5 ms·
> how do you make sure the boot has not been compromised and that you are not just sending the password to the bad guys? In my case, I can't. This is a NAS in
by bretthoerner 2y ago
> how do you make sure the boot has not been compromised and that you are not just sending the password to the bad guys?
In my case, I can't. This is a NAS in my house and this is mostly to prevent me from having to go to another room and plug in a monitor and keyboard. (Also, I've done this from across the country after a power outage.)
The threat vectors I'm protecting against are I guess mostly theft of the entire machine, or forgetting to wipe the drives when I eventually toss them out. Mostly, it's just fun practice because I'm a nerd and every drive should be encrypted.
For my use-case, the auto-unlock-by-polling-a-specific-LAN-IP linked in this thread would probably be fine, for example.
- jethro_tell 2y agoThis is mostly me but the case that's the most common is that a disk can't be wiped because its dead. Gotta do that before hand.
- aftbit 2y agoWell you can always drill holes in the platter, or hit them with a strong magnet, or just separate them and toss them in the trash. Unless you're fighting the NSA, you can probably get away with enough physical destruction to make recovery challenging.
- jethro_tell 2y agoThat doesn't work if you need to RMA the disk. So best to encrypt before you put anything on the disk