4 ms·
You don't need "full" disk encryption on Chromebook devices or Android phones. Both ship with file-based disk encryption for all user data, on-by-default for al
by steelframe 7y ago
You don't need "full" disk encryption on Chromebook devices or Android phones. Both ship with file-based disk encryption for all user data, on-by-default for all recent devices.
When I travel out of the country, I reset my phone and Chromebook to their factory defaults and then provision a decoy account. Once I'm across the border, I provision my primary account.
Even if they image my devices, all they'll get is old encrypted garbage for which the key is unavailable because the key was rendered inaccessible when the device was reset to factory defaults.
- snazz 7y agoThey could replace part of the password-checking software with a backdoored version that would send your password off to them. Your data is protected, but the OS can still compromise it and a bad actor can replace parts of the OS (which is open source in both of your cases, making the process even easier).
- saagarjha 7y agoOn Chrome OS, this should cause the “your OS is unverified” warning to show up.
- snazz 7y agoDoes that mean that every OS file is signed and checksummed like on iOS (correct me if I’m wrong)?
- gruez 7y agoyes, something like this: https://source.android.com/security/verifiedboot/dm-verity https://source.android.com/security/verifiedboot/dm-verity
- sowbug 7y agohttps://www.chromium.org/chromium-os/chromiumos-design-docs/verified-boot https://www.chromium.org/chromium-os/chromiumos-design-docs/...
- saagarjha 7y agoYes, except you have the ability to replace it if you'd like.