Re:Quick Python/Developer tips for OSX Lion
by jnoller on Saturday July 30, 2011 @06:13PM
(#2826945)
I've never used apple encryption on a disk until Lion - the few times I've tried to use filevault, it has ended in tears, pain and frustration (have you ever run VMware images on filevault? Yeah.)
The implementation in Lion is amazingly good; I do hope they close the DMA port issue though.
Merely using encryption on your home folder is obviously going to leak information to unencrypted portions of the disk (not to mention spotlight indexing); but more insidious is default safe sleep (which will write out your encryption key to disk) and DMA enabled ports.