3 ms·
Obviously it might seem silly to make this comment here, but would this really protect in many cases besides this one? It seems like almost every time the intru
by drivebyacct2 15y ago
Obviously it might seem silly to make this comment here, but would this really protect in many cases besides this one? It seems like almost every time the intrusion would occur somewhere where the intruder will have access to the mounted encrypted disk, no?
- tptacek 15y agoFull disk encryption is unlikely to protect you from anything other than custody issues at your hosting provider.
- lunixbochs 15y agoThe idea behind this exploit: The area on the SAN occupied by your disk contained a simple disk image. When your image is deleted and another is created overlapping the same spot on the host storage, they can look at their free space to see the contents of your disk. If your disk happened to be encrypted, their free space would appear to contain garbage data. Encrypting your disk would do you little good versus your provider if your VM can boot without your intervention... someone could just boot your VM to look inside.
- tptacek 15y agoNothing you can reasonably do protects against a malicious (or compromised) provider; these are all controls that protect against provider mistakes.