From: "Brian B. Riley" <brianbr@together.net>
Date: Tue, 22 Sep 1998 17:03:21 +0800
To: "Cypherpunks Distributed Remailer" <cypherpunks@einstein.ssz.com>
Subject: Re: Stego-empty hard drives... (fwd)
Message-ID: <199809222204.SAA28577@mx01.together.net>
MIME-Version: 1.0
Content-Type: text/plain



-----BEGIN PGP SIGNED MESSAGE-----

On 9/22/98 3:48 PM, Jim Choate (ravage@einstein.ssz.com)  passed this
wisdom:

>When you're at that level you don't carry the data across the line
>you get some Johnnie Mnemonic to do it for you or put it in a 
>diplomatic pouch...

I think the real answer here, and totally in keeping with the KISS
rule, has already been suggested. If you have sensitive data you keep
it on a PCMCIA hard drive card and remove it when not in use (or a
CD-R or a ZipDisk, though the PCMCIA hard drive does allow it to be a
'working' volume featuring speed and capacity that a Zip or a CD-R
cannot offer). It can work as easily for a desktop as for a laptop.
You can add to the security of this by using your platform of choice's
flavor of Secure Drive, Cryptdisk, PGPDisk, etc.

The ultimate stego is that the card is nowhere near the computer with
the main hard drive and they don't bother looking beyond when the
drive evaluation turns nothing up.

If its trafficking in illicit data the "mule' shouldn't even be
carrying a computer (or maybe only a Palm Pilot!) so the hounds have
even less reason to be looking for comp[uter stuff on him.

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv

iQEVAwUBNggY7j7r4fUXwraZAQG3swf8C3ypMG6EyI6t2I2LIpcwyV37Khv6Vm06
15HZ7rFOzrqwXG8RjDw4e99f5H76IG9FuDJUbUfJX0lS9aKtEaeeuSPUmtso8Au9
NrdTp3lHxMYJH9q+d8l1gVZWOnLQCjiJ7Ytd4LCmhmb3Ds58Sa41YoM71EFKZJkK
AIBC2pmkRT1ido4uvtLc9qjPDf/jtLHVH17tMdBKCvn6R8jbLq4QHk6T0J9rJt1O
+owC6R8YGpWjXPkIicsgfDD6qJiyyLLAMRX/1qWLVI+2CjeImhMsUGjafkq98x/B
UU6bGq8B5m2aJmpVMqGFceuJe4mUTtqxLfYF/MlwLokib7ap8+EEZw==
=A9fC
-----END PGP SIGNATURE-----


Brian B. Riley --> http://members.macconnect.com/~brianbr
  For PGP Keys  <mailto:brianbr@together.net?subject=Get%20PGP%20Key>

   "First say to your self what you would be; then do what you
    have to do."  Epictetus (35-135 A.D.)