3 ms·
> In my experience, it is in fact pretty trivial. If you are talking about scenarios where full disk encryption is not enabled, then that is irrelevant. You ma
by shawnz 5y ago
> In my experience, it is in fact pretty trivial.
If you are talking about scenarios where full disk encryption is not enabled, then that is irrelevant. You may as well say that privilege escalation is trivial because some users don't put passwords on their account. The user obviously needs to take care of the basic expectancies first before worrying about vulnerabilities.
- AnIdiotOnTheNet 5y ago> If you are talking about scenarios where full disk encryption is not enabled, then that is irrelevant. That's fair, I was making that assumption because it is true in literally every case I've come across. But consider that if you have local access to a logged in account you've already got access to unencrypted files for that user anyway. You don't even need admin.
- shawnz 5y agoSure, but consider how this will impact corporate or educational environments (which in my experience DO usually use full disk encryption). I believe full disk encryption is also on by default for most new OEM machines.