full disk encryption (specifically using LUKS, cryptsetup, and dm-crypt) is essential for protecting sensitive information from physical seizure and surveillance by state authorities.
The text advocates for full disk encryption in Kali Linux using LUKS to protect sensitive data from theft and government surveillance, citing the confiscation of devices from journalists as a primary risk.
Смысл: The main idea is to provide a step-by-step technical implementation for achieving 'invisible' full-disk encryption using LUKS and LVM, where the decryption key is decoupled from the main drive and stored on a removable USB device to ensure maximum data security and rapid access revocation.
A technical tutorial on setting up a full-disk encrypted Ubuntu server that boots automatically via a USB key, making the hard drive appear empty to unauthorized users.
Смысл: The main idea is to achieve total plausible deniability and data protection during a physical server seizure by keeping encryption keys on a remote, hidden server and loading them only into volatile memory (RAM) during boot.
A method to secure a server by storing encryption keys on a remote hidden server and loading them into RAM via SSH to prevent data recovery if the physical hardware is seized.
Смысл: The main idea is to teach users how to implement a 'fortified' version of VeraCrypt disk encryption by deviating from default settings—specifically through custom hashing algorithms and PIM—to protect data against professional attackers and government surveillance.
A comprehensive guide on how to secure a Windows system using VeraCrypt by implementing non-standard encryption settings and PIM to maximize data protection.
Смысл: The main idea is that strong encryption (AES-256) and a complex password can successfully resist decryption efforts even from high-level intelligence agencies like the FBI.
The FBI returned five encrypted hard drives to Brazilian authorities after failing to brute-force the AES-256 encryption for over a year.
Смысл: The main idea is to educate users on how to protect sensitive data on portable storage using BitLocker, emphasizing that hardware-based authentication (tokens/TPM) is significantly more secure than passwords.
A comprehensive guide on using Windows BitLocker and cryptographic tokens to prevent data theft from lost or stolen laptops and flash drives.
Смысл: The main idea is to teach users how to implement plausible deniability using VeraCrypt's hidden volume feature, ensuring that highly sensitive data remains undetectable even if a user is forced to reveal the password to the outer encrypted volume.
A step-by-step technical guide on using VeraCrypt to create a hidden encrypted volume for plausible deniability and data protection.