I'm not just speculating idly, for I wear a wearable rig, and,
should I be held up at gun-point (or more politely, at customs to a
nation that had decided they were interested in my information) how
do I make sure any private/sensitive/personal data does not fall
into the wrong hands?
I don't have a solution for this in hand, but I would look toward
encryption rather than destruction to address this issue. If the
device uses an encrypted filesystem, then stopping the OS and removing
power from RAM creates a significant barrier to data recovery. Of
course, the usual cautions about understanding/controlling use of the
swap space apply.
Another consideration is that an opponent who can do forensic analysis
of magnetic media is likely to be using tempest analysis before you
are even aware of the threat.
When I consider capability of an opponent, I usually quantify it in
terms of money. If the resources extend to US dollar amounts in the
seven to eight figures, then the most effective attacks probably
involve bribery/extortion. Analysis of overwritten, burned, shredded,
or encrypted data is probably a last resort no matter what resources
are available.
-Jonathan
---
Send mail for the `bblisa' mailing list to `[EMAIL PROTECTED]'.
Mail administrative requests to `[EMAIL PROTECTED]'.
