How would you do that ...

[rjh at sixdemonbag.org]

I have dealt with a similar problem in real life, as a real problem with real people.

We created a custom Linux environment, burned it to Blu-Ray, and Alice crossed the border with her Linux environment tucked into her CD player.

On the other side she acquired a laptop, Blu-Ray drive, and USB drive locally, booted into this custom environment, then flashed her BIOS and gave her drives a low-level format.

Rebooting into Linux (to reduce the likelihood of BIOS-based malware being present in memory) she used her system normally, although never touching the local hard drive. All storage was on USB stick.

Prior to departing the country she wiped the laptop hard drive and donated it to a school. The Blu-Ray disc and USB drive were physically destroyed and discreetly dumped.

I am not at liberty to say who Alice was, where she was, or why her needs were so extreme. But yes, we actually did this.


On May 3, 2021 4:24:01 AM CDT, Stefan Vasilev via Gnupg-users <gnupg-users at gnupg.org> wrote:
>Hi all,
>
>here is a little scenario. Alice and Bob needs to find a way to do 
>encrypted communications globally.
>
>The task is the following: Alice needs to travel to a foreign country 
>without any devices (laptop, smartphone etc.).
>
>At arrival she needs to communicate daily (no real time communications)
>
>with Bob to exchange encrypted documents.
>
>Alice is not allowed to login in any services, like her Gmail account, 
>social media etc. to not reveal her login credentials.
>
>She can't use Tor, because at her destination Tor is blocked. The only 
>option she has is to use Internet Cafés or public libraries etc.
>
>She is aware that at an Internet Café keyloggers may be installed. Last
>
>but not least she does not carry any notices on paper with her.
>
>
>How would you solve this task?
>
>
>Regards
>
>Stefan
>
>
>
>
>
>_______________________________________________
>Gnupg-users mailing list
>Gnupg-users at gnupg.org
>http://lists.gnupg.org/mailman/listinfo/gnupg-users

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20210503/5344c387/attachment.html>