22 ms·
This is why your decryption boostrap should never be on the hard drive. It should be on a usb stick along with your encrypted keys. This is elementary "someth
by zargon 17y ago
This is why your decryption boostrap should never be on the hard drive. It should be on a usb stick along with your encrypted keys. This is elementary "something you have + something you know" security. The evil maid can't patch a bootloader that isn't there. And if he installs a keylogger, he's still out of luck because he only has your passphrase, not your decryption keys. He would also have to install a device that copies your key file somehow.
Sure, there are plenty of other attack vectors, but this takes the problem out of the evil maid category.
- decode 17y agoIf you're assuming the attacker has physical access to your laptop, you can also assume they have access your USB stick. Even the article admits this is a problem: "somebody who can get access to my Disk Hasher USB (e.g. when I’m in a swimming pool), can infect it"
- zargon 17y agoAre we talking about maids or spies? Compared to a laptop, USB sticks are easier to keep in your wallet, lock in a safe, hide, swallow, etc. So I disagree with that assumption. A maid would need quite a lot more resources to track down both the laptop and the usb stick than the laptop alone.
- pyre 17y agoI agree. People are still thinking of 'USB Sticks' as the actual pen drives out there. Think of how small microSD cards are. There are USB microSD readers that barely the size of the USB connector itself. That's so small it's scary... and take the actual microSD card out of the reader and it's even smaller. I could probably hold it in the side of my mouth while swimming in the pool if I was really paranoid.