4 ms·
Sure, but it's overkill. You'll have to turn it on anyway if you're selected.
by Zetice 3y ago
Sure, but it's overkill. You'll have to turn it on anyway if you're selected.
- dylan604 3y agoTurning it on without logging in does not decrypt the FDE volume though. I'm only turning it off to ensure the decryption keys are not in memory. There's nothing on my laptop that would land me in trouble, but they're going to need a $5 wrench to get access. The day that happens, we'll know if it will need to be used, or if the mere presence of the wrench is enough
- PrimeMcFly 3y agoMy approach is to replace the SecureBoot keys with one of my own signing, and sign my own bootloader. Have it boot into Windows unless a specific key combo is pressed, otherwise have it boot into Linux and require a password to decrypt the drive. Plausible deniability and FDE (for the partition you care about at least).