News for hackers. Stuff that matters.

A comment on Authenticated Boot and Disk Encryption on Linux. Parent comment

Re:Authenticated Boot and Disk Encryption on Linux by GekkePrutser on Thursday September 23, 2021 @11:37AM (#28630736)
Just wanted to add that this is generally referred to as the "Evil Maid" scenario in case someone wants to Google it.

It can be mitigated somewhat with secure boot, tpm technologies etc but due to the breadth of possible attacks it's really hard to do against a serious attacker.

Even the sound of the keyboard is often enough to give your password away.

[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by jkepler on Thursday September 23, 2021 @12:02PM (#28631065)
Or encrypt the boot partition. Libreboot supports this.

(Though to be fair, Libreboot only runs on a very limited number of old devices).

[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by mikepurvis on Thursday September 23, 2021 @12:34PM (#28631506)
No amount of software complexity defeats a hardware keylogger, though... or like, a no-touch version of that, such as a spycam in the room that records the sight and sound of you typing your password.
[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by vbezhenar on Thursday September 23, 2021 @02:01PM (#28632746)
Security token defeats all that.
[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by markenqualitaet on Thursday September 23, 2021 @12:26PM (#28631391)
And glitter nail polish :)
[ Parent | on HN ]