[sf-lug] Full Disk Encryption options?

[Erich Newell]

> On a fourth note, I call attention to the notorious tendency of computer
> geeks to suggested overengineered software solutions, that don't
> actually work, to what are fundamentally physical security problems.
>
>
Are you referring to my solution? I should hope not. Its about as simple as
it gets.

1. Encrypt entire drive except boot disk and crypto keys (needed for using
said encrypted device)
2. Keep crypto keys and boot disk on your person at all times.

I'm all in favor of keeping my laptop on my person always...which I nearly
always do. But its somewhat impractical to do all the time. For instance,
when I go running tonight I will have my boot disk and crypto keys with my
in my running shorts...and I do indeed sleep with them also. Thumb drives
and smart cards are good like that. This is somewhat impractical to do with
a laptop...I'm also not keen on taking my laptop along with me on dates.
Women seem to find that just a little bit *too* geeky.

In counter point: what do you do when someone breaks into your house / car /
office / hotel room and steals your HD or PC?

I'm afraid multi-layered does not equal "over engineered". To quote HL
Mencken: "For every complex problem, there is a solution that is simple,
neat and wrong." :)


-- 
"A man is defined by the questions that he asks; and the way he goes about
finding the answers to those questions is the way he goes through life."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/sf-lug/attachments/20080324/ec6cc028/attachment.html>