3 ms·
> It’s all encrypted, tied to the hardware. And that's a terrible idea to begin with. Yes, encryption is a good thing. But it's only good as long as it's not t
by grishka 6y ago
> It’s all encrypted, tied to the hardware.
And that's a terrible idea to begin with. Yes, encryption is a good thing. But it's only good as long as it's not tied to a particular piece of hardware against user's will. You should be able to remove an SSD from a dead laptop and plug it into a working one, and, after entering the correct password, be able to access it. Apple seems to view this exact scenario as an attack for some reason.
- fmajid 6y agoAn active component like the T2 can ensure the keys are erased after N failed attempts. A passive encryption key cannot. There are indeed also disadvantages to this.
- grishka 6y agoBut then you are encouraged to circumvent this by making backups.
- fomine3 6y agoSimilarly on PC, TPM lockout for decrypt PIN after some tries, then BitLocker requires user to input very long generated passphrase (virtually unbreakable, same as Apple's internal key). They can also export encryption key. Of course exported key must be stored to secure place.