News for hackers. Stuff that matters.

A comment on Windows 7/8, Linux, OS X Full Disk Encryption FireWire Exploit. Parent comment

Re:Windows 7/8, Linux, OS X Full Disk Encryption FireWire Ex... by carmaa on Friday January 04, 2013 @04:07PM (#5009901)
Over time, yes. Your statement about physical access == compromise is missing that crucial detail. There's no reason why someone should be able to access all your data just because they have physical access to your device for a short period.

If you really want to do the analogy thing, the DMA vulnerability would be the equivalent of a safe with a door where no key is needed in the back. It would not be a very good safe.

Just sayin'.

[ Parent | on HN ]
Re:Windows 7/8, Linux, OS X Full Disk Encryption FireWire Ex... by stcredzero on Friday January 04, 2013 @06:03PM (#5010531)
> the DMA vulnerability would be the equivalent of a safe with a door where no key is needed in the back.

More like a safe where the "master key" was leaked and wasn't disabled in the models that were sold.

[ Parent | on HN ]
Re:Windows 7/8, Linux, OS X Full Disk Encryption FireWire Ex... by carmaa on Saturday January 05, 2013 @02:42AM (#5012012)
I don't think the specifics of the analogy is under discussion here, but rather that it's stupid and counter-productive to dismiss an obvious vulnerability because protecting against it is hard.

Welcome to the world of security, I guess.

[ Parent | on HN ]