4 ms·

> Unlike in Windows and Mac OS X, you can only encrypt your disk when you first install Linux. That is obviously simply not true. There is no user friendly GUI

by lawl 12y ago

> Unlike in Windows and Mac OS X, you can only encrypt your disk when you first install Linux. That is obviously simply not true. There is no user friendly GUI way to do it, but it is definitly doable, and that's what they should have written. Also, recommending BitLocker, and not having the main guide for something more user friendly and open source?

raesene9 12y ago
out of curiousity, what would you recommend as a user friendly open source disk encryption product in place of Bitlocker?
- lawl 12y ago
  Well, back when I used windows TrueCrypt was still a thing. Depending on your threat model, probably still TC though. If your threat model is the NSA, I'd advise you to not use windows anyways. Plus, if it does turn out TC has a major flaw, someone abusing it might make a noise. And as far as I'm aware the TC audit also hasn't found anything serious so far. If you aren't betting your life on it, I think you're still fine with TrueCrypt, Plus, encrypting your full drive with it is something my mother could do. Next, next, next done, at least that's how I remember it. Edit: Thinking about it, this is firstlook.org, maybe they know something we don't, but recommending BitLocker over TC sill seems like a stretch.
  - nhayden 12y ago
    TrueCrypt doesn't support EUFI which pretty much all laptops use these days.
  - dheera 12y ago
    Thing about TrueCrypt is that it was built for a specific purpose. Just having the app installed is like walking around wearing lockpicks and saying that you don't pick locks, you're just wearing them for decoration. If it was called 'ext4' (yes, deliberately pick a conflicting name with something that already exists in widespread use, and provide a drop-in replacement) it might be better. This would be the equivalent of walking around with paper clips instead, which has much better plausible deniability. Bonus points if it could be engineered to actually mount as an ext4 volume if someone actually tried.
- hackuser 12y ago
  The FirstLook article and the EFF suggest DiskCryptor https://ssd.eff.org/en/module/how-encrypt-your-windows-device https://ssd.eff.org/en/module/how-encrypt-your-windows-devic...

by lawl 12y ago

raesene9 12y ago

out of curiousity, what would you recommend as a user friendly open source disk encryption product in place of Bitlocker?

lawl 12y ago
Well, back when I used windows TrueCrypt was still a thing. Depending on your threat model, probably still TC though. If your threat model is the NSA, I'd advise you to not use windows anyways. Plus, if it does turn out TC has a major flaw, someone abusing it might make a noise. And as far as I'm aware the TC audit also hasn't found anything serious so far. If you aren't betting your life on it, I think you're still fine with TrueCrypt, Plus, encrypting your full drive with it is something my mother could do. Next, next, next done, at least that's how I remember it. Edit: Thinking about it, this is firstlook.org, maybe they know something we don't, but recommending BitLocker over TC sill seems like a stretch.
- nhayden 12y ago
  TrueCrypt doesn't support EUFI which pretty much all laptops use these days.
- dheera 12y ago
  Thing about TrueCrypt is that it was built for a specific purpose. Just having the app installed is like walking around wearing lockpicks and saying that you don't pick locks, you're just wearing them for decoration. If it was called 'ext4' (yes, deliberately pick a conflicting name with something that already exists in widespread use, and provide a drop-in replacement) it might be better. This would be the equivalent of walking around with paper clips instead, which has much better plausible deniability. Bonus points if it could be engineered to actually mount as an ext4 volume if someone actually tried.
hackuser 12y ago
The FirstLook article and the EFF suggest DiskCryptor https://ssd.eff.org/en/module/how-encrypt-your-windows-device https://ssd.eff.org/en/module/how-encrypt-your-windows-devic...