3 ms·
In general, lack of encryption enables passive surveillance. I think a better solution than opt-in encryption could be on-by-default, with a multi-party recover
by chejazi 8y ago
In general, lack of encryption enables passive surveillance. I think a better solution than opt-in encryption could be on-by-default, with a multi-party recovery scheme.
- eli 8y agoDoesn't Windows have an option to have Microsoft keep a key in escrow? Seems like a reasonable compromise for most people.
- eat_veggies 8y agoYes, you can attach your Bitlocker recovery keys to your Microsoft account. I trust them well enough, since my threat model doesn't include state actors or MS themselves--if they really wanted my data, they could just ship an update to my machine while everything's decrypted anyway.
- fowl2 8y agoFileVault has this option too, at least on the Mac Mini I have.
- cbhl 8y agoI can't imagine Apple offering this option -- it doesn't really align with their strengths (privacy first) and weaknesses (data centers). They'd need to fix so much of iCloud first.
- kalleboo 8y agohttps://support.apple.com/en-us/HT204837 https://support.apple.com/en-us/HT204837 > If you're using OS X Yosemite or later, you can choose to use your iCloud account to unlock your disk and reset your password > If you're using OS X Mavericks, you can choose to store a FileVault recovery key with Apple by providing the questions and answers to three security questions. Choose answers that you're sure to remember > If you don't want to use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe—other than on your encrypted startup disk
- locked0ut 8y agoIf you've ever messed up with an encrypted disk, you know it feels just like an unrecoverable hard drive crash. Which is exactly what it's supposed to feel like, and that's fine if you were aiming for it, but when that isn't what you signed up for, it's pretty much the worst thing ever. It can also feel like a truly nefarious form of vendor lock-in, if you ever try to migrate to another system, and just happen to notice that now, your disk is totally unmountable for some unexplainable reason. This kind of thing can happen when crossing over to an older version of an alternative OS that doesn't know how to negotiate authentication for proprietary encryption formats, or newer formats that weren't supported at the time of the older OS's install. So, for consumer hardware that might be received as a birthday gift, I'd say encrypted by default is a terrible idea. For those not carefully and explicitly warned, storing their stuff on an encrypted disk gone wrong, can be like unintentionally throwing it in the trash, setting it on fire and then flushing it down the toilet, except the toilet is a black hole of no return.
- mbreese 8y agoif you ever try to migrate to another system We're talking about an Apple iMac Pro here... this isn't a computer that is designed to allow you to move components to a different system. Yes, it is a fully locked-in system, purposefully designed to be as secure as possible. I'm not going to give Apple much grief about that, because it's not like they say you can migrate hardware from one system to the next. It would be more interesting to know how the T2 chip interacts with external storage and/or alternative (Windows/Bootcamp) operating systems. In both of these cases, one would expect more low-level data portability, which is a more interesting use-case than trying to pull out the NVMe SSDs from a glued together iMac.
- scarface74 8y agohttps://support.apple.com/en-us/HT208330 https://support.apple.com/en-us/HT208330