2 ms·
> Initial phases aren't distinguishable from things like updates but as it progresses the intent becomes more clear. I'm not convinced it does at all. Encrypti
by duskwuff 5y ago
> Initial phases aren't distinguishable from things like updates but as it progresses the intent becomes more clear.
I'm not convinced it does at all. Encrypting a bunch of files one by one is going to be indistinguishable at the block layer from other common operations like updating software, transcoding media files, or creating a compressed archive.
Besides, I still haven't heard a convincing argument that the SSD controller could detect and respond to this any better than the OS could. At best, it might be able to do a poor job of it.
- jdsully 5y agoThe SSD is not there to do the detection but to allow fast reverts of encrypted files once it is detected. Remapping blocks is a core operation for creating COW snapshots and the SSD already has to do it quickly for wear levelling. Software like LVM can already create snapshots at the block level but being software it has a performance penalty the SSD would not have. Traditional AV software still has to do the detection and its capable of that long before the entire drive is rewritten.