Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top


I want to encrypt my entire OS according to this tutorial, which involves a decoy OS and a hidden one.

The problem I have with this setup is that the bootloader could be compromised with a password stealing one.


Does anyone of you know;

  • How to remove any bootloader on the disk.

  • How to place the TrueCrypt one on an optical disk, so that it is harder to compromise.

share|improve this question
up vote 1 down vote accepted

I don't put the bootloader on optical media, instead I checksum the bootloader from optical media and chainload it to verify it is not tampered with. Boot loader copy/removal can be done with dd from a linux live distro.

MagicISO is a gui that support copy/backup of boot sectors and burning to optical media, but I haven't tried it with the truecrypt loader

share|improve this answer
Thank you for the reply and the suggestion of MagicISO. But if I were to remove the boot sectors of the disk what should I use? – Duijf Dec 4 '10 at 15:59
Repair to a standard 7 bootsector, install truecrypt bootsector, copy to iso/usb/sdcard, then remove...i think there's a trucrypt bootcd floating around – RobotHumans Dec 4 '10 at 16:13
i couldn't find it atm, but i'm a linux freak so it isn't horribly pertinent to me. I do manual mounting of crypted disks at offsets inside ext2 volumes to bypass the "identifiable header" problem – RobotHumans Dec 4 '10 at 16:19
Well thank you very much for your troubles. I'll look into your suggestions. – Duijf Dec 4 '10 at 18:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.