• 5 Posts
  • 88 Comments
Joined 2 years ago
cake
Cake day: April 14th, 2024

help-circle













  • shadowtofutolinuxmemes@lemmy.worldSekyuritee
    link
    fedilink
    arrow-up
    32
    ·
    2 months ago

    One has to find the right balance between security and comfort, and this entirely depends on the threat model one has. Nowadays, I will always enable full-disk encryption on all of my devices, even if I then decide to store the keys in TPM and unlock the disk at boot.

    I have at least 5 half-broken HDDs sitting around, completely unencrypted, I have no idea if they still work, but they are surely full of private data that I would like to have purged. I fear mechanical destruction might be the only solution for some of them, but just wiping them manually is more effort than doing nothing, so I guess they will still be around for some time. And with SSDs, there is no reliableway delete all data.

    With encryption? Just delete the key and you are done.

    The threat model changes in the future? Easy, the data is already encrypted.









  • But Google also stopped publishing device trees for their devices. And they are withholding the Android source code until release. Android is being developed in secrecy behind closed doors now. Public access to security patches is delayed by four months.

    Google is increasing their chokehold on the platform. Development and maintenance of custom ROMs is getting more and more difficult. More and more vendors such as Samsung and Xiaomi are removing the possibility to unlock the bootloader. Installing a custom ROM was never a mainstream thing, and it is increasingly becoming impossible for most people.