P
putoneout
Whole drive encryption does work but what if LEO wants the password? We must think "plausible deniability" here. See this XKCD link that explains my point exactly.
In my experience there is only one way that *might* work:
Use TrueCrypt to encrypt an entire partition on your hard drive. Then this partition is used to hold a virtual machine (see VMWare or VirtualBox). TrueCrypt itself is used from a small USB drive to keep it off the host machine.
The virtual machine is only used for our hobby. It has a complete operating system, browser, your pics and notes. The beauty part is when it gets shut down, the partition itself cannot be proven to hold anything. Its just all random data to an investigator. They cant prove anything is there. Thats why its important not to install TrueCrypt on the host box.
Just my .02c,
OO
Great post, I think that may be where I failed, By having truecrypt itself installed on the pc I used.