3 ms·
A warning doesn’t help at all. The main threat model for FDE is that someone steals your device and dumps the disk. If you don’t protect the boot process someho
by johncolanduoni 9mo ago
A warning doesn’t help at all. The main threat model for FDE is that someone steals your device and dumps the disk. If you don’t protect the boot process somehow, then you’re just storing the encryption key next to the data.
If you don’t care about that (which is not “military level security”, laptop thieves stealing creds is a thing), just don’t use FDE or use it with an on-boot password every time. No point in the theater.
- themafia 9mo ago> laptop thieves stealing creds is a thing Two factor is a thing. FDE is such a 1990s idea.
- johncolanduoni 9mo agoWow. That’s a new one. Where exactly do you think the authentication tokens you obtain using 2FA are stored?