3 ms·
It's missing the basics: encrypt your disks and store the key on the TPM, so that you don't even know it and it can be used to automatically the decrypt the dis
by znpy 1y ago
It's missing the basics: encrypt your disks and store the key on the TPM, so that you don't even know it and it can be used to automatically the decrypt the disk on boot.
- mzhaase 1y agoWhat threat does this protect against?
- zsoltkacsandi 1y agoAccessing all of your data without any authentication by anyone who gets physical access to your machine/server/computer.
- charcircuit 1y agoIt protects against people imagining your disks and reading them / asking you for the encryption key / brute forcing the encryption key.
- ahoka 1y agoStolen or lost disks, obviously. More practically when the disk dies or replaced for other reason, you don't have to worry about the contents, because it's all random.
- CableNinja 1y agoI am against the key in tpm. If they steal the whole box, your data is theirs. Disk encryption with key in tpm is like locking your door but intentionally leaving the keys in the door
- rcxdude 1y agoAnd it increases the risk of losing your data if you have a hardware failure or even some software update wierdness (depending on exactly how you configure the TPM: did you know windows takes the disk encryption key out of the TPM and writes it onto the drive in plaintext during some update processes?)