Automated encrypted swapfiles

Re:Automated encrypted swapfiles by Adaptive on Sunday November 01, 2015 @10:01PM (#10489725)

Another alternative: Self Encrypting Drives (which can be managed on Linux with hdparm).

I'm using this currently on my XPS 13 (2015). Works great. However given the architecture of SED and its implementation in this case, it's not as trustworthy as LUKS, for example.

For general laptop security not involving government intervention, I consider it good enough.

[ Parent | on HN ]

Re:Automated encrypted swapfiles by snaky on Monday November 02, 2015 @04:10AM (#10490802)

You can't believe how much insecure they are. https://twitter.com/matthew_d_green/status/65642245191255244...

[ Parent | on HN ]

Re:Automated encrypted swapfiles by Adaptive on Monday November 02, 2015 @11:24AM (#10492758)

I can believe it. On the XPS 13, even when modifying or NULLing the master password on the internal sata drive, the unit's BIOS will reassign the BIOS (UEFI) admin password as a valid SED drive password, with no user intervention.

It's really just an 'in case of (casual) theft' level of encryption as far as I'm concerned. Good enough on the systems I'm using it on. For everything else, there's LUKS.

[ Parent | on HN ]