News for hackers. Stuff that matters.

A comment on MacOS FileVault2 Password Retrieval. Parent comment

Re:MacOS FileVault2 Password Retrieval by DINKDINK on Friday December 16, 2016 @12:37PM (#13195037)
>the attacker will simply wait until the laptop is unlocked.

A potential counter measure is for the machine to periodically encrypt itself again and prevent use until a password/key is supplied ("clamming up"). This would prevent an attacker who snatched a logged-into computer from having unbounded carte blanche access to the machine. I'm envisioning something that every 10 minutes locks itself.

Does anyone know of such a solution?

[ Parent | on HN ]
Re:MacOS FileVault2 Password Retrieval by dogma1138 on Friday December 16, 2016 @12:53PM (#13195185)
A screen saver (w/ require password & possible full hibernation with memory flush)?
[ Parent | on HN ]
Re:MacOS FileVault2 Password Retrieval by genesee on Friday December 16, 2016 @04:42PM (#13197133)
That's defeated by a USB mouse jiggler [1], which is apparently commonly used by the type of people who seize computers in the wild.

[1] https://www.amazon.com/CRU-Inc-30200-0100-0011-WiebeTech-Jig...

[ Parent | on HN ]
Re:MacOS FileVault2 Password Retrieval by DINKDINK on Tuesday December 20, 2016 @08:43PM (#13226146)
Yes, my idea was a intension counter measure to 'mouse' jigglers.
[ Parent | on HN ]
Re:MacOS FileVault2 Password Retrieval by rcthompson on Friday December 16, 2016 @05:35PM (#13197520)
I think they are talking about a system that unconditionally asks for the password every 10 minutes even while the computer is in active use.
[ Parent | on HN ]