Vdedicated physical hardware keys that can be written to and reset but not extracted from
KI've set GNOME disks to auto unlock my other 2 drives on login...
so if someone decrypts my boot drive, the other 2 are also open
so if someone decrypts my boot drive, the other 2 are also open
- gnome disks stores them in plain text lmao
Aif you use secure boot, just turn on bitlocker
KI will!
But I'd prefer to type a passphrase
But I'd prefer to type a passphrase
Pjust remember this is all to stop one crackhead
Abitlocker supports passphrases
Pit doesn't make it safe to take your data through an airport
Kgr8 thx.
Aunsure if windows gated that feature
JI tried the TPM just thing and it got my configuration from having to enter my password once to twice so success ig
Ait also does pin + tpm
K...
Kperfect
Amaybe its pro only tho check it out
Abut bitlocker is not easy to bypass
JFor me the only reason I really care about encryption is if I have to RMA a drive my data isn't on it in plain form
Pdomestic travel is probably ok in most places
JIf someone cares enough to physically steal my entire hardware I got other problems
Ka 16 character password with upper, lower, numbers and special characters takes a lifetime to bruteforce
Plike they need to do that
Pthey have problem solving money
Huse it on a cryptobro with all of their life savings in coins, call that high ROI
Pyou have problem solving free operating system anyone can download online
Kmaby there is a backdoor for bitlocker 
Kthey will call bill
JPlenty
P^
Ponly.. heaps
JI mean the backup key automatically syncs to OneDrive
JIt doesn't take much effort
JIts not really an anti NSA measure or anything
Kand luks is opensource, so no known backdoor
but the feds might studied decryption :P
but the feds might studied decryption :P
Kfor luks
JIt just means theft is slightly less worrisome
Pno known backdoor doesn't mean they don't have resources to find and not disclose flaws
Pwhich has been shown to be the case time and time again
Kokay.... I guess nothing is 100% secure
but still... I'll encrypt
but still... I'll encrypt
Kso the fcker that steals my sht has to wipe at least
Knormal human being
Pyou might as well just travel with an iphone if that's all you care about
Kwith graphene OS
Pdo not use that
JDifferent threat models and all that but with even a simple passphrase chances are the data just gets wiped if stolen
Hthey'd wipe anyway, nobody's going to look at your vacation photos
Hor whatever you keep on your computer
Kgood!
but the feds ...
but the feds ...
JLol
Pif you're worried about the feds you are asking way below their paygrade chief
Kis it a crime, to not give encryption keys to feds, if they have a search warrant?
