3 ms·
I'm rather worried that this isn't getting the upvotes it needs.
by eptcyka 10y ago
I'm rather worried that this isn't getting the upvotes it needs.
- theamk 10y agoI have cryptsetup, so I am probably vulnerable, but I do really care -- I do not have BIOS password, nor do I physically disable my USB ports. If I wanted to get a root shell with the disk still encrypted, it would be much more convenient to just boot from the USB stick. And in the case of "libraries, ATMs, airport machines" it is likely there will be no boot-time passwords at all -- regular login process will likely be more convenient for many reasons.
- eptcyka 10y agoWell, if an attacker has the ability to access your computer several times, you only need to screw with your init filesystem once to transfer your password over tcp at boot time, or just safely store it on the disk if you don't get a usable connection at boot time.
- theamk 10y agoyes, but the same could be done by simply booting from USB stick. How does this vulnerability makes it worse? (unless one has BIOS password and strong physical security)