Justice Department Wants Apple to Unlock Nine More iPhones

Re:Justice Department Wants Apple to Unlock Nine More iPhones by semi-extrinsic on Wednesday February 24, 2016 @10:41AM (#11167512)

Not really. Full disk encryption using Pointsec/other commercial offerings, or as you typically do it on Linux with LUKS+dmcrypt, asks for the passphrase before the OS has loaded any Firewire drivers. In which case a fully shut-down computer is not vulnerable to this attack, ie. you have protection against evil maids, thieves, FBI etc.

But with Bitlocker, it only requires a password at Windows login, and by then all the Firewire etc. drivers are up and running. So you have no protection for computers that are stolen/seized by law enforcement.

[ Parent | on HN ]

Re:Justice Department Wants Apple to Unlock Nine More iPhones by pfg on Wednesday February 24, 2016 @02:04PM (#11169245)

IIRC BitLocker with pre-boot authentication mitigates DMA attacks. Most Windows hardware doesn't come with FireWire or Thunderbolt ports nowadays. Microsoft recommends pre-boot auth for devices with DMA ports.

[ Parent | on HN ]

Re:Justice Department Wants Apple to Unlock Nine More iPhones by semi-extrinsic on Wednesday February 24, 2016 @04:16PM (#11170287)

These are fair points. But for businesses in particular, it's a problem since many skip on (or are unaware of the need for) pre-boot auth, and business laptops still pack FW ports, if not on the laptop itself, then surely on the docking station.

[ Parent | on HN ]