umami_wasabi @ umami_wasbi @lemmy.ml

pending anonymous user

---

Read more

Posts

41

Comments

748

Joined

2 yr. ago

That "Discord" can be replaced with any IM platforms. Slack, Martix, Gitter, you name it. They are still hard to search. By no means I like the idea of using IM platforms as a support portal/community. I still think forums-like platforms are the best, yet I don't want to create another account to engage with a project that I use.

Github, Lemmy and Stack Exchange enables one account for multiple projects/topics, which I quite like. Or mailing lists. That can do as well.

But I also don't want to make zillions accounts, one for each project, just for a quick question.

Redmine? https://www.redmine.org/

Haven't use it personally tho

Great to know

LTSC is the enterprise/business version that have extended period for patches with less bloat. It's similar to LTS with Ubuntu.

Candy crush is what they put as "recommended software" if I remember correctly.

Maybe also not Ubuntu or RHEL? I heard they also collect telemetries and hard to trun off. Unsure.

So you mean BTRFS over LUKS? I will have a try on a VM later, plus the ZFS too. Thanks for the advice.

The most important is actually the copy protection. I don't want the viewer can download the file easily.

I'm planning FDE on my laptop which have 2 drives. I originally plan to use LUKS on LVM as I can use LVM to join two drives into one. But now I wonders if my choice is right.

Should I worried about it?

Should the LVM partition layout considered as metadata leak in LUKS over LVM?

Hardware token being less secure?

For secure boot bypasses I could only find BlackLotus is the only one capable to do this. I would like to have more details to support the claim "Secure Boot has been hacked in a minute." Also, I would like the explanation on secure boot is a false sense of security and points to suport such claim as BlackLotus is the only publicly known malware to bypass secure boot.

However, I do firmly believe that there ia no reason that servers can't use FDE as they are no differ than other typical computer.

EDIT: forgot the "boot" for secure boot

I though FDE is to thwart physical access to exfiltrate and or recover data. Making the root partition unencrypted surely will boost performance but I feel like this opens up an additional avenue for an attacker to exploit and defeat the purpose of doing FDE? It isn't just making "installed apps private" but literally replace some binaries with a backdoored version of it with then enables access to decrypted data.

That I doesn't know Ubuntu patches it out.

Great to hear. TPM is totally usable if your threat model can tolerate the risk. Sadly Linux is a bit lacking support for TPM in FDE. You can try the Nitrokey with GPG method without pin I wrote in the other thread if you hit the wall. Good luck!

Here's a guide if you want FDE with TPM: https://blastrock.github.io/fde-tpm-sb.html

If he uses TPM. I'm not aginst OP using it but he needs to understand the drawbacks. At least I hope he will.

By intercepting the key on hardware level

No. With FDE, an adversary can't just trun it on and copy data unless there are some 0day on the login that allows exectuing arbitrary codes.