News for hackers. Stuff that matters.

A comment on Protecting Your Anonymity: A How-to for Sex Workers. Parent comment

Re:Protecting Your Anonymity: A How-to for Sex Workers by dijit on Wednesday July 02, 2014 @04:58AM (#7975870)
But you have to run Windows on bitlocker.

so you've already handed over your machine no matter what FDE you use.

certainly trusting less people is better than trusting more, since _any_ nefarious third party in this scenario already has the keys to the kingdom.

[ Parent | on HN ]
Re:Protecting Your Anonymity: A How-to for Sex Workers by cookiecaper on Wednesday July 02, 2014 @10:27AM (#7977147)
Full-disk encryption is primarily used to protect offline volumes. If no one can boot your disk, it doesn't matter if Microsoft can upload its entire contents to the NSA once Windows is started. The concern is that a flaw in BitLocker's FDE would make it vulnerable to attacks while the volume is offline.

FDE doesn't really protect online volumes. Yes, the disk is still encrypted, but the OS transparently decrypts any requested sector, so other security measures are necessary to protect mounted volumes.

[ Parent | on HN ]