Tag Info

New answers tagged

2

See man crypt, which says, in part: NOTES Glibc notes The glibc2 version of this function supports additional encryption algorithms. If salt is a character string starting with the characters "$id$" followed by a string terminated by "$": $id$salt$encrypted then instead of using the DES machine, id identifies the ...


0

Regarding the 1st question: How secure the data is largely depends on the user. EncFS works with a private and public folder where the public folder is the encrypted version that can be used to upload to an on-line service or across machines. If for example you place an unencrypted file inside the public folder it will be shared making the contents visible ...


0

You are not doing anything wrong. This behavior in fdisk and gparted is expected since you formatted the entire raw device as a LUKS volume, so there is no partition table on the device. The partition table normally resides at the beginning of the device (and also the end of the device for GPT), but it is not strictly necessary if the whole device will be ...


0

I have the same issue, Installer hangs when selecting full disk encryption. Has this solution worked for you: When the installer boots up, select "Try Ubuntu". After the desktop loads, open a terminal and run: sudo dd if=/dev/zero of=/dev/sda Then start the installation normally. Trying to understand the best way to resovle this ...


0

I have the same problem and I'm using Vivid (15.04)! It seems that VLC is able to cope with this type of encryptions but not Ubuntu. BTW, the "undetectable" DVD plays and is being detected in Windows. Have you found any solutions yet? In the mean time, I'll look in other forums.


0

DeadboltEdit - A secure encrypting text editor for Linux, Mac OS X, and Windows. It uses Blowfish encryption, compatible with the OpenSSL implementation. Website: www.deadboltedit.org


0

Veracrypt is an open-source encryption package that will certainly do this since there are versions of the software for both Linux and Windows. https://veracrypt.codeplex.com/wikipage?title=Downloads


0

Perhaps this might help: Software solutions such as dm-crypt, FreeOTFE, Data Protecto and TrueCrypt allow the contents of a USB drive to be encrypted automatically and transparently. Also, Windows 7 Enterprise and Ultimate Editions and Windows Server 2008 R2 provide USB drive encryption using BitLocker to Go. The Apple Computer Mac OS X operating system has ...


0

Initramfs does not automatically contains everything neccesary to boot from encrypted volume (modules, scripts, etc...). I uncompressed initramfs on both machines (with encryption and without) and they were very different. By changing crypttab and updating initramfs you are only inserting options to initramfs not everything else. You have to figure out how ...


0

Works for me. Did you install the certificate in /usr/local/share/ca-certificates with suffix .crt? This is the part in the update-ca-certificates script, which adds certs from LOCALCERTSDIR: if [ -d "$LOCALCERTSDIR" ] then find -L "$LOCALCERTSDIR" -type f -name '*.crt' | sort | while read crt do add "$crt" done fi You might want to check if ...


1

You should be able to use the instructions here for this. The only difference; you will be mounting your new partition as you say in 3.


0

Install KeePass on the other computer. KeePass uses single files as data storage. You created this file when you first used KeePass. In the dialog which pops up every time you open the Application (which also asks you for the password) you can see the path of the data file you're using. You need to put this file in a cloud storage like Dropbox, copy.com, ...


0

I use KeePassX or even KeePass on multiple systems. The database file is encrypted and in my case shared via a cloud memory, eg Dropbox or OneCloud. For more security I use a encrypted filesystem to synchronize.


0

KeePass is an application in the traditional way and not an "app", which means by default it doesn't use online storage or syncing and its primary use is to directly work with files on the local computer/device. Also KeePass is not an online service like some of it's competitors. The files KeePass creates for you are password databases. If you don't set up ...


0

I had to copy the keepass icon in my home folder to a usb drive then plug the drive to my other computer, copy and paiste it to my home folder. Then I simply clicked on the open folder icon and the account file is showing. I just clicked it and hit open then entered my master password and that's it.


0

Keepass uses a password safe which is nothing more or less than an encrypted file. So the only thing you have to do is install Keepass and replace the empty password file by one that you've taken from another computer and that contains all your passwords.


3

IMHO you should fully follow this guide and keep your swap file and data safely on your USB SLC disk. However, if you insist on putting the swap on the HDD, the only things you have to do differently is: Create a swap file on the HDD: sudo fallocate --length XY /media/szSomewhere/file.swap sudo chmod a+rw /media/szSomewhere/file.swap where X is the ...


0

If you mount the encrypted disk correctly, it should be accessed just like a regular disk. If you do not mount the encrypted disk (or do so incorrectly), it will function as designed, and prevent access. To see what is mounted, just type mount.


1

Turn the desktop black of all (possibly additionally) connected screens Not sure if the solution below is sufficient to you, but as an (additional?) measure, it should help to make it at least more difficult to access the system. As usual, it is mostly the combination of measures that makes incidental access more difficult. It could e.g be made more ...


7

Before doing anything that might make your system inoperable, make a system back-up! You should be rightly afraid as "fallback to the hard drive" is what you have right now, without making the USB stick! So what you're about to do by putting the ´/boot` on a USB stick, is making your system more secure and with great security comes great responsibility, so ...


1

If someone has physical access to the computer, there is no way to protect it. Put it inside a box under lock and key For this kind of use it is best not to use Ubuntu Desktop. Use the Ubuntu server version, that has no desktop. Setup the WiFi hotspot as a service. A service (also called a daemon) starts when the computer starts and does not need anyone to ...


0

The default setup of ecryptfs on Ubuntu mounts the user's directory only after successful login (with the key derived from the user's password). If the user is not currently logged on, even root doesn't have access to the unencrypted version of the files. For encrypted files, check the @.Private@ directories under the @home subvolume.


1

here is another example of ubuntu 14.04 cryptsetup luks suspend/resume root partition "almost works" :-) one reason it works for arch and "almost works" for ubuntu could be that ubuntu kernel as of Linux system 3.19.0-25-generic #26~14.04.1-Ubuntu SMP Fri Jul 24 21:16:20 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux is still "too old": the following patch ...


0

It behaves fine under normal circumstances it will bring your machine to its knees when doing any kind of intense file operations. While encryption for sure will add overhead, encrypting the home partition should not have a big impact on your system's performance. Most of the programs you run are read brom /bin or /usr, and most of the regular system ...


0

Do you use BIOS? If that is the case, it is easy. Reboot your computer, and when it starts rebooting, press F12 and then you can select which media you want to boot. Otherwise, you can consult other people in the community.


0

I submitted this question to the System76 support team and they very quickly came up with a solution that worked for me. This is the main reason I bought from a vendor that pre-installs Linux and I have to say it has paid off. When the installer boots up, select "Try Ubuntu". After the desktop loads, open a terminal and run: sudo dd if=/dev/zero ...


0

back up your data before start ! check this link luks encryptation usb *this was tested with Ubuntu 12.04.


0

Improving Randy Orrison's answer, here is a small script I created, that will make system fallback to asking user for password if it fails to find the keyfile. #!/bin/sh ask_for_password () { cryptkey="Unlocking the disk $cryptsource ($crypttarget)\nEnter passphrase: " if [ -x /bin/plymouth ] && plymouth --ping; then ...


1

@the_seppi answer is good and detailed and will probably do you, but I would like too add The quick way,using a terminal sudo -i apt-get install php5-dev build-essential apt-get install php-pear pecl download channel://pecl.php.net/blenc-1.1.4b tar xzf blenc-1.1.4b.tgz cd blenc-1.1.4b phpize Before you launch the configuration script you can change ...


1

From http://php.net/manual/en/intro.blenc.php, just to have said it: Warning This extension is EXPERIMENTAL. The behaviour of this extension including the names of its functions and any other documentation surrounding this extension may change without notice in a future release of PHP. This extension should be used at your own risk. First, of course, ...


1

As an alternative to solve the bug, the init process may be switched to upstart, since this is a bug related with systemd. Here is stated that upstart may be used as a workaround. To do so, the easiest way is to install the corresponding package: sudo apt-get install upstart-sysv After the installation, you still are able to start the system with systemd ...



Top 50 recent answers are included