Condensing Your Life on to a USB Flash Drive?

Fear the Clam asks: "My wife and I figure that if we plan for the worst, it'll never happen, so we've been putting together 'If public transportation bites it and we have two minutes to grab our stuff and start walking, never to return to NYC' getaway knapsacks. With luck they'll live in the closet forever. Coincidently, this morning the New York Times has an article about what to take when you have to leave home in a big hurry [DNA verification required], and they suggest making a list of all of things like Social Security and credit card numbers, scanning birth certificates, marriage license and tax returns, and saving it all on a USB flash drive. Since this would be a complete identity kit, encryption is of utmost importance. What's the best solution? A flash drive that claims to encrypt or a platform-independent, self-extracting, encrypted file on a regular drive? Any suggestions for sturdy drives?" Of course, the choice of USB flash drive covers only a part of the problem. What other data would you put on this piece of "contingency hardware", and how would you protect the drive itself in case you did have to "swim for it"?

I'd take a backup of my backup.

[Anonymous Coward]

I've had three USB Flash Drives (Lexar, and two Sandisks) die on me, usually under a year, presumably a byproduct of the limited writes available to NAND memory.

They tend to be pretty tough

[Helios1182]

Most USB drives are pretty tough. I would make a copy or two and put it in a crush/water proof case like an Otterbox.

OMG! The sky is falling!

[Brent Spiner]

Well if your going to be all paranoid, you might as well get one of these. [qsleeper.com]

Life on a USB drive

[springbox]

Consider putting it on a tough drive. I personally use the Cruzer Titanium [sandisk.com]. It's made from a light weight "space age" metal unlike most cheapo thin or thick plastic drives. "Crush force exceeds 2000 lbs" they claim.

Also for my private data, I have a TrueCrypt [truecrypt.org] volume on the drive so that in case someone gets their hands on it, my not so public data will be safe.

If you're actually intending to put your LIFE on it though also consider a backup strategy so you won't lose everything when your drive falls off your keychain and into the sewer where it's eaten by technologically advanced rodents.

Use Truecrypt for encryption

[Faxmaster]

Use Truecrypt (www.truecrypt.org). It's free, open source, and extremely secure (AES, Blowfish, CAST5, Serpent, Triple DES, and Twofish). I use it on my thumbdrive to backup all of my important data.

Re:If it had to swim

[Anonymous Coward]

Two words: ziplock bag.

I put my wallet in one on rafting trips. And nary a trouble I've had, despite one two good dunkings.

That might not last hours underwater, but for long-term storage I'd use one of those vacuum-seal gizmos, which would basically be water-right until you tore it open.

contents

[egburr]

Here's what I can think of off the top of my head...

Social Security cards
Driver's licenses
Recent photos, head only and full body (clothed!)
Passports
Contact info of relatives, friends
Vehicle registration
Birth certificates
Wedding license
Property deeds
Will
Living will
Account and contact information: banks, credit cards, utilities, insurance (health, house, car), mortgages, loans

Re:What's the best solution?

[jmcharry]

Since this is the sort of thing one isn't likely to think about often, and digital archives tend to deteriorate or become obsolete, paper is a good bet, but make it acid free bond, and store it in acid free covers. There should be a second, similar, copy far enough away that a single event is not likely to take out both. This should be good for well over a lifetime.

Re:If you're swimming...

[Red Alastor]

I forgot my USB drive in my pocket before washing my pants once. It survived without any problem. :)

I like TrueCrypt...

[jbarr]

It's for Windows only, but I stumbled upon TrueCrypt found at http://www.truecrypt.org/ [truecrypt.org] and really like it. And it's not only useful for USB drives, but can be used to create encrypted logical drives on a Hard Drive. For the really paranoid, the documentation even covers lots of stealthy ways to use it so as not to be detected.

I'm certainly no expert at encryption, but it seems pretty solid. Basically, it creates an encrypted container file and then mounts it as a logical drive when you open the file through the app. I've seen commercial counterparts such as StealthDisk, and I think TrueCrypt's interface is easier to use and its execution is more solid.

It's OSS and free as in beer and as in speech.

Why a flash drive?

[Wonko]

they suggest making a list of all of things like Social Security and credit card numbers, scanning birth certificates, marriage license and tax returns, and saving it all on a USB flash drive.

Why not just use a CD (full size, or 180 meg)? They are cheaper and more durable than a flash drive. Before I had my new, larger, flash drive I used to carry a 50 meg business card CD in my wallet. It would have to be replaced every 3-6 months from being repeatedly sat on :). I would imagine they would hold up better outside of the pocket, though :).

Since this would be a complete identity kit, encryption is of utmost importance. What's the best solution? A flash drive that claims to encrypt or a platform-independent, self-extracting, encrypted file on a regular drive?

I wouldn't use the software that comes with the drive. If I were doing this I would use GNU Privacy Guard. You should probably store the key in a safe location far away from home, and preferably with a strong passphrase.

Any suggestions for sturdy drives?

I currently have a PQI I-Stick [pqi1st.com]. I have only had it about a year so far and I haven't doen anything stupid with it yet. It mostly just sits in my wallet in its little wallet case. I very much prefer keeping my flash drive in my wallet as opposed to my keychain. I also like that the little wallet insert will hold two drive. The only thing I dislike is that the wallet holder is so much thicker than the drive.

What other data would you put on this piece of "contingency hardware",

I have all of my revision control repositories mirrored to my flash drive and also any documentation or notes that I write. That is basically everything that I created myself and would have to do work to replace.

how would you protect the drive itself in case you did have to "swim for it"?

I would probably make sure the data was out of town before I was. Most of this data either doesn't change often (credit card numbers), or it never changes (SSN, birth certificates). Encrypt it, put it on some media of some sort, and send it out of town. Most people probably have friends or family living out of town that they can trust, send it to them. If this is not an option for you, you can probably get a box at a bank out of town I suppose...

Lots of missing information...

[rcbarnes]

How immediate is the need for access to the information? The stronger the solution, the slower the access for the most part. Something that needs to be immediately accessable will need to be bundled with proper decryption tools (assume nothing better than Windows 95 will be available) on-stick.

Also related: what operating system are you using? Under Linux, you could use a loopback encrypted filesystem, for example, but under windows such would not be viable.

Are we assuming that the computer will be destroyed, or that we need to stick to a pure-RAM access system to prevent residue on the hard drive from being intercepted?

Are you willing to trust a corperate product for ease-of-use concerns?

Finally, how are you securing your original documents? Might it just be as easy to grab an organized safe-box as keep all the digital security on a digital form? Keep in mind that only origial copies are good for anything beyond having a reference point to start receiveing replacement copies of your stuff.

One more thing: How much of this is overkill? Keep in mind how cheap and simple it is to acquire copies of an arbitrary person's complete identifying information (I often see ways to do it under two hundred dollars, including original copies of all the usual certificates and plastic cards, which would cost less for a professional). A chain is only as strong as its weakest link, and in this case, with just some reasonable precaution, the path of least cost and difficulty is through more common means of aqusition than stealing a thumbdrive.

Re:I'd take a backup of my backup.

[Anonymous Coward]

I deal with the write issue on a regular basis. We used to use flash for embedded systems but the annual replacement of flash drives got excessive. We now use microdrives, which have an actual spinning media drive in them.

If you're looking for a backup solution for your family data, organize your files in a competent manner (so it is comprehensive and well organized), and then develop a routine to write monthly CDs off. We dump two to CD, one of which goes to the bank safety deposit box (in a town 30 miles from here where I work), and the other gets dropped off at my folks. We keep their own backup as well. Mine is encrypted (theirs isn't since they're not that sophisticated and don't care).

Works like a champ and was tested once already when my home workstation died and needed data recovery. Damn cheap-assed capacitors leaked on the motherboard...

*flyover sam*
(I'd post under my sig but there's nothing like a Slashdot stalker to change your interest in karma)

Homeland Security has web site for you!

[rufusdufus]

Homeland security has a website called www.ready.gov [ready.gov] that has built a whole website about preparing for emergencies. They also have an Emergency Financial First Aid Kit [ready.gov] that includes a nice form that consolidates all the personal information you might need in order to get financial services in an emergency.

After getting the basic emergency kit ready, fill out and print this form and put it in your kit. Then, encrypt it and put save on internet, maybe mail it to your gmail account.

Re:Encryption (blowfish)

[lemonjelo]

echo '123...testing...123' > test.txt
openssl enc -bf < test.txt > test.txt.bf
mv test.txt test.txt.orig
openssl enc -d -bf < test.txt.bf > test.txt
diff test.txt.orig test.txt

Re:I'd take a backup of my backup.

[LDoggg_]

wikipedia [wikipedia.org] says: "A typical flash memory unit wears out after 10,000 erase operations."
1 Gigabyte times 10K full writes =~ 10 Terabytes.
High speed USB 2.0 is supposed to be 480Mbits/second. Or 60MegaBytes/second

Not sure if you can write at full speed, but since you said there isn't enough bandwith:
You could transfer 1,892,160,000,000,000Bytes/year or approximately 180 times more bandwith than you'd need.
The much slower USB 1.1 specification would give you over 4 times the bandwith you'd need in a year for a 1GB USB thumbdrive.

non-magnetic copy [Re:They tend to be pretty tough

[saitoh]

Hadn't thought of the otterbox (nice idea, makes sense). If your really trying to prep for something like this, consider making a non-magnetic copy also. While the odds of an EMP type disaster killing the drive (especially if stashed in a safe place) are slim, so are the odds of a nuclear disaster I guess.

Consider burning it to a CDR also. This is stuff that might have to be updated once a year (such as deeds or photos/contacts) anyway, so its not like the age of the media and deterioration will be a big problem.

A rule of thumb I've learned is that if your planning for stuff that occurs more then 2 standard deviations away from the mean, then chances are you want something that is (or can at least be considered virtually) full-proof. At the very least, the odds of all of the combined methods together have a lesser chance of failing then the original threat does of occuring.

Re:Just Plain Stupid

[jotux]

Maybe no one will give a damn if NYC gets nuked. But if someone breaks into your house and steals the box you keep all your documents in, that would suck. And what if the city has an earthquake and he's evacuated for a few months. If he takes a drive with him for employment/reference/historical purposes and loses it, that would also suck.

And the reason your social security card/birth certificate/stock certificate aren't encrypted....because you're supposed to keep them in a safe place. Like a safe. So it's only logical that if you want to make them portable in case of emergency, you want to store them in a secure way.

Re:I'd take a backup of my backup.

[arodland]

I'd say that's a bit out of date. Current parts are usually expected to get 1 million write cycles per block "minimum", and if you get good ones, you can approach 10 million. And provided that you don't rewrite every single piece of data every time, wear leveling will help you out too. So the parent is probably right. You would have to work really hard (or get a number of lousy chips) to kill a decent-sized drive with writes in a year.

wash away

[marcushnk]

I've had 4 of my 512 mb usb mem key's go through the wash dozens of times.. :-) no problems there at all :-)

Re:I'd take a backup of my backup.

[Doppler00]

It's probably impossible to re-write the same piece of data everytime. Flash memory is usually designed to rotate through the available empty space, thus if you erase/delete the same part of the file over and over, it's actually erasing block a, and writing to the next free block a+1, until it hits the end of the memory. Only after it's cycled through all available free space will it write to the same block again.

How I do usb+crypto

[Anonymous Coward]

devmapper and automount. I mount the drives by logging into my $DISPLAY, which requires, via .xinitrc:

1. The drive's presence
2. The drive must be mountable (I test for /lost+found on the drive to figure out when it's been successfully mounted (it's ext3 with a one-month/1000 mount fsck))
3. The ssh private key, which lives on the drive, must be loaded with ssh-add

The automount timeout for the drive is 2 seconds, so I can pretty much unplug it at leisure. I put a call to run ~/bin/usb-storage-hook (as my uid) in the hotplug scripts, which in turn forgets the encryption key for the drive and xscreensaver-command -locks my $DISPLAY when the drive is unplugged. When I plug it back in and unlock xscreensaver, it wants the keys for the USB drive again. I load the keys with ssh-askpass-fullscreen, but there's a bit too much of a delay between prompting, mounting, and retrying, during which you can focus and input to other windows (think: xdm crash-restarting and logging in, key-by-key, on console), which I'm still working on.

Sounds more complicated than it is, and there's still more stuff I have to do (move gaim-encryption and OTR stuffs to the drive and point symlinks, require the drive to boot, etc.), but this system makes me feel all warm and fuzzy.

Anyway, long story short, devmapper, automount, ext3. (Feel free to poke holes in my description, btw, I'm open to suggestions).

Hrm. Sure I've left something out...

Re:PGP

[Xibby]

For example:
Zip up your stuff (or tar.bz2, whatever...)
gpg -c --cipher-algo AES256 Stuff.zip

Copy Stuff.gpg to your flash media.

To decrypt, copy Stuff.gpg to your computer and run:
gpg -d Stuff.gpg > Stuff.zip

Don't forget your password. Make sure you use a trustworthy GPG binary, and the unencrypted archive should never be stored on your flash media!. The unencrypted version could be easily recovered using undelete software.

Now if it was me doing this, and I had some time on my hands, I'd look into the Linux crypto loop stuff. But that doesn't work all that well if nobody in your family runs Linux. So, I would have to opt for True Crypt [truecrypt.org] on a Windows machine, create an encrypted volume on my flash drive, copy over the improtant files, unmount and run for it. At my parents/grandparents/whatever, it would be trivial to download and intall true crypt again and get access to my files.

Ruggedizing the media

[CupBeEmpty]

I have done a fair amount of canoeing/rafting and have some wilderness medical training so the need to keep important things dry and protected is something that I have had some experience with. I have been most happy with this hard case [thewaterproofstore.com] it is completely waterproof and you can see what's in it (this is actually useful). It is also fairly small which is nice. I recently went to Africa so I wanted to be able to communicate. I was able to pick upa quad band mobile phone (as well as a satellite phone), which worked well in cities and surprisingly far out into the bush.

The phone and charger fit well inside the case along with a small knife/multitool, and laminated (and shruken) copies of all of my important documents (visa, passport, list of important contacts). It would not be hard at all to fit all of that and a small USB drive in that space. The hardcase is also a better bet than something soft for really important stuff. In a wilderness/emrgency situation you really want to make sure than any gear you do take with you is protected. Also the hard copies of the documents is a hugely good idea in an emergecy where computer availability could be scarce/swamped.

There are a lot of waterproof bags and cases, and they all tend to be well reviewd by people that beat the hell out of them (outdoor enthuisits). I higly reccomend a small hard case over a soft case for electronics. If you do your homework its pretty much a no brainer. Also if you are really serious make sure to test the gear. Put some toilet paper in it and dunk it in water, beat the hell out of it, leave it outside when its cold and hot. That way you can see how much it takes to pop open a case underwater or what conditions cause condensation etc. Then you will really know if your protection works.

In 1983 I came to the US with no records

[Anonymous Coward]

I managed to eacape from an East European country without anything, no passport, no PhD, DSc certificates or any other documents. Months later I managed to come to the US. After many unsuccsessful attempts to find an academic job, I eventually managed to get hired by a small university based only on the testimonies of three fellow American scientists who met me before and knew my work and a few photocopies of some of my publications.

Records are not always necessary, good, generous people can help you.

Another very sturdy flash drive

[frazzydee]

Another great flash drive if you're looking for something sturdy, is the "Corsair Flash Voyager". It was rated 8/10 on the Ars Technica flash drive roundup [arstechnica.com], and it is actually encased in rubber.

While this may not have the rock hard connotations of words like "Titanium", it is an excellent choice if the sturdiness of the drive is important. You can throw it against walls, bounce it on floors, and even submerge it in a glass of water and it will still work! While I don't actually have first-hand experience of this, it seems very possible if it is completely encased in rubber.

Of course, actually doing this probably isn't recommended, but if this does happen to the drive, it will still work. While it doesn't get any points for its looks, it is probably one of the best drives out there if you're concerned about how much abuse it can take!

Re:If there's a (thermo)nuclear attack...

[keraneuology]

I don't know where you people get these wacky ideas. EMP is a myth, propagated by science fiction and kept alive by idiots like yourself.

Let's start out with [northwestern.edu]:

The existence of the electromagnetic pulse has been known since the 1940's when nuclear weapons were being developed and tested. However, because of lack of data, the effects of an EMP were not fully known until 1962. At this time, the United States was conducting a series of high-altitude atmospheric tests, code named "Fishbowl." The nuclear explosion, "Starfish Prime," which was detonated in the Pacific Ocean 800 miles from Hawaii, caused an EMP that disrupted radio stations and electrical equipment throughout Hawaii. Consequently, in 1963, the United States and the Soviet Union signed the Atmospheric Test Ban Treaty to counter the considerable threat posed by EMPs. Unfortunately, the destructive potential of an EMP increases everyday as society becomes evermore technological because of an escalating dependence on electronics.

Don't forget to review [cryptome.org] the US Army Corps of Engineers.

You can google and wiki more on your own.

Re:If there's a (thermo)nuclear attack...

[Your Pal Dave]

I don't know where you people get these wacky ideas. EMP is a myth, propagated by science fiction and kept alive by idiots like yourself.

EMP effects were observed at a distance of 1500 km during the Starfish Prime [wikipedia.org] test blast. Quoting the linked article:

the EMP created by the explosion was felt as three hundred street lights failed, television sets and radios malfunctioned, burglar alarms went off and power lines fused.

This was in 1962, so we're talking about vacuum tubes and electro-mechanical systems. Modern semiconductors would be significantly more sensitive to EMP effects.

My objection to the article:

[kfg]

It is entirely focused on records. This is the information age, right? So we need our personal information to survive, right? As I've already posted the information might well turn out to be important, and you should make sure you have it, but if Katrina taught anybody anything it's that papers don't insure your survival. You can't eat your papers (although when things get really, really sticky you might be able to trade them for food).

What you really need in that pack:

A good, sturdy pocket knife. Not a Swiss Army jobber. A single blade, like are sold to hunters. Metal, not ceramic.

A metal spoon.

Cheap chopsticks.

Do not, literally upon pain of death, use any other utensils than these to prepare or eat your food if you can at all avoid it. Make it a religion to keep them clean and sanitary.

Strike anywhere matches in a waterproof safe.

A firestarting piston. Use this before you resort to using your matches. Learn how to use it before you leave home.

A personal water filter.

A bottle of alcohol. 190 proof vodka is 190% better than the stuff from the drugstore. Make it yourself if you have to. Learn about cold distilling if you want to take the long, but easy way.

A few ounces of honey is nice to have along, but this is the most dangerous stuff in the pack. Think hard about it before including it. You can eat it if you have to, but that's not what it's here for.

Aspirin.

Antihistimines.

Any other drugs you personally need to stay alive. If you really need Prozac or Valium to stay alive, plan on dying.

A homemade soda can stove.

A mini roll of duct tape.

5 pounds of gorp. If tightly rationed this well feed you for a week.

An "Emergency Blanket."

Ziploc Baggies (These last two items are the only survival gear of note invented in the 20th century).

A camelback water resevior recently filled with known good water.

100 feet of parachute cord. Learn how to tie knots before you need to.

Wool cloth. Two shirtweight peices 45"X 72". One heavier weight 60"X108". These are your clothes, your hammok, your chair, your carryall, your. . .

Learn how to use them as such before you need to. Do not be tempted to substitute cotton for wool to save money. The savings could kill you. Not in a pleasant way either.

Two pair of wool socks.

Three yards of 36" wide cotton could come in hand as well. This is your hat, your belt, your shoulder bag, your sling, your . . .

A waterproof, windproof shell. Yes, even if you're in a tropical zone.

A pennywhistle. Yes, I'm dead serious about that one. Learn how to play it a bit before you leave home. Even better, also learn how to make a pennywhistle out of any tubular thing you can find, before you need to.

If you expect to stay "civilized". . .money. If you don't, more gorp. When push comes to shove people will trade you nearly anthing for food. Money weighs less than gorp though. If you have your choice don't stay civilized. Head for the woods. Cities are a barren desert when it comes to survival. The woods have everything you need to survive (these days even including manufactured items, more's the pity). Cities often do not. Cities are also full people. Being full of people stretches resources so they don't have things in 'em anymore. People are also nasty sumbitches who will hit you over the head and take your precious personal information, encrypted or not (they don't find out how well you encrypted your information until after they have hit you on the head).

Two weeks with me showing you how to combine all this stuff with stuff you can find anywhere (like pebbles), especially in a disaster zone, otherwise you're just going to be in deep shit within an hour anyway.

Time with me is limited. Start poking around the internet for this information now. For God's sake, learn to take care of yourself. Any baby cockroach can do it. Your brain is bigger. Learn to use it for somthing other than tracking your stock portfolio.

KFG

From Katrina Ground Zero

[DownTheLongRoad]

Living in New Orleans has burned a few lessons into me.
First, make a list of things to take if you have to evacuate. I forgot several things when packing up at 3am the day before the storm hit.
Second, keeping a safety deposit box in the same area as your house is a bad idea. We have banks which have been closed for a month and will probably be closed for many more. People come in every day asking about when they can get it. People wanting to leave the country but can't get their passports, very bad news.
Third, keep a decent supply of water and canned food. Rotate the supplies to keep them fresh but always maintain one weeks worth of supplies. Figure at least one week before outside relief gets to you. Two weeks would be a safer bet. It's easier to do than you think. A water dispenser with 3 or 4 bottles should hold you over nicely and large cans of food from Chef Boyardee will make this very inexpensive. To use those cans, make sure you have a mechanical can opener on the assumption of no electricity. Keeping a 12 pack of Toilet Paper around doesn't hurt. If anyone asks why the large amount, simply say that you get it cheaper.Keeping some cash also doesn't hurt a bit. When the power is out, checks and debit/credit cards are worthless. Multiple things can happen outside of a nuclear war or hurricane which can force you to be self-sufficient for a week or two. Trust me, when the lights don't work, the police won't answer 911 calls and people are looting, you will be forever grateful you took a little time and money to be prepared.
Fourth, paranoia can be a good thing. My wife complained when I bought a generator and 40 gallons of gas at the start of hurricane season. She gave me even more grief when I bought canned goods and water we didn't need within the next week. She sat on the sofa while I boarded up my house like world war III was coming to New Orleans. She thanked me several times for doing all of the above when we had electricity, food, water and an unlooted house after the storm.

Personally, I send all of my files to both Gmail and Yahoo. I have seperate accounts set up just for those files. If a disaster befalls the US that takes out both of those companies and destroys my home computer on the other side of the country, losing computer files won't matter a bit, I'll be too busy trying to survive.

Re:Why save it locally at all?

[damiam]

you have no idea where the hell google's gmail servers are geographically. and then google has all your personal data. that seems like a pretty terrible idea from a security standpoint, even if it is encrypted. nothing's completely unbreakable.

I know enough about Google's servers to know that they have many datacenters, spread out around the world, with redundant backups. While I wouldn't ever trust anything completely to them, I think a GMailed file would have a better chance of surviving a disaster than a USB drive in your closet. As for encryption, it may be that nothing's unbreakable, but it gets pretty damn close. I don't anticipate anyone willing to spend billions of dollars and millions of years to crack my bank account number.

Other ideas...

[OneFix]

Why not just save your "important" data on a drive mounted in a removable IDE drive bay. If you ever need to take everything, you just shut down the machine and take the drive... Yes, this may be a little heavier than a USB flash drive... You could build a set of cron jobs (like I have) to back up your important directories to the removable drive on a nightly basis...

"Documents and Settings" for a Windoze box
"/var/mail" for Linux
User directories under Linux
Bookmarks, Mail Client directories (Thunderbird, Evolution, etc), IM directories (GAIM, Trillian, Google Talk, etc)

This would probably be preferable to say an external USB/Firewire drive, because it would be much faster for standard operations and would be connected until you took it with you...not to mention, there's more you can do for a damaged harddisk than a damaged USB flash drive...hard drives are sealed...most flash drives are not...there's a whole industry built on recovery of harddisks...not so on flash drives (not yet...it's probably coming)...

Or better yet, why not use one of the GMail Filesystem [google.com]. This would certainly be more likely to survive...you wouldn't need to "grab" anything...all you would need is a machine with web access...keep something like 7-zip for Windows, GPG (or what ever you used to encrypt the data), and the GFS software for Windoze and Linux...you wouldn't really even need the archives, just a "draft" message with links to the files/projects. You could use another online filesystem and mirror the accounts (don't use software raid, just use 2 devices), so you could always recover the data if you lost access to one account.

But then again, what ever happened to the idea of keeping a safety deposit box in another city??? You can get to it once you are "safe"...not to mention that the authenticity of "scanned" copies of documents would be questioned because of Photoshop/Gimp...with a safety deposit box, you could have notarized, physical copies...Many of the things you list are things that you really don't need at home and generally wouldn't mind driving to get when/if the need arises (SSN, wills, Birth Certificates, Tax Returns, negatives of family photos, etc)...which would make a much more difficult situation easier for you (knowing that your important personal documents were safe)...who wants to worry if the only scan of their birth certificate was going to survive when they themselves are in danger...not me...

If you DO go with the USB Key idea, then don't trust any of the "built-in" security schemes and use your own encryption and buy 2 and use software RAID to mirror the drives. That way the data could be rebuilt if either one fails...you could each carry one of them as well...in case something happened to the other one...also beware of the pitfalls of flash memory (limited number of writes comes to mind right away)...

Any idea of saving hardware is moot if you're thinking of a flood in a major city (like NYC), because even waterproof hardware would be destroyed by all of the chemicals that would be floating in the water...

Re:I'd take a backup of my backup.

[Zandall]

Try using JFFS or JFFS2 instead of FAT. These filesystems were created with NAND memory in mind.

Re:My objection to the article:

[TheoMurpse]

It's killing me to know why the honey is the most dangerous thing in the pack, and what it's really in the pack for, if not for food. Attracting animals to kill? Can you commit suicide with honey? What?

Re:My objection to the article:

[kfg]

. . .what's the honey for?

It's a topical antibacterial. Even when push comes to shove I don't recommend eating Neosporin. When you have a choice between packing something you can eat and something you can't, go with the thing you can eat. Native Americans didn't typically use chemical tanning, not because they didn't know how. They did. They also knew that tanning meant you couldn't eat your clothing or horse tack when times got sticky.

Clean a wound with alcohol. Seal the wound with honey. If corn starch is available dust the honey with it (You're carrying cornstarch because you can eat it. You can't eat talcum powder). Seal the honey with duct tape.

KFG

Re:My objection to the article:

[Anonymous Coward]

The honey will only be active as a wound treatment if it is unpasturized. The heat destroys the enzyme responsible for its antibacterial action.

http://www.worldwidewounds.com/2001/november/Molan /honey-as-topical-agent.html [worldwidewounds.com]

The antibacterial/antifungal activity is not only due to osmosis.

-Bob

Re:I'd take a backup of my backup.

[kasperd]

Flash memory is usually designed to rotate through the available empty space

The flash doesn't know which sectors are empty, only the file system knows that, which is a different layer. So what you describe would require the flash to be larger than advertised and use this extra space for the purpose. Assuming it actually works that way, then were does it keep information about correspondance between logical and physical sectors, and how does it avoid overwriting this all the time? No doubt it is possible, but do they actually put such complicated stuff in the flash? And does it mean, that we no longer have any need for the file systems able to handle this?

Re:Why save it locally at all?

[squoozer]

I agree with almost everything you say except the bit about encryption not being unbreakable. While I admit that in theory all current encryption schemes are breakable it is easy to encrypt something so that it is for all intents and purposes unbreakable without the key. Of course this assumes that there isn't a flaw in the encryption method and that nobody has built a quantum computer naturally. The first could be partially overcome by multiply encrypting the data with different methods - thus requireing a flaw to be found in each.

Anyway that's beside the point. The OP must be on crack or something. If the disaster is so big one of the worlds leading cities is never inhabitable again the guy, his wife and everyone they know is probably dead anyway. What the point planning for a situation you can't hope to live though. You might as well just enjoy the here and now. As for saving your CC numbers - hahahahha = like anyone will accept credit cards. You might be able to barter with food and water but that's about it.

Personally I would take water purification tablets and a 5 * 1 litre bottles of water as my number one thing to pack (more if I have space). After that I would pack low salt high energy food + a small pot of salt (allows you to replace salt when you need it rather than every time you eat). Some sturdy cloth would be useful as it would be easy to rig up a crude filter if you have to drink muddy water (at least the water will be free from bigger bits and the purification tablets will see to the rest - last resort though as "purified" water is horrible). A few boxes of matches sealed in plastic bags would be good as well as a really big coat. And finally, an assortment of large sturdy knives and a hand axe. No where in my list of essentials would I include a USB flash drive.

Re:Encryption

[kasperd]

As far as encryption goes, for god's sake don't rely on anything the manufacturers ship.
I agree. And don't rely on full disc encryption products. We are just starting to understand the security issues of full disc encryptions, it will be a few years before I'd expect manufacturers to start understand it as well and be able to implement something secure. For now GBDE is probably the most secure, but even that isn't perfect. gpg --symmetric --cipher AES256 would probably beat any full disc encryption when it comes to security.

Use Blowfish or Twofish for proper 2 way encryption.
Uhm, what is a two way encryption? And I'd advice against blowfish as it only uses 64 bit cipher blocks. Go for something with at least 128 bit cipher blocks and even more if you have many GB of data. AES256 have 256 bit keys and 128 bit blocks, which I think should be sufficient as long as you don't need to encrypt more than 64GB of data in the key's lifetime.

Re:Why save it locally at all?

[Jamu]

One way to waterproof a box of matches is to pour melted wax into the box and wait for it to set. When you need a match, just pick one out (The rest, naturally, remain waterproof in case you drop the box.) and rub off the wax.

Re:I'd take a backup of my backup.

[bani]

Yes, on all counts.

Modern flash is quite sophisticated (at least compactflash and USB sticks are, no idea about SD/MMC)

Not only does modern flash have multiple redundancies and ECC, it also has wear leveling and badblock reallocation. This is all completely transparent to the end user / operating system.

IOW, there is no need for the OS or filesystem to handle any of this.

And yes, the flash is larger than advertised for exactly these reasons. So are your hard drives (IDE, SCSI) which have similar features and have similarly reserved space.

Try this on for size

[acid_zebra]

Keepass [sourceforge.net] is an excellent free, opensource, no-install password/data manager featuring strong crypto. here [del.icio.us] are a few pointers to USB key-based app collections that I've bookmarked over time.

Re:My objection to the article:

[kfg]

I still haven't figured out how the honey would be dangerous. . .

It's a vector of sticky. :)

Yes, the penny whistle has me guessing as well. . .

Never underestimate the value of being able to make friends by being able to play an instrument, particularly when the shit hits the fan. The friends might well have food. Eat theirs when you can instead of your own. The pennywhistle is inexpensive (duh), easy to get started on, nearly indestructable, versatile, but particularly good at playing "happy" music.

Never underestimate the power of happy music to turn misery into a party. In the last big blackout nobody in my neighborhood has anything but happy memories of the experience. I had an impromptu music festival going within an hour of the lights going out and kept it going until they came back on. It wasn't a blackout, it was a block party (of course nobody's homes were blowing away or under water either).

A foot long metal tube can also be a suprisingly useful thing to have around. When you're packing light and moving in a hurry you have to learn to see things for what they actually are, and not for what they are labeled. Duct tape, for instance is a strip of rubberized cloth with some adhesive on one side of it. Thus it's repair tape, bandages, moleskin, a bit of rope, etc. Corn starch is soup thickener, foot powder, dry lubricant, etc.

A foot long metal tube likewise has a variety of utilitarian uses. In this case signal whistle is the most obvious. You really should carry a signal whistle. Why shouldn't it also be a musical one? (my 6'x 3/4" PVC hiking staff is a suprisingly loud herald's trumpet, even though it lacks a bell and you should see the look on a Coast Guard officer's face when you demonstrate that you do have the required signal horn on board by blowing out his eardrums with your "boathook")

Actually, my own choice is 3/4" PVC pipe quena (an end blown flute). People don't even realize it's a bo until it hits them. There is value in other people seeing what a thing is labeled as, as opposed to what it really is. Someone who will take away your knife will leave you your flute/thumper/cheaterbar/bo.

Durable flash drive, open source encryption

[Anonymous Coward]

Corsair has a rubberized water resistent shock-resistent flash drive available. I have one and found that it is quite durable: http://www.corsair.com/ [corsair.com]

As for encryption, check-out this open source project which offers an excellent encryption solution for Flash drives:
http://www.truecrypt.org/ [truecrypt.org]

You need more for survival than a USB drive...

[Anonymous Coward]

The information that they recommended you store is important, but not the most important. You also need to:

1) Create an emergency checklist (do it today). A good example of what to include can be found here; http://www.geocities.com/survival_planning/emergen cy_checklist.html [geocities.com]

2) Put together a couple of emergency survival kits. Again, some of the items to include can be found here; http://www.geocities.com/survival_planning/surviva l_kit.html [geocities.com]

3) Read and learn as much as you can about survival. Knowledge is key and you can buy books like the SAS survival guides or one of many Survival CDs like the one found here; http://www.militaryebooks.com/survival.php [militaryebooks.com]

Good luck and Semper Fi!

Re:My objection to the article:

[DangerTenor]

Of course! I know why, it was in one of my favorite poems as a kid:

"I eat my peas with honey,
I've done it all my life.
It makes the peas taste funny,
but it keeps them on the knife."

Re:Cool Desert Island discs for survivalist geeks

[gatzke]

Reminds me of a post nucular survivalist scifi book by Heinlein, I think it was Farnham's Freehold. One idea from that book was that the most valued item after the war was a useful text book.

Re:If there's a (thermo)nuclear attack...

[Jaseoldboss]

It's caused by massive electron migration away from the blast which produces a huge current. The EMP effect is strongest at the edge of the atmosphere where there is space to the upper side of the weapon or at ground level where the earth prevents any movement of electrons. In the middle the movement of electrons is symmetrical and cancels itself out.

It's in the High energy weapons FAQ somewhere (sorry working you'll have to find it :-) http://nuclearweaponarchive.org/ [nuclearweaponarchive.org]

Re:My objection to the article:

[Vitriol+Angst]

For money I'd recommend 1/10th oz gold pieces and silver.

You could skip the size and weight of the wool blanket and use what is called a "space blanket" it is blue or black on one side, and silver on the other. It isn't as comfy as wool, but a thinsulate insulated space blanket can be a lot lighter and provide a lot more insulation than wool--and it still insulates when wet and can reflect heat to help cool you. Also, it can be used in water collection and sterilization techniques like a tarp or polyurethane sheet. Whatever emergency supplies you have should be able to fit in a back-pack and be carried with you -- so think light. Also, it can be used with a piece of rope to make a tent. So for the weight and space -- it does triple duty and is a better insulator.

I'll second the suggestion of a big strong knife and a flint. Add in a few hack-saw blades as well and some strong braided steel wire and 100 ft of fishing line. You can fashion a lot of things with these. With these four things you can catch food, cook, build a saw and 100 other things.

Forget the yards of cotton. There will probably be clothing everywhere and this won't do if you are getting cold. If you are in a flood zone, you might think of putting some spare clothes in a rubber, water-proof rucksack. But other than New Orleans and a few other places in this country -- like most places, you're not going to be without clothes. Warm jackets, yes. So if you are in a flood plain without high land for a mile then store some clothes -- but most of the big disasters I can think of will just leave plenty of this crap everywhere. Food, water and shelter and sanitation are your main concerns -- if you can just concentrate on those you will have time and opportunity to worry about the rest.

Zip-lock bags are great. I suppose in all reality there is going to be a lot of plastic lying around after any disaster in America -- so I guess Leather satchels are out.

Add Lard and Salt. You may need to preserve things. Put them in some sort of air-tight container and separate from your pack because they will attract animals. Also, cook and eat and go to the bathroom in areas away from where you sleep and store food. There are a lot of camping things to learn -- but in reality, you are going to more likely be around houses --wether in one piece or not, without electricity and water. Making water and doing without power are your two main factors -- and finding a good place too poop. Dig a hole and put some blocks and plywood on top to form a privy. Human refuse will be the biggest health risk and a lot of people will be doing the wrong thing and getting sick. I'm thinking of getting rain barrels on the downspouts of my gutters so that I always have a few 100 gallons of water. I'll put minnows in them to keep out mosquitos. Oh, and make sure you have some effective mosquito repellant -- they will become a big issue in a flood.

Did anyone mention good wool socks? You may need to consider light canvas tennis shoes over boots if you are going to be getting over your ankles wet-- foot rot is a real issue. Some of the army boots out there are good because they are designed to dry out quickly. A water proof boot is great for protection but becomes more of a problem if you are constantly going through deep water -- drying quickly becomes more important than water proof over time.

And tea-tree oil. Great for treating almost any infection or skin ulcer. Skin infections and dysentery (and cholera and other stomach ailments) are your major risks. Get Chlorine tablets to kill bad things in water -- if you are stranded without clean water for a while you will have to make your own. Chlorine and filters will get you water faster. You can also stretch out polyurethane over a wet area and get the condensation that is formed from the evaporated water -- that will be clean. But it is a pretty slow way to get water.

I don't recommend heading for the woods. Most of us are not prepared for real survival -- and just think about all the "survivali