Disk encryption in AWS is close to useless and potentially harmful

Re:Disk encryption in AWS is close to useless and potentiall... by knorker on Friday December 16, 2022 @12:51PM (#34017705)

As I explained, and elaborated here (https://news.ycombinator.com/item?id=34017654) it's not as simple as that.

But also.

> The author is not talking about getting someone with physical access.

Right. The author missed this as one of the major attack vectors that this aims to protect against. I don't think leaving out a real justification for it when saying it's snake oil speaks in favour of the author's point.

[ Parent | on HN ]

Re:Disk encryption in AWS is close to useless and potentiall... by eloff on Friday December 16, 2022 @06:13PM (#34021920)

> Right. The author missed this as one of the major attack vectors that this aims to protect against.

Did you read the article? He mentioned that right upfront.

[ Parent | on HN ]

Re:Disk encryption in AWS is close to useless and potentiall... by knorker on Saturday December 17, 2022 @04:05AM (#34026140)

First, here's a clip from the HN guidelines:

> Please don't comment on whether someone read an article. "Did you even read the article? It mentions that"

The article mentions it by dismissing it. No, really, this is the major attack vector this aims to protect against.

That and the ability to two-key the system. No encryption, no two-key.

[ Parent | on HN ]