4 ms·

I think what is implied is that if an attacker has direct access to your machine and that you continue to use it they'll implant some kind of keylogger and get

I think what is implied is that if an attacker has direct access to your machine and that you continue to use it they'll implant some kind of keylogger and get to your data this way. Now if you don't get the laptop back, your data is as secure as the encryption implementation of your OS. I'd bet it's secure enough against anything that is not the NSA / equivalent foreign agencies. Now would I bet against those big players? Certainly not.

johnchristopher 5y ago
> I'd bet it's secure enough against anything that is not the NSA / equivalent foreign agencies. Now would I bet against those big players? Certainly not. Which is another shortcut that boils down to saying "nothing is secure". I have a beef with broad statements like that :].
- jmnicolas 5y ago
  I'm not saying nothing is secure, I'm saying that there's no way to be sure. Even if the math is bulletproof, are you sure the software implementation is bulletproof too? Even then, maybe there's something in your hardware that defeat the whole thing, who knows? When the stakes are so high that this kind of agencies are trying to get your data, that would be a risky bet to assume they won't be able to crack your encrypted partition. I'm pretty sure if you ask them nicely to give you a few of their old encrypted hard drives they wouldn't comply. Why not?
  - johnchristopher 5y ago
    No, this reasoning doesn't convince me because it's still "but what if". Like when people keep on telling we just have to travel the stars to planet B and it's possible because maybe we'll pretty soon discover FTL. > When the stakes are so high that this kind of agencies are trying to get your data, that would be a risky bet to assume they won't be able to crack your encrypted partition. I do agree. Even if I knew the NSA was after me and I knew how to secure my laptop with custom Libreboot and other things I strongly believe the laptop should not be used to discuss matters or store data related to activities that got the agency on my back. I will do an humane error and compromise myself before they need to use strong tech against my laptop.

johnchristopher 5y ago

> I'd bet it's secure enough against anything that is not the NSA / equivalent foreign agencies. Now would I bet against those big players? Certainly not. Which is another shortcut that boils down to saying "nothing is secure". I have a beef with broad statements like that :].

jmnicolas 5y ago
I'm not saying nothing is secure, I'm saying that there's no way to be sure. Even if the math is bulletproof, are you sure the software implementation is bulletproof too? Even then, maybe there's something in your hardware that defeat the whole thing, who knows? When the stakes are so high that this kind of agencies are trying to get your data, that would be a risky bet to assume they won't be able to crack your encrypted partition. I'm pretty sure if you ask them nicely to give you a few of their old encrypted hard drives they wouldn't comply. Why not?
- johnchristopher 5y ago
  No, this reasoning doesn't convince me because it's still "but what if". Like when people keep on telling we just have to travel the stars to planet B and it's possible because maybe we'll pretty soon discover FTL. > When the stakes are so high that this kind of agencies are trying to get your data, that would be a risky bet to assume they won't be able to crack your encrypted partition. I do agree. Even if I knew the NSA was after me and I knew how to secure my laptop with custom Libreboot and other things I strongly believe the laptop should not be used to discuss matters or store data related to activities that got the agency on my back. I will do an humane error and compromise myself before they need to use strong tech against my laptop.