Replying to Avatar Hanshan

i dont know who needs to hear this

but

you can create a Veracrypt volume on some removable media (USB or flash card) and put it *inside a dummy volume.

ie, its clear there's Veracrypt in the media but there are TWO passwords to access it.

one for the dummy volume

one for the real one

so if forced to reveal your PW you can plausibly reveal the dummy one.

while keeping the REAL secret safe.

but it gets better

you can then install a VM from an .iso INSIDE the secret volume and boot it with KVM.

you are then running a customizable computing environment that lives completely inside a secret encrypted volume you can put in your pocket 😎
Avatar
Bill Cypher 1y ago

Let's see how many layers we can go! TailsOS as both your VM and Host OS. You could add TailsOS to the drive so still all you need is that USB stick and any random computer you can set the boot order on.

Reply to this note

Please Login to reply.

Discussion

Avatar
surfhosting 1y ago

another potential configuration:

a "blank" Tails boot stick with no persistent volume

a separate USB stick with a whole-device Veracrypt partition, which once created resembles a device that's been securely overwritten with random data (provided you actually do so before creating the Veracrypt partition, or have Veracrypt do it for you)

then, mount the Veracrypt stick from within Tails, and have scripts to install/set up stuff as needed after boot