<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments for Small Sister Podcast</title>
	<atom:link href="http://podcast.smallsister.org/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://podcast.smallsister.org</link>
	<description>This podcast aims to beef up your privacy and security</description>
	<pubDate>Thu, 28 Aug 2008 18:13:42 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>Comment on Episode #1: Crypting a full Windows computer with TrueCrypt by Fred Zelders</title>
		<link>http://podcast.smallsister.org/2008/05/01/episode-1-crypting-a-full-windows-computer-with-truecrypt/#comment-4</link>
		<dc:creator>Fred Zelders</dc:creator>
		<pubDate>Mon, 05 May 2008 18:53:45 +0000</pubDate>
		<guid isPermaLink="false">http://podcast.smallsister.org/?p=4#comment-4</guid>
		<description>Thanks for the podcast Brenno!

Can you say something about TrueCrypt compared to FileVault ( http://en.wikipedia.org/wiki/FileVault ) the encryption facility that is embedded in Mac OS X please?</description>
		<content:encoded><![CDATA[<p>Thanks for the podcast Brenno!</p>
<p>Can you say something about TrueCrypt compared to FileVault ( <a href="http://en.wikipedia.org/wiki/FileVault" rel="nofollow">http://en.wikipedia.org/wiki/FileVault</a> ) the encryption facility that is embedded in Mac OS X please?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Episode #1: Crypting a full Windows computer with TrueCrypt by fotoflo</title>
		<link>http://podcast.smallsister.org/2008/05/01/episode-1-crypting-a-full-windows-computer-with-truecrypt/#comment-2</link>
		<dc:creator>fotoflo</dc:creator>
		<pubDate>Thu, 01 May 2008 14:01:37 +0000</pubDate>
		<guid isPermaLink="false">http://podcast.smallsister.org/?p=4#comment-2</guid>
		<description>Truecrypt provides excellent whole disk, partial disk, and "virtual partition/volume" encryption, no doubt about it. However, there's a catch. Your data is really only as safe as the physical environment you keep it in.

see:
http://www.nytimes.com/2008/02/22/technology/22chip.html
for one of many ways your computer can be compromised.

Basically, almost nothing can stop a determined and resourceful attacker with physical access to your computer.

That said keeping your truecrypt volumes in an unmounted state may be a good safety precaution. another would be to use whole drive encryption and then using truecrypt volumes within that, which you keep unmounted.

Also, choose strong passwords. strong passwords that you can remember. but never store your password on your computer unencrypted, because your hard drive can be downloaded to someone elses hard drive and ALL strings in the drive can be added to a password cracking dictionary.

A trick i use is to take a password i have been using for a while, and then mutate it on paper, while keeping the way i pronounce it in my had. Say i used chose the word "macbookair" (I didnt, and you shouldnt because its now public, but this was a good password for a base because it takes three dictionary words and puts them togather for my password). Then what i might do is capitalize certain letters and change the o to 0: MacB00kAir, now i add some more shifts and it looks like MacB))kAir or maybe i move some things around and its now nACb))K02 (02 for air). This might seem diffucult, but once you have a strong password like this, there's no need to change it often (some may disagree) and once its memorized and you use it every day for a week, its memorized.

Ok, there's my 3 cents</description>
		<content:encoded><![CDATA[<p>Truecrypt provides excellent whole disk, partial disk, and &#8220;virtual partition/volume&#8221; encryption, no doubt about it. However, there&#8217;s a catch. Your data is really only as safe as the physical environment you keep it in.</p>
<p>see:<br />
<a href="http://www.nytimes.com/2008/02/22/technology/22chip.html" rel="nofollow">http://www.nytimes.com/2008/02/22/technology/22chip.html</a><br />
for one of many ways your computer can be compromised.</p>
<p>Basically, almost nothing can stop a determined and resourceful attacker with physical access to your computer.</p>
<p>That said keeping your truecrypt volumes in an unmounted state may be a good safety precaution. another would be to use whole drive encryption and then using truecrypt volumes within that, which you keep unmounted.</p>
<p>Also, choose strong passwords. strong passwords that you can remember. but never store your password on your computer unencrypted, because your hard drive can be downloaded to someone elses hard drive and ALL strings in the drive can be added to a password cracking dictionary.</p>
<p>A trick i use is to take a password i have been using for a while, and then mutate it on paper, while keeping the way i pronounce it in my had. Say i used chose the word &#8220;macbookair&#8221; (I didnt, and you shouldnt because its now public, but this was a good password for a base because it takes three dictionary words and puts them togather for my password). Then what i might do is capitalize certain letters and change the o to 0: MacB00kAir, now i add some more shifts and it looks like MacB))kAir or maybe i move some things around and its now nACb))K02 (02 for air). This might seem diffucult, but once you have a strong password like this, there&#8217;s no need to change it often (some may disagree) and once its memorized and you use it every day for a week, its memorized.</p>
<p>Ok, there&#8217;s my 3 cents</p>
]]></content:encoded>
	</item>
</channel>
</rss>
