The attached contribution is helpful to understand data security in virtual organization.

Conference Paper Advanced Security for Virtual Organizations: The Pros and Co...

The attached contribution is helpful to understand data security in virtual organization.

Conference Paper Advanced Security for Virtual Organizations: The Pros and Co...

Thanks for your very helpful answer, dear Abdul

Dear Reiner, 

The real world is sustained by faith. 

Man creates his son in the faith that he is the biological father. The notary logs your child in the faith that it is actually his son. Married with faith in our partner presents to us. We have faith that Brazil will win the cup. 

We all carry this faith to the virtual world in an exaggerated manner. Is part of a sequence of work by my team and I. A series of articles about cyber faith is submitted or published, regarding the problems of cybersecurity caused by faith that is passed from the Processor, Operating System, Programming Languages , frameworks to systems delivered to the end user and their use. Blind faith that assigns each step from the processor to the use of a commercial system by the end user presents huge security holes. 

One the chapter 15 of the book "Sistemas Comerciais - Conceito, Modelagem e Projeto" "Commercial Systems - Concepts, Design and Modeling"  just printed on Brazilian Portuguese I narrate the case of a director of a company very worried about the confidentiality of digital but left on his desk information, reports on paper with all this information accessible to employees and visitors.

If you're interested in reading our material not yet published, please write to [email protected].

Dear Peter, thanks for your comments. I am aware of my low level in English. A common problem in Brazil. 

I'm new in academia. I have great research, but turn them into good articles is still a challenge. Really the objective of this work with Truecrypt is to alert the general public about the misuse. Universities and companies are gearing wrong its researchers and employees. Researchers in fields such as medicine for example has no affinity for the installation of Truecrypt and always will be vulnerable in the scenarios that I discussed. 

Actually the problem is in the way the header protects the key. If I break the password I will have access to the key. 

I have a theory where I can break Truecrypt even without a previous backup. But unfortunately do not know of C + + to open Truecrypt sources and make the changes that I need. 

If you have time, I would be grateful for your comments on the other two texts.

There is currently much speculation about Truecrypt. Conspiracy theories, NSA, vanity developers. Which in theory were always anonymous. 

With regard to the volume not be re-encrypted, so my experience says it may be too lazy programmer.

At least in Brazil, the article is public, but research when generating good business and its core is protected for some. Or even when companies sponsor research.

The data were found in pagefile.sys and unallocated space after the original solids temporary files deleted by the browser. 

You should really get worried because your passwords are stored on disk in clear text by the browser. After the browser deletes the files, but fragments can be found with the signatures we found. In the first paragraph of the last page of the article on passwords you will find the files where passwords are stored.

Dear Peter T Breuer,

I also agree with your idea and descriptive detail regarding the three papers of  Rodrigo. It is good to see your comments and suggestions.

Ok, I understand the procedure of the police now. 

Congratulations for your university. You are on a level above the other. I'm happy for you.

I'll do an experiment, put a question in the RG. "Do you trust the Truecrypt?" Put one Truecrypt container with the password 123 and will challenge people to put a small secret information in this container, change the password and give me the file. Ideally, no one returned the file. But I'm sure that many people will return the RG certain file their confidentiality will be concerned only with creating a strong password. 

In our similar experiment described in our article, some people put the number of your bank account and password, so secure that they were in relation to Truecrypt. 

Most people do not understand the risks. The only safe way to have an encrypted machine is if you yourself do. But I doubt that Obama would do this alone. He'd ask the director of the NSA to provide the encrypted notebook and this in turn would order to prepare the machine for Snowden, quye course do a backup before Obama change the password. This may be a joke to for the USA or the UK. But it is the reality in many countries. Doctors, politicians and businessmen, are mostly dependent on IT people to provide for their needs. And unfortunately, that's where these people are vulnerable.

Hi Peter,

I actually found out later that it was possible to have the same result with the backup created by Truecrypt. But I do not use the backup on my experiment. I use the header file, which is different from the backup. If you create a backup manually and remove the initial File 512b vera that there are different things and also different hash.

But you're right in that information into work. I'll do that.

The Truecrypt does warn their users in hidden comments.

I do not know why Truecrypt does what it does. But to change the password of the volume, the salt and the entire volume should compulsorily be redone.

In my theory, with a little tweaking in the source code, I am able to create a container opener. Since I can create a default password for opening, even without a prior backup and have access to the original salt.

The goal of my work is not reaching the Truecrypt, but its users that ignore these vulnerabilities. Mostly, researchers from other fields, universities, companies and politicians that are used by third parties to create their volumes and automatically become vulnerable.

Thanks Peter, I have a lot to adjust yet. And your comments are always welcome to improve my work.