←back to thread

Bypassing disk encryption on systems with automatic TPM2 unlock

(oddlama.org)
189 points arjvik | 1 comments | 17 Jan 25 03:00 UTC | HN request time: 0s | source
Show context
acheong08 ◴[17 Jan 25 04:12 UTC] No.42733994[source]▶
I don't understand why anyone would use passwordless disk encryption. It just seems inherently vulnerable, especially with the threat model of physical compromise.

Entering a password on boot isn't even that much work

replies(19): >>42734012 #>>42734073 #>>42734132 #>>42734171 #>>42734304 #>>42734370 #>>42734375 #>>42734397 #>>42734516 #>>42734734 #>>42734841 #>>42734892 #>>42734925 #>>42735445 #>>42736160 #>>42739068 #>>42740673 #>>42741392 #>>42742256 #
pg5 ◴[17 Jan 25 19:27 UTC] No.42742256[source]▶
Fully agree, especially for a laptop. A password that combines three unrelated words and a few numbers takes about 3 seconds to type in.

I shut it down every day, so type in the password every day too. Short of a concussion, I'm not going to get locked out.

replies(1): >>42742315 #
booi ◴[17 Jan 25 19:32 UTC] No.42742315[source]▶
So.. it is possible…
replies(1): >>42742420 #
1. pg5 ◴[17 Jan 25 19:42 UTC] No.42742420{3}[source]▶
Yes.. it is...

It's a risk I'm fine with. Anything I care about is backed up separately.