KCLUG

1 participants
3235 discussions

Re: Lexar Secure Jumpdrives
by Brian Kelsay 14 Dec '04

14 Dec '04

That, my friend, was an awesome post. This may sound like a simple thing to you, since you have been dealing with encryption for a while, but have you thought of doing a detailed write-up and sample scripts to get a person new to encryption started? That would be a cool thing to post to http://www.gnupg.org/(en)/documentation/howtos.html or as a small project on freshmeat. (e.g. Encrypted Jumpdrive/Pendrive Howto) Just a thought. Yes, the attempt to be cross-platform is usually the wrench in the works. I have seen some real small USB fobs that I think only carry an encryption key. They are only about a half inch long or just a bit more. Have you seen those and do they work in Linux? If they work, they might be just the thing. I imagine that if you look at them in Linux, you will find that they only contain a fat16 filesystem with 1-8 MB of flash, maybe less. A private key takes up how much space if it is in a text file or compressed? Not much, maybe a few kb. Brian Kelsay >>> Jason Clinton <me(a)jasonclinton.com> 12/14/04 10:55AM >>> Well, I put all the questions here together because my suggestion encompasses all of them. The Lexar encryption hardware is not compatible with Linux; it's done in hardware and, IIRC, it's extremely simple (easy to crack) but no device driver exists. Rather than worry about having enough size on either the encrypted partition or the non-encrypted partition, I suggest that you partition and format the whole thing in VFAT32 and place a copy of gnupg on the device. There's a number of ways that you can do it but here's one scenario that can vary in size and is compatible with Windows unlike the loopback file system method: On your Linux systems, you have a /usr/local/bin/mount script that you manually invoke that mounts the /dev/sd? device to /mnt/cf0. It then looks for /mnt/cf0/encrypted_archive.tar.gz and executes gnupg with your private key from your home directory and decompresses the archive to some place in /tmp or /home/~. You have another /usr/local/bin/umount script that reverses all of those steps: wrap up the changes in the directory, encrypt _against_your_public key_ on the device, unmount. On your Windows systems, the exact same process takes place but it's all automatic via the autorun.inf file using MING32 compiled gnupg.exe, tar.exe and gzip.exe on the device. If you take your device to another person's system, you will need to explore some of the many ways that you can securely access your private key from remote locations (perhaps even a separate, 8MB pen drive to store your private key -- they make watches that do that that have USB connectors). That way, if you lose the device, the person would need both the private key and the password to access the data. Regarding the existing software on the device, there's no danger in losing any of it unless you want the Windows-only, weak encryption to work with Windows. This all sounds rather complicated but in practice, good encryption is hard work and the cross-platform nature makes it even more complicated. Good encryption is not yet a commodity.

2 1

Lexar Secure Jumpdrives
by Brian Densmore 14 Dec '04

14 Dec '04

Anyone have one of these or something similar? I got one for my birthday, and immediately plugged it into my laptop and created a directory and copied some pix of my daughter to it. I noticed it had a file structure already on it along with some Windows and Mac software. I brought it in to the office to see if I could read the directory and sure enough it worked. It did complain about a corrupt file system. I also ran the secure disk software on it to repartition the stick as half secure and half not. My question, would it be possible to reformat the stick with an encrypted Linux fs and is so how would I be able to access it from Windows and Macs? Also, by securing half the card, will I still be able to use the whole stick in Linux? Another question, the stick has an autorun script for Windows, if I were to wipe the Windows software off of the stick would Windows still autodetect the stick and mount it? Or is it only autodetecting because of the autorun. I have a W2K desktop. Brian Densmore

3 2

RE: Lexar Secure Jumpdrives
by Brian Densmore 14 Dec '04

14 Dec '04

> -----Original Message----- > From: Brian Kelsay > > Win2k and XP will auto detect the drive, it is 98 that ... Ok, that what I figured. > The reason Linux found the drive is the filesystem is plain > old vfat (fat16). Not real efficient, but it works with ... Well, I'd have thought Linux would detect it regardless of choice of fs, afterall is should appear as a harddrive even if there is no fs on it. > but if you still want to get to the > drive easily under windows, leave part of it as fat16. Same > goes for if you plan to boot to the drive. You didn't give > it's size, so I can't be more precise. If you plan to > encrypt w/ a Linux-based filesystem good luck. There is a > ext2fs driver/program/reader/whatever for NT/2k/XP, but I've > not used it. YMMV. It is likely to be beta... I'm not too concerned about using it in windows. I would like to keep that compatibility, but I'd like to be able to encrypt it, not that I have anything of value I plan on putting on it. It's a 128MB just like Jeremy's. I plan on just playing with it to see what I want to use it for. Probably I'll wind up just carrying around pix of my daughter, and the occasional work documents. It's just a toy for now. I do think I'll try to boot my desktop from it. I don't think the laptop will boot from it, but the desktop just might. > On the corrupt filesystem, just let MS run checkdisk at boot Well, I thought it might have something to do with using Linux to access the disk first and creating a directory and placing files on it. Which when I ran the secure disk software it so nicely destroyed, so when they tell you to back up the data, they really mean it. It would have been nice to get the message *before* it trashed the disk (well technically it did, it didn't trash the files until I ok'ed the message [only option was to ok] that told me to back up my files). But that was one of the things I was testing for anyway. I'm wondering if it's possible to download the pictures from my camera directly onto the disk. Probably not, I think I have a USB connector to connect to the camera, but that's to plug into a PC with. It's an older digital. A 1.2MP Canon. Takes quite nice pix. Good lenses and capturing. Excellent colors and resolution. Thanks for you input Brian and Jeremy. Brian

4 3

Q1 04 Meeting schedule
by Jim Herrmann 14 Dec '04

14 Dec '04

FYI, I'm not going to be able to make any meetings for a few months, so I would recommend that someone else book the room for the next quarter. Thanks, Jim -- Progressive Values ARE American Values Responsibility, Empathy, Freedom, Opportunity, Prosperity, Fairness, Trust, Honesty, Open Communication, Community, Cooperation

2 1

RE: Lexar Secure Jumpdrives
by Brian Kelsay 13 Dec '04

13 Dec '04

Brian Kelsay >>> "Brian Densmore" <> 12/13/04 12:02PM >>> >I do think I'll try to boot >my desktop from it. I don't think the laptop will boot from it, >but the desktop just might. The DamnSmall FTP site has a floppy .img that I have used to successfully bootstrap and hand off to a USB jumpdrive. >I'm wondering if it's possible to download the pictures from my >camera directly onto the disk. Probably not, I think I have a USB >connector to connect to the camera, but that's to plug into a PC with. >It's an older digital. A 1.2MP Canon. Takes quite nice pix. Good lenses >and capturing. Excellent colors and resolution. Nope, need a PC for that unless you get some new fancy dancy camera w/ the feature. The ones with SD/MMC flash memory cards can be put directly into certain printers that will print w/out a PC. I was looking at some big screen TVs lately that also had SD flash and Sony Memstick slots to view pictures w/out a PC. For those you could bank on needing the unencrypted fat16 filesystem as they come form the factory. At least until world domination is achieved.

1 0

Re: Lexar Secure Jumpdrives
by Brian Kelsay 13 Dec '04

13 Dec '04

Win2k and XP will auto detect the drive, it is 98 that probably needs the auto installer software. ME may or not work the same as XP, but as others on this list know, I don't give a flip about the kludge that is ME. The reason Linux found the drive is the filesystem is plain old vfat (fat16). Not real efficient, but it works with everything and the drive size is small enough unless you get the 1GB and up drives that any performance loss of fat16 won't matter. You could repartition and give half over to ext2fs or any other, but if you still want to get to the drive easily under windows, leave part of it as fat16. Same goes for if you plan to boot to the drive. You didn't give it's size, so I can't be more precise. If you plan to encrypt w/ a Linux-based filesystem good luck. There is a ext2fs driver/program/reader/whatever for NT/2k/XP, but I've not used it. YMMV. It is likely to be beta. Actually NT won't even factor in the equation, because only one mfgr of jump drives makes a USB stack for NT. NT was unable to use USB unless you bought some add-on software. On the corrupt filesystem, just let MS run checkdisk at boot if it comes up and possibly correct the calculations on the FAT table partition sizes. QTparted can repartition disks just like Partition Magic, but there is almost always some complaint from Windows on the first boot after repartitioning w/ it. Let the checkdisk run BEFORE you actually put any important data on it. Just a friendly warning. I've been using jump drives and USB mass storage devices for quite a while now. One further warning, don't waste your time with putting ZipSlack in any form on the jump drive. Use DamnSmall Linux if you need/want to experiment w/ booting Linux from USB. Zipslack and those based on it have too many individual files and it takes forever to copy them over. DamnSmall and the Knoppix derivatives use the compressed filesystem and you are just copying one big file over basically. Anytime you are copying a large number of files to the jumpdrive, even at USB 2.0 speeds, it takes a long time. This is possibly a failing of fat16 showing. Brian Kelsay >>> "Brian Densmore" <DensmoreB(a)ctbsonline.com> 12/13/04 10:53AM >>> Anyone have one of these or something similar? I got one for my birthday, and immediately plugged it into my laptop and created a directory and copied some pix of my daughter to it. I noticed it had a file structure already on it along with some Windows and Mac software. I brought it in to the office to see if I could read the directory and sure enough it worked. It did complain about a corrupt file system. I also ran the secure disk software on it to repartition the stick as half secure and half not. My question, would it be possible to reformat the stick with an encrypted Linux fs and is so how would I be able to access it from Windows and Macs? Also, by securing half the card, will I still be able to use the whole stick in Linux? Another question, the stick has an autorun script for Windows, if I were to wipe the Windows software off of the stick would Windows still autodetect the stick and mount it? Or is it only autodetecting because of the autorun. I have a W2K desktop.

1 0

RE: hand powered Linux box
by Brian Densmore 13 Dec '04

13 Dec '04

> -----Original Message----- > From: Brian Kelsay [mailto:[email protected]] > Sent: Monday, December 13, 2004 6:59 AM > To: kclug(a)kclug.org > Subject: Re: hand powered Linux box > > > Jun. 2001 So? It's still cool. I've often thought about building a PC that doesn't use AC power. Most everything in a pc uses DC current. The only thing I can think of that uses AC is the PS, which: a) makes unnecessary noise and heat and all it really does is convert AC to a smooth DC. A good windmill or solar panel ought to be enough to power a PC. Could even hook up a bicycle to a generator, and thus get a workout while you surf! > > > > Brian Kelsay > > >>> David Nicol <> 12/12/04 11:48PM >>> > http://www.uclinux.com/hand-powered_web_server/ >

1 0

Re: knoppix question
by Brian Kelsay 13 Dec '04

13 Dec '04

It will boot into 128MB w/ no swap. It's a little slower at 128, but useable. 256 should be fine. I don't know what the low end ram is. One possible Knoppix problem is the large number of daemons that auto start at boot. Brian Kelsay >>> <lerninlinux(a)comcast.net> 12/12/04 11:37PM >>> I have taken old parts and assembled a test system, I would like to know if Knoppix will boot into 256 mb of memory only. No hard drive, no floppy. I am wanting to use it as a test station for hard drives, (checking if they are bad and fdisking and such).

1 0

hand powered linux box
by David Nicol 13 Dec '04

13 Dec '04

http://www.uclinux.com/hand-powered_web_server/ -- David L Nicol

1 0

RE: Secondary Slave
by Brian Kelsay 11 Dec '04

11 Dec '04

Some Western Digital drives I've had wanted to be on CS, especially if the only drive in the chain. I personally don't trust CS as far as I could throw it. It can get confusing which drive you are using when installing an OS or a new bootloader. CDRW drives like to be Secondary Master, but don't have to be. When they first came out for IDE that was a general rule to installing one though. Move the CDROM from SM to SS and put the CDRW on SM. Or put the CDROM on as PS. Can't remember which gives you better speed for CD to CD copy, but I imagine the best solution would be a drive controller and put em both on as masters. Brian Kelsay >>> "Brian Densmore" <> 12/10/04 10:58AM >>> I've had problems with setups like this: PM : HD PS : CDROM SM : none SS : CDRW [note this was by accident and I changed the jumper to make SS into SM to fix] PM : HD PS : none SM : present but not detected SS : CDRW [I fixed this by moving the CDRW from SS to PS] PM : HD PS : none SM : CDRW SS : HD [see above, also was able to fix by setting HD to CableSelect mode] I think the problems I had were due to a flaky HD. So the short answer is: no it's not just you. I think that some HDs are just flaky. What brand of HD was it? Mine was either a Conner or Seagate or WD. The PM being a Quantum Fireball. Of course it's also best to *not* mix HD brands, or even oftentimes product lines. Brian Densmore > -----Original Message----- > From: djgoku > > Computer Setup: > > Primary Master: Hard Drive > Primary Slave: Nothing Present > Secondary Master: Hard Drive #but no hard drive was presenting when > trying to boot to cd. > Secondary Slave: DVD Player > > I was trying to boot from the cdrom and it wasn't showing up in POST > just the primary master hard drive. So I took the PM Hard drive out > and just let the secondary boot by itself worked like a charm. I got > it to work with the the below setup. Is this just me or does the bus > not get scanned if a Secondary Master is present? Kinda weird I would > think it would. This is probably the first time I have tried to boot > from SM not present. Kinda weird though either way. > > Primary Master: Hard Drive > Primary Slave: DVD Player > Secondary Master: Hard Drive > Secondary Slave: Nothing Present > _______________________________________________ Kclug mailing list Kclug(a)kclug.org http://kclug.org/mailman/listinfo/kclug

3 3

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

KCLUG