Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Police show up and arrest you. Could be with reason, could be by accident. Maybe you did something wrong, maybe you didn’t. They also physically size your servers, and in doing so they unplug the system.

If you have disk encryption, your data now requires the police to force you to produce a password, which may or may not be within their powers, depending on the jurisdiction.

It’s strictly better to have full disk encryption and remote unlocking than no disk encryption at all, because it prevents such „system was switched off by accident“ attacks.

 help



>and in doing so they unplug the system.

They have kits that allow them to unplug the server from the wall without interrupting power supply, specifically so they don't lose the decryption keys.


Sure, but in reality I'm more interested in not letting any low paid tech dude in the DC access to my data just because it can pull a drive. Or someone who buys the server from the provider.

More reason to use encrypted memory like with AMD TSME and a deadman switch.

Except they are more sophisticated than this in the real world. They have kits to clone drives and keep power running without interrupting it



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: