logoalt Hacker News

johncolanduonilast Thursday at 5:54 PM1 replyview on HN

A warning doesn’t help at all. The main threat model for FDE is that someone steals your device and dumps the disk. If you don’t protect the boot process somehow, then you’re just storing the encryption key next to the data.

If you don’t care about that (which is not “military level security”, laptop thieves stealing creds is a thing), just don’t use FDE or use it with an on-boot password every time. No point in the theater.


Replies

themafialast Thursday at 9:21 PM

> laptop thieves stealing creds is a thing

Two factor is a thing. FDE is such a 1990s idea.

show 1 reply