Veracrypt file plausible deniability / cuckoo's egg

Deliberately putting files into a unused paration is deniable? Are you brain dead?

Why do you think it would look suspicious? Just arrange things so it seems like they have some logic behind it, e.g. 256G drive. Partion 1: 0-20G, Partition 1: 32G to 256G. If anyone asks, say that you wanted to start the second partition at a power of 2.

You obviously have no idea how filesystems / storage works at a low level. What exactly do you think is wrong with my idea?

Forensics will image the whole entire disk, not just valid partitions.

This would be a great solution. You could just have a command to turn off and on the hidden data. When it's off it always just returns zeros or maybe an occasional one to make it look less suspicious. I doubt anyone would figure this out.

Why didn't the defense lawyer just make like ten people bite a sandwich, and see if the expert could identify them correctly?

It's not really suspicious to have random free space. Sometimes people delete a partition because they don't want it anymore, but don't have time to make a new one (with a new OS?). If they checked the secure erase box it will even be filled with random data. Viruses can do funky shit too.

I mean will the prosecution suspect it? They'll probably suspect everything you can think of and then some. But the standard in court is not what the prosecution suspects, but what is proven beyond reasonable doubt.

Because good legal counceling is expensive. And if im not mistaken, this "expert" wasn't an independent expert witness. Therefore he wasn't required to take the stand.

One way to do this with a degree of plausibility is to buy a drive bigger than 2TB and partition it with MBR, which is limited to 2TB. I've seen genuine cases of people who did this by mistake asking how they can use the missing space.

Just split the vc file into multiple rar files you dumb faggot. Then burn every separate rar file on a cd-rom and bury the cd-roms across the country.

Encase 8 is a popular forensic tool, when processing evidence unpartation space is one of the first things checked. Files don't just apear in the unpartation part of the hard drive, they can only get placed. It would stick out so much.

You're really retarded. You don't understand how retarded juries or judges are when it comes to tech. They can't understand technical matters so they can reach a verdict of guilty even you think you have plausible deniability.

How many times you explain it, they can't understand!

Whether or not how many times you explain it, they can't understand!