Difference between pages "Internships" and "File Vault"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m (New page: This page describes internship opportunities in the field of computer forensics. Please feel free to add your own. =USA= Internet Crimes Against Children. ICAC has offices in almost ever...)
 
m (add to cat encryption)
 
Line 1: Line 1:
This page describes internship opportunities in the field of computer forensics. Please feel free to add your own.
+
File Vault is the cryptographic file system developed by [http://www.apple.com Apple] and introduced with MacOS 10.3.
  
=USA=
+
File Vault works by storing each user's home directory in an encrypted "[[.sparseimage]]" file. The file is automatically mounted when the user logs in and unmounted when the user logs out. All of the user's files and preferences are stored in this fileThe file's encryption key is stored in the .sparseimage file, but that encryption key is itself encrypted with the user's login password.  
Internet Crimes Against ChildrenICAC has offices in almost every state.
+
  
Check with companies that do computer forensics. Examples include Kroll and Pinkerton.  
+
There are no known attacks against File Vault other than a brute force attack on the user's password.
  
Explore the Scholarship for Service and Scholarship for Work programs offered by the US Government.
+
As part of the [http://www.apple.com/macosx/features/300.html#security security enhancements] in OS X 10.5 (Leopard) Apple have moved from AES-128 to AES-256 for the encryption used in the disk image.
  
==Vermont==
+
=== Links ===
Vermont ICAC (Internet Crimes Against Children). http://www.vtspecialcrimes.org/
+
*You can find a good discussion of File Vault's usability shortcomings in [http://www.simson.net/thesis Simson Garfinkel's PhD Thesis].
 +
*[http://chaosradio.ccc.de/23c3_m4v_1642.html Unlocking FileVault] Talk at [http://events.ccc.de/congress/2006-static/static/2/3/r/23rd_Chaos_Communication_Congress_7c1f.html 23c3] (video)
 +
*[http://chaosradio.ccc.de/23c3_mp3_1642.html Unlocking FileVault] Talk at [http://events.ccc.de/congress/2006-static/static/2/3/r/23rd_Chaos_Communication_Congress_7c1f.html 23c3] (audio)
 +
*[http://crypto.nsa.org/vilefault/23C3-VileFault.pdf Unlocking FileVault Whitepaper]
  
Vermont State Patrol. They are almost always understaffed, and may have suggestions working with Counties and Cities. It requires a that you are not a felon and can pass a 7-year background check -- but a lot of places are so backlogged they are putting on reserve deputies to work cyber crime. http://www.dps.state.vt.us/vtsp/bci.html
+
[[Category:Encryption]]

Revision as of 19:40, 4 July 2008

File Vault is the cryptographic file system developed by Apple and introduced with MacOS 10.3.

File Vault works by storing each user's home directory in an encrypted ".sparseimage" file. The file is automatically mounted when the user logs in and unmounted when the user logs out. All of the user's files and preferences are stored in this file. The file's encryption key is stored in the .sparseimage file, but that encryption key is itself encrypted with the user's login password.

There are no known attacks against File Vault other than a brute force attack on the user's password.

As part of the security enhancements in OS X 10.5 (Leopard) Apple have moved from AES-128 to AES-256 for the encryption used in the disk image.

Links