Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I would like to connect to my Macbook through a reverse shell to be able to delete data remotely.

It will have an internet connection through WLAN
The hard drive will not be removed from the computer
It has to be done silently (no Windows, no tray icons), preferably while the lid is closed.
I might encrypt the hard drive. Encrypting the data would be useless since the people I'm trying to hide it from can just ask me to enter the password and I would have to do so.

I know it's not an easy task, but please help me with solutions to different parts of the problem. I can program some parts myself if needed. I just don't know where to start.

share|improve this question
    
If you're contractually obliged to enter the password, I'm surprised you're not contractually obliged to refrain from wiping the hard disk. If you genuinely can be compelled to release the password, consider using deniable encryption, which has a secondary password which will decrypt something other than the files being protected. –  Scott May 12 '11 at 8:38

2 Answers 2

up vote 3 down vote accepted

Check out TrueCrypt, http://www.truecrypt.org/ specifically the section on "plausible deniability" and "Hidden volumes" where a steganographically hidden, encrypted volume is hidden withing another encrypted volume... http://www.truecrypt.org/hiddenvolume sounds similar to the situation you are describing

share|improve this answer
    
Thank you! finally an awesome answer! –  Filip Haglund May 12 '11 at 16:38

If the lid is closed and you didn't configure it otherwise the machine is asleep and can not be remotely connected to. If you configured Wake-on-LAN AND you are on the same network you can wake the machine via a "magic packet" even when the lid is closed.

Remote access also needs to be set up ahead of time, so if they already have the device and you haven't set up Remote Login or something similar you are out of luck.

However, if you have SSH access you can delete the files from the command line and then shred the free space on the drive to prevent recovery. SSH access is (more or less) invisible to the person looking at the machine. Search for "secure delete command line mac" for details on performing the data wipe.

If you only have remote desktop access then you can perform the same operations but they will be visible to anyone looking at the screen.

share|improve this answer
1  
You can also shred the files directly before shredding free space -- it will take a lot less time to securely delete the particular files than it will to wipe the free space on the entire hard drive, which means a much smaller window in which the data can still be recovered. –  Kromey May 11 '11 at 18:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.