Collaborate Disseminate
I am stuck with an issue of needing a break glass account on remote laptops.
It’s a bit a strange situation. The laptops are built and rebuilt remotely using a small PXE setup that goes with the equipment.
The PXE server has a default pass… Continue reading Remote Laptop disk encryption, break glass
The recent faulTPM paper (https://arxiv.org/pdf/2304.14717v1.pdf) deals mostly with Bitlocker and only mentions LUKS to note the differences.
The authors state:
With a passphrase, however, the same level of security that the passphrase-on… Continue reading Does faulTPM defeat the LUKS-based FDE with a passphrase?
I encrypted my Ubuntu Desktop 20.04.3 with LVM/LUKS during the installation process. If I turn off the computer, is the brute force the only attack available for getting the password and accessing the files? I think it doesn’t encrypt the … Continue reading Full disk encryption with LUKS?
3 people need to share some data through cloud. The total amount of data is small (<5gb in total). The update rate is very low, 1 per month. The cloud has very limited security measures so we consider all the files stored in it are publ… Continue reading Which one is safer for persistent online data? Gpg per file encryption vs gpg encrypted image vs LUKS2 image
I want to mount a LUKS partition and decided to do it with a separate script which will contain the password to the LUKS partition, it will also decrypt the header file and mount the partition.
What vulnerabilities does this approach add c… Continue reading Is it safe to store the header and password from LUKS in an encrypted GPG script (symmetrically)?
I’ve been looking around, but I can’t seem to find an unified answer for my question.
eg.
Some say it’s safe: What’s the security risk when setting the Gnome keyring password to blank on an FED system with autologin?
Some say it’s unsafe: … Continue reading Passwordless gnome-keyring – Does it present a security issue?
How much worse is encrypting a LibreOffice document with the built-in mechanism than using a cryptocontainer (LUKS, VeraCrypt, etc.) and storing the document in it?
I am more comfortable using the built-in password mechanism that LibreOffi… Continue reading LibreOffice password vs cryptocontainer (LUKS, VeraCrypt etc.)
I use LUKS encryption on my entire drive. Do SSD drives ship with any storage areas which store unencrypted data, even though the data is saved encrypted on user-available SSD storage?
Maybe inside the over-provisioning area, the DCO (Devi… Continue reading Does an SSD store software-encrypted data in unencrypted form somewhere?
I use LUKS to encrypt all sensitive data on my computer. If I switch to using a filesystem with on-the-fly data compression such as ZFS, should I use its compression feature together with LUKS? Does compression here help the attacker as in… Continue reading Does filesystem compression aid cryptanalysis?
When i use only a passphrase in luks for my whole system partition encryption,
so i need to insert a password to decrypt my system partition to boot up my os,
is this unsecure and can it be cracked with bruteforce if someone stole the lapt… Continue reading Is it unsecure to use only a passphrase in luks for whole system partition encryption?