On: Man jailed indefinitely for refusing to decrypt ha...

[striking]

If someone released such a tool, the feds would make sure to clone your hard drive before supplying the password to it, or write a patched version of the tool that reads it to remove the disk wiping call.

And then you'd be in really hot water.

[naasking → striking]

I expect cloning to already be standard forensic procedure, but perhaps I'm wrong. If not, it should be.

[Kostchei → naasking]

yep. Work on the copy, or the copy of the copy in my case. It's digital with a hash, not a vhs tape

[Overtonwindow → Kostchei]

Ah cloning, very good point. So that raises a new question: Is there any way to prevent decryption of a drive, when the password is forcibly obtained?

[MaulingMonkey → striking]

An interesting talk on disk antiforensics: https://www.youtube.com/watch?v=qZtkANvDxZA

Of course, having watched this, the feds might look for such tricks...