Mailinglist Archive: opensuse-security (297 mails)

[Rikard Johnels <rikjoh@xxxxxxxxx>]

On Sunday 25 July 2004 22.35, Dirk Schreiner wrote:
> Hi *
>
> Rikard Johnels schrieb:
> > On Sunday 25 July 2004 18.44, Antun Balaz wrote:
> >>And what if the filesystem is encrypted?
>
> -----------8<------------
>
> > Mount it the usual way for encrypted systems. I dont use it so i cant
> > tell you how. The actual filesystem isnt relevant. As long as you can
> > access it ok. Just mount it rw and chroot into it.
>
> But if the FS is encrypted with the root-PW
> you`ve got _real_ trouble.
>
> S(really)CNR
>
> Dirk
>
> --
>
> TRIA IT-consulting GmbH
> Joseph-Wild-Stra?e 20
> 81829 Munchen
> Germany
> Tel: +49 (89) 92907-0
> Fax: +49 (89) 92907-100
> http://www.tria.de
> --------------------------------------------------------
>
>  working hard | for your success
>
> --------------------------------------------------------
>
> Registergericht Munchen
> HRB 113466
>
> USt.-IdNr. DE 180017238
> Steuer-Nr. 802/40600
>
> Geschaftsfuhrer:
> Hubertus Wagenhauser
>
> --------------------------------------------------------
>  Nachricht von:
> dirk.schreiner@xxxxxxx
>
> Nachricht an:
> rikjoh@xxxxxxxxx, suse-security@xxxxxxxx
>
> # Dateianhange: 0
> Die Mitteilung dieser E-Mail ist vertraulich und nur fur den oben genannten
> Empfanger bestimmt. Wenn Sie nicht der vorgesehene Empfanger dieser E-Mail
> oder mit der Aushandigung an ihn betraut sind, weisen wir darauf hin, da?
> jede Form der Kenntnisnahme, Veroffentlichung, Vervielfaltigung sowie
> Weitergabe des Inhalts untersagt ist. Wir bitten Sie uns in diesem Fall
> umgehend zu unterrichten. Vielen Dank
> The information contained in this E-Mail is privileged and confidental
> intended only for the use of the individual or entity named above. If the
> reader of this message is not the intended recipient or competent to
> deliver it to the intended recipient, you are hereby notified that any
> dissemination, distribution or copying of this E-Mail is strictly
> prohibited. If you have received this E-Mail in error, please notify us
> immediately. Thank you

Correct me if I'm wrong but I'd say "In that case you are cooked!!"

Not that i know much of encrypted FS's, but id say you are pretty lost by 
then. Unless you can brutecrack the encryption with some forensics 
software...


-- 
         /Rikard

------------------------------------------------------------------------------------
Rikard Johnels          email   : rikjoh@xxxxxxxxx
                        Web     : http://www.rikjoh.com
                        Mob     : +46 735 05 51 01

------------------------ Public PGP fingerprint ----------------------------
< 15 28 DF 78 67 98 B2 16 1F D3 FD C5 59 D4 B6 78  46 1C EE 56 >