At best, my computer hangs when prompting for a password. I think this is related to the 4.4.14 kernel but have not confirmed this.
These instructions are a lot easier than they seem, and a smart and patient beginner will be able to follow them!
- These notes were made from instructions from Slackware "current", as of 2016-11-05, and have been tested on Slackware 14.2, and 14.2 32bit.
These notes were made on an everyday system with one hard drive which I completely formatted for this purpose.
- If you are a new user, it is strongly recommended that you remove all hard drive's your using and do this on a spare unused/empty drive.
This concept and these notes build a full-disk Slackware installation which also uses LVM. You can safely ignore the entire LVM post and just follow this one.
TODO - add additional notes
A cryptographic filesystem.
An absolutely mandatory concept and program.
Be aware that attacks on people, hardware and implementation are the go-to methods for defeating encryption. Some points:
- A legal or physical threat, lies and other social engineering.
- A hardware or software keylogger. Are you typing your password on a keyboard and computer you control?
eCryptfs-mount.sh is my helper script
This specifically deals with local data encryption, and not other forms of computer or access security.
This turns out to be remarkably easy.
Software > Web browsers >
Tor can be thought of like a secure proxy.
I experimented with it during my research on Replacing Firefox.
UPDATE: Tor has been subverted for some time.
I know when and how, with confirmation, but not by whom.
It must not be used for high-level security requirements (governmental, military, international) and probably even mid-level requirements (corporate, police). Little people using it as a proxy are fine.
Don't do anything illegal with it if you're within three degrees of a Bad Guy. So.. don't use it for anything illegal. Remember that PRISM records everything, so that, once flagged, you can be found retroactively guilty (even by association) for past internet usage.
Security > Software >
EncFS provides an encrypted filesystem in user-space. It runs without any special permissions and uses the FUSE library module to provide the filesystem interface.
2016-12-28 - I have no memory of using this. Boy will it be awkward if I come across stuff encrypted with it.