2 ms·
It depends entirely on the threat model. If three-letter agencies are the adversary, moving logging to RAM is unlikely to be a meaningful deterrent - they proba
by 0daystock 4y ago
It depends entirely on the threat model. If three-letter agencies are the adversary, moving logging to RAM is unlikely to be a meaningful deterrent - they probably already have a root shell or direct access to the VM hypervisor. So if it doesn't protect against nation states, whom are we defending against? Another law enforcement agency raiding the server room and taking hard drives? But I thought ExpressVPN doesn't log anything, so why would that matter? Let's just be real and practical about what problem this is actually purported to solve, else we should call it theater because it's what it is.
- ImPostingOnHN 4y agothe question was, is it better (than running off-disk), rather than "is it good enough for X" the answer is, yes. even an infintesimally smaller attack surface is better than an infinitesimally larger one, all other things being equal
- 0daystock 4y agoIt's not at all better - it's worse, exactly because it gives a false sense of security.
- ImPostingOnHN 4y agoyou claim to know it gives you a false sense of security -- this knowledge itself of the possibility allays the concern