3 ms·

it does? the entire premise is that this leaks encrypted data

• gant 8y ago
  Yes, from encrypted non-system partitions or encrypted external drives to an unencrypted system partition.
• evgen 8y ago
  Where exactly is this feature leaking the data to if FDE is turned on? To the encrypted /var directory? It could potentially leak from an encrypted external storage device to a non-encrypted /var on the boot drive, but if you use FileVault to encrypt the boot drive the “leak” would be from one encrypted drive to another. An issue to fix, but not a major story.
• anderiv 8y ago
  Yes, it does. If you read through the researcher's post, they have an encrypted volume (VeraCrypt-style) which they mount on an otherwise unencrypted filesystem. Data can leak from inside the encrypted volume, to the cache location outside the encrypted volume. If you're using Filevault2, the entire hard disk is encrypted, including the cache location.
  • deleted 8y ago
    [deleted]