@Theholypumpkin @toby well, unlike @bunsenlabs and @ubuntu on #amd64, @Raspberry_Pi & #Ubuntu on #RaspberryPi doesn't support #LUKS or setting up #FullDiskEncryption at all.
Which IMHO is not excuseable since even if the #Broadcom-made #SoC didn't have any Cryptograpy-Acceleration integrated whatsoever, the performance of #AES256 is still faster than any microSD or eMMC on the market.
Espechally since that feature predates the Raspberry Pi by over half a decade: even @opensuse 10.2 offered it.

@Theholypumpkin @toby @bunsenlabs

Also one major "can't use" for me - regardless of #ChipShortages and #Scalpers - is the lack of a convenient #LUKS #Encryption setup in both #RaspberryPiOS and @ubuntu / #Ubuntu for @Raspberry_Pi / #RaspberryPi.

Not gonna argue the lack of @tails or official @torproject #TorBrowser but to make #FullDiskEncryption viable and useable, it just can't be restricted to external media or having to manually fiddle around, cuz that's a pain in the rear.

So that's how the #French #Police cracked shit...

Thanks @tails for the info:
https://tails.boum.org/security/argon2id/index.en.html

I guess a lot of people now have their weekends f**ked because they gonna need to re-encrypt shit.

Gladly I'm not affected as I user 128-digit passwords wherever possible...
https://github.com/kkarhan/misc-scripts/blob/260f087c8337417c69f94787358abf4faf5090f9/bash/.bash_aliases#L5

But a lot of you folks may be!

Please check your crypto settings NOW!

#ITsec #OpSec #InfoSec #ComSec #FullDiskEncryption #LUKS #Linux #Encryption #Data

@agatha Depends...

I don't really care but that's because tying in my secure password to unlock #FullDiskEncryption takes by far the longest...

@fuchsiii however has a quite slow bootup on her latest rig due to #AMD & #ASUS fecking up...

WTF?

#France goes full #Cyberfacist:
#DGSI literally classified using #FullDiskEncryption, @torproject #TorBorwser, #Tails, @protonmail and #VPN's as "suspicious activity" in terms of #terrorism...

SERIOUSLY, DID THESE #MILINTEL IDIOTS DRANK SOME WINE WITH ETHYLENE GLYCOL OR WHAT!?

To prevent #DataTheft from somebody selling their #SteamDeck to another person you have to allow encryption, preferably #FullDiskEncryption!

One day you might wanna give your Steam Deck to another person and then what?

You're gonna wipe it? Overwrite the data several times so nobody can recover your data and try to steal it from you? Perhaps that will work.

Perhaps I'm the too sensitive one who thinks that it's easier to get my data than it actually is in reality.

We'll see...

@poxeclipse You need two drives for #QubesOS and #Linux. #Qubes requires #FDE #FullDiskEncryption to install.

If you have two drives you can try if your hardware supports it and would be fine.

That's what i do with one mini PC here that runs it.

@Unperson@ioc.exchange Thank you. Full-disk encryption is mandatory for me.

#fde #fulldiskencryption

Just in case anyone is looking for this info, you *CAN* use #Libreboot and #OpenBSD with #FullDiskEncryption (#FDE).

You just have to flash a libreboot ROM with a #SeaBIOS payload, and both the physical volume and the #encrypted disk (e.g., sd0 and sd2 from install environment, assuming that sd1 is the usb media) must be formatted as #MBR.

#GPT will *not* work.

Ok. For anyone that might help at any point in the future, have fun. ;)

Just in case anyone is looking for this info, you *CAN* use #Libreboot and #OpenBSD with #FullDiskEncryption (#FDE). You just have to flash a libreboot ROM with a #SeaBIOS paylod, and both the physical volume and the #encrypted disk (e.g., sd0 and sd2 from install environment, assuming that sd1 is the usb media) are formatted as #MBR. #GPT will *not* work. Ok. For anyone that might have helped at any point in the future, have fun. ;)

#HomeLab question; after figuring out why I couldn't connect to my server the other day I'm looking for a solution. Like a responsible person I've installed my server with #FullDiskEncryption but that means manual intervention after a reboot (namely entering the decryption password).

Automatic updating also means regular reboots, but I don't want to deal with the password. I've heard a #keyserver might be a solution, but I hope there are other solutions available?

#debian #fulldiskencryption #linux #security

Découverte et succès dans l'installation de la distribution debian sans passer par l'installateur officiel, permettant ainsi de tout protéger, /boot compris.