30 ms·

I've always been doubtful of OSX's crypto. At least with the past versions I was always worrying about side channel attacks. Merely using encryption on your ho

I've always been doubtful of OSX's crypto. At least with the past versions I was always worrying about side channel attacks. Merely using encryption on your home folder is obviously going to leak information to unencrypted portions of the disk (not to mention spotlight indexing); but more insidious is default safe sleep (which will write out your encryption key to disk) and DMA enabled ports.

jnoller 15y ago
I've never used apple encryption on a disk until Lion - the few times I've tried to use filevault, it has ended in tears, pain and frustration (have you ever run VMware images on filevault? Yeah.) The implementation in Lion is amazingly good; I do hope they close the DMA port issue though.