-------- In message <20151023192353.GA95611_at_cons.org>, Martin Cracauer writes: >If you want a secure filesystem I think that at this particular time >it would be entirely reasonable to use both gbde and geli stacked on >top of each other[...] Nobody is going to break through the GELI or GBDE crypto, they'll find their way to the keys instead, or more likely, jail you until you sing. But neither GELI og GBDE alone or together give you a secure filesystem. The very first requirement for a secure filesystem is that you can trust the computer it is mounted on. No commercially available smartphone, tablet, laptop, server or desktop computer can be trusted by the owner at this point in time. Want a secure filesystem ? First step is to mount it on RaspBerry or Beaglebone without network connectivity... But more importantly: There is no technical fix for lost privacy, that is a political problem, and it must be solved by political means. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk_at_FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence.Received on Fri Oct 23 2015 - 18:20:28 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:00 UTC