New Year's Resolution: Full Disk Encryption on Every Computer You Own
1–10 of 187 posts
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#2I got myself an SSD for Christmas and that is why I moved off full disk encryption on home computer and instead encrypt almost everything except the system. However I've turned off the page file and I'm trying to set up pre boot authentication for non system volumes.
On another note, I plan to slowly switch to Ubuntu and I wonder how secure the home folder encryption is?
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#3I got myself an SSD for Christmas and that is why I moved off full disk encryption on home computer and instead encrypt almost everything except the system. However I've turned off the page file and I'm trying to set up pre boot authentication for non system volumes. On another note, I plan to slowly switch to Ubuntu and I wonder how secure the home folder encryption is?
There's nothing stopping you using FDE on an SSD...
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#4I got myself an SSD for Christmas and that is why I moved off full disk encryption on home computer and instead encrypt almost everything except the system. However I've turned off the page file and I'm trying to set up pre boot authentication for non system volumes. On another note, I plan to slowly switch to Ubuntu and I wonder how secure the home folder encryption is?
There's nothing stopping you using FDE on an SSD...
FDE on a SSD negates the gained speed advantage
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#5Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#6Earlier quoted context omitted.
FDE on a SSD negates the gained speed advantage
Does it? Even if you have a CPU with AES-NI instuctions like an Intel Core i5 or i7?
unfortunately yes, see http://blog.siyuz.net/2010/11/17/truecrypt-7-0a-fde-on-ssd/#
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#7[deleted]
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#8On OSX with Lion - there is no excuse
http://osxdaily.com/2011/08/10/filevault-2-benchmarks-disk-e...
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#9[deleted]
I imagine in many cases that's exactly what they do, assuming they even bother to format if they want to get rid quickly.
A more enterprising thief however might wonder if there's something else there, even if he's just after naughty pictures.
Assuming you haven't used encryption it's very easy to get data off a computer if you are even a little bit technical. Simply take the disk out and insert it into another computer or just reboot the same computer using a Linux live CD, all the files and everything from the NTFS partition will just be displayed and available. No need for the administrator password at all, regardless of what file permissions were set.
Re: New Year's Resolution: Full Disk Encryption on Every Computer You Own
#10[deleted]
"I have always thought that the only reason you would need full disk encryption on a computer is if you was doing something illegal."
Did you even read the article? It mentions several legitimate reasons why you would need to use encryption for perfectly legal reasons.
It still surprises me hear people who are intelligent enough to use the Internet come out with the, "if you've nothing to hide" argument.
EDIT: The information I claimed was in the linked article, was actually in the whitepaper, linked to from the article. I will quote the relevant passage below. It amazes me that anyone would not be able to come to this conclusion independently though:
"For doctors, lawyers, and many business professionals, these border searches can compromise the privacy of sensitive professional information, including trade secrets, attorney- client and doctor-patient communications, research and business strategies, some of which a traveler has legal and contractual obligations to protect. For the rest of us, searches that can reach our personal correspondence, health information, and financial records are reasonably viewed as an affront to privacy and dignity and inconsistent with the values of a free society."