31–40 of 155 posts
- Bitlocker on my Windows 10 Pro laptop (because I'm more concerned about an everyday thief prying open my laptop than a government agent) - ChromeOS built-in encryption/LUKS FDE on the Fedora partition on my Chromebook I should probably encrypt my Android phone and tablet, but I had a bad experience with performance overhead when I encrypted my last phone.
I have a USB key or two on my key-ring, and in theory I have an external hard-drive although currently I don't use it.
I keep code on a VM and GitHub.
In general I don't really have anything I can't lose or have made public. Instead of looking at my laptop as a thing I have to protect I look at it as a thing that will inevitably be lost, damaged or replaced.
I just use Truecrypt 7.1a, and encrypt the entire drive, so it requires a password before booting.
Does this affect performance? Esp for things like photoshop?
I use Mac OS X FileVault2, with a firmware password. It's incredibly easy to set up and should be good enough to protect my data from the majority of thieves. Coupled with encrypted Time Machine backups and Arq[0] I feel relatively ok about losing my machine. [0] https://www.arqbackup.com
So, it will keep the honest out, but for someone who knows what they're doing, it will only prove a mild inconvenience.
This obviously doesn't help them bypass FDE, but in case they want to steal the laptop and not have a brick, the SPI writer works a treat.
- Bitlocker on my Windows 10 Pro laptop (because I'm more concerned about an everyday thief prying open my laptop than a government agent) - ChromeOS built-in encryption/LUKS FDE on the Fedora partition on my Chromebook I should probably encrypt my Android phone and tablet, but I had a bad experience with performance overhead when I encrypted my last phone.
So, the dawn of SSDs has made hibernation and sleep redundant. I use FDE for my SSD (luks, and whatever good defaults ubuntu gives me). As for the cloud, I store nothing sensitive on there. I used truecrypt, but now I find VeraCrypt easier to use and install. I lost my last installer of truecrypt, and I don't trust the ones floating around. VeraCrypt hasn't been audited yet. This is a bad thing :)
Does anyone have a good multiboot disk encryption setup?
On Linux I sometime use LUKS disk encryption. For adhoc disk container file disk encryption I use Veracrypt which is the successor of Truecrypt.
I use the standard hardware encryption of my SSD (a Samsung 830 in my 2012-era Dell XPS 13), which requires I enter the passphrase when I turn my machine on. Advantages: - OS neutral - Seemingly as fast as running 'unencrypted' (I assume performance is identical, the only difference being the passphrase is stored in my head rather than the BIOS) Disadvantages: - Limited to an 8-char (!) ASCII passphrase - I've no ide…
That sounds like an annoyance, not encryption to me.
I'm running Debian, so I have LUKS full-disk encryption running; I consider it a sine qua non of running a personal computer. I wish it were a bit easier to enable per-user encrypted home directories as well (yes, layered: CPUs are fast, and security is worth the cost), but … I'm lazy.
Sine qua non is an indispensable and essential action, condition, or ingredient. It was originally a Latin legal term for "[a condition] without which it could not be", or "but for..." or "without which [there is] nothing".Earlier quoted context omitted.
They can still bruteforce your disk.
They can still bruteforce you.