Re:Potential impact of the Intel ME vulnerability
by tinus_hn on Tuesday November 28, 2017 @05:17AM
(#15795912)
It doesn’t decrypt the whole disk every time because that takes forever. It releases the key so you can use the disk while it’s encrypted.
It is kind of useless as it’s practically impossible to keep secrets from a local attacker on the Intel platform, but against an attacker that’s not very determined it helps. At least you can’t just boot a Linux cd or put the disk in another machine to get the data.
It is kind of useless as it’s practically impossible to keep secrets from a local attacker on the Intel platform, but against an attacker that’s not very determined it helps. At least you can’t just boot a Linux cd or put the disk in another machine to get the data.