Search Mailing List Archives

Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech]'s lack of plausible deniability (Was: TrueCrypt Alternatives?)

Greg greg at
Mon Oct 6 13:52:12 PDT 2014

Dear Steve,

On Oct 6, 2014, at 9:48 AM, Steve Weis <steveweis at> wrote:

> Hello Greg. I tried out and it was easy to distinguish
> real encrypted images from fake images via filesystem metadata. I
> don't think Espionage offers any realistic notion of plausible
> deniability, especially against "totalitarian regimes" as the webpage
> claims.

Espionage manipulates the filesystem metadata for sparsebundles, so it's unclear to me whether you actually were able to distinguish them or not, but if you were, please send an email to contact at with your results and we'll fix it!


Thanks for having a look.

Kind regards,
Greg Slepak

Please do not email me anything that you are not comfortable also sharing with the NSA.

> This took no special skills and only a few minutes to find. Someone
> who knows more about disk forensics or the journaled filesystem can
> likely recover much more detailed usage information. I'm also suspect
> of Espionage's internal database leaking information, but did not look
> at it closely.
> On Sat, Sep 27, 2014 at 7:15 PM, Greg <greg at> wrote:
>> I work for Tao Effect LLC, our software is on that list, and you can read
>> about how its plausible deniability compares to TrueCrypt's here...

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the liberationtech mailing list