News for hackers. Stuff that matters.
Re:Authenticated Boot and Disk Encryption on Linux by contingencies on Thursday September 23, 2021 @02:32PM (#28633203)
Set up a new laptop for Ubuntu recently and opted for ZFS encryption, impressed it was now a mainstream install option. Sadly amused after setup that it suspends indefinitely without requiring the passphrase, ie. keeps unlocked volumes in memory. This makes the encryption basically pointless. (NB. This category of issue was highlighted in the recent interview by the resurfaced Alpha Bay operator, specifically after his former associate Cazes was bagged in Bangkok after an international police sting allegedly created a server issue explicitly to require him to log in to the so they could access his credentials unencrypted. The resurfaced operator's reported solution was apparently to always power down, even on a bathroom break.)
Re:Authenticated Boot and Disk Encryption on Linux by privacyxpert on Thursday September 23, 2021 @06:04PM (#28636180)
Just a heads up, you should be aware that ZFS encryption leaks considerably more metadata than full LUKS block encryption.