2 ms·
If someone gets their hands on it, they can install a keylogger, and then they know the password for the encrypted part...
by hibbelig 6y ago
If someone gets their hands on it, they can install a keylogger, and then they know the password for the encrypted part...
- Legogris 6y agoTBF, this is still possible if the boot partition is unencrypted (which is the only way I've ever seen FDE done on Linux in practice).
- fastball 6y agoI don’t actually think that’s true for my MacBook.
- pizza234 6y agoI think this is not the scenario the parent poster refers to (that is, "three letters agency attack"). The typical scenario is: dev brings the laptop out of home -> laptop is stolen. In this case, encryption at rest spares the owner's sensitive information. Actually, I personally consider any machine at risk even if at home, as burglary is not to so far fetched to be considered unlikely.