4 ms·
It's still a little bit like putting your jewelry in a safe, and leaving the key on top of the safe.
by anyfoo 1y ago
It's still a little bit like putting your jewelry in a safe, and leaving the key on top of the safe.
- derefr 1y agoI mean, I assume you'd set the unlock-on-reboot flag, and then immediately reboot — at which point the unlock-on-reboot flag gets automatically unset. So, sure, it's a bit like leaving the key on top of the safe... while you have the safe open. Which isn't all that odd.
- anyfoo 1y agoNo, the scenario was power outage at an unknown time in the future, not immediate reboot.
- BHSPitMonkey 1y agoWhen it comes to disk encryption, at least in the home, the threat model isn't somebody sitting around in your home finding a way to exfiltrate the currently-unlocked filesystem; It's someone taking the computer or the drive with them and leaving. In your analogy, the key atop the vault vanishes as soon as the vault is moved from its location (loses power).
- anyfoo 1y agoIf that was the case (maybe it is, I don’t know), then how does the proposed solution help against power outages, which was asked for?
- avianlyric 1y agoThat wasn’t what was asked for. The original reason given was to require a password on cold boot, but not require a password when rebooting e.g. for an OS update
- anyfoo 1y agoWell, you've asked me to quote in another subthread, I did. Since I don't fully get what you're referring to now, can you please quote?
- patrakov 1y agoIt makes sense temporarily. You can always move the key to your pocket later if nobody steals it.
- anyfoo 1y agoOh yeah, I get it. Just pointing out what this is doing, and why you should probably not always do this, for example.