Privacy

31866 readers

240 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

What is the best way to encrypt a USB drive that can be used on multiple OSes? (self.privacy)

submitted 2 months ago* (last edited 2 months ago) by ninjaturtle to c/privacy@lemmy.ml

29 comments fedilink hide all child comments

Not sure is this is the best place to post this question, but wondering what is the best way to encrypt a usb drive?

Want to be able to carry an encrypted flash drive with me but also be able to unlock it, if possible, on various OSes. Preferably with some kind of portable software. Something similar to the method that comes with the Kingston Data Traveler USB drives.

Edit: Seems like Veracrypt and Cryptomator are the best options to check out. Thank everyone!

you are viewing a single comment's thread
view the rest of the comments

[–] delirious_owl@discuss.online 0 points 2 months ago (1 children)

Ooff, terrible advise

[–] lostinasea@lemmy.world 6 points 2 months ago* (last edited 2 months ago) (1 children)

How about you tell me why instead of just saying "TeRribLe AdViSe."

[–] delirious_owl@discuss.online 1 points 2 months ago* (last edited 2 months ago) (1 children)

Because historically when FDE is done in hardware there's been massive compromises. FDE is better done in software. Its more secure.

But, sure, there's no shortage of companies trying to sell you shitty hardware thats "100% secure" (which is a major red flag)

[–] lostinasea@lemmy.world 1 points 2 months ago (1 children)

Nothing is 100% fool proof. Hardware or software encryption both have their issues. Case in point, Truecrypt (on which VeraCrypt is based) had a few issues that ultimately led to its demise. Hardware devices (I saw mention of one SSD maker) a few or years ago would store keys on the device that could be read off. So you're going to have to give me a source for "FDE is better done in software. It's more secure" beyond "just trust me bro."

[–] delirious_owl@discuss.online 1 points 2 months ago* (last edited 2 months ago) (1 children)

Lol wut. What was the issue with TrueCrypt? I don't think we ever found out. The anon dev just bailed and hilariously told people to use bitlocker. Personally I think they were just trying to be funny. Fortunately veracrypt took over development.

[–] lostinasea@lemmy.world 1 points 2 months ago

I'm not sure what the original issues were either but I do remember the message on the TrueCrypt site that said something like "warning, do not use. Contains unfixed security issues." The only thing that might explain that is this line from Wikipedia: "TrueCrypt includes two vulnerabilities in the driver that TrueCrypt installs on Windows systems allowing an attacker arbitrary code execution and privilege escalation via DLL hijacking" Personally I believe the guy just didn't want to maintain the thing anymore and abandoned it with no notice. Either way. Good thing VeraCrypt took over and fixed all those issues.