3 ms·
My Linux laptop is fully encrypted and I’ve signed and enrolled my own secure boot keys. Just following best practices and now wondering where this leaves me vu
by discordianfish 8y ago
My Linux laptop is fully encrypted and I’ve signed and enrolled my own secure boot keys. Just following best practices and now wondering where this leaves me vulnerable. I think it should prevent tampering with the bootloader but not sure about hdd/net Firmware etc.
- GyYZTfWBfQw 8y agoNice, you just lost plausible deniability. The Government can come and take your shit, and if you don't decrypt it for them, you will be thrown to prison for obstruction of justice. Following the best practices also include not disclosing the very fact your hard drive is fully encrypted. Obligatory xkcd: https://imgs.xkcd.com/comics/security.png https://imgs.xkcd.com/comics/security.png
- rocqua 8y agoGet some physical tamper detection on opening the case. Something like the old spy trick of 'leaving a hear on the door-handle'. There are some nice tips here on spray glitter on a seal and nail-polishing it, then taking a photo. That way, anyone that breaks the seal has to reproduce the same glitter pattern.