• 0 Posts
  • 21 Comments
Joined 1 year ago
cake
Cake day: August 13th, 2023

help-circle

  • I want to have data-at-rest encryption, so that the only password i need to insert is my user one, this allows me to not have to type passwords multiple times. If i had the regular encryption password i would have to enable autologin in SDDM, which would do away with the encryption on kdewallet and all my credentials.

    Plus i also enable secureboot, and use fedora kinoite, so that i is hard to tamper with my boot stuff without my TPM wiping itself off my encryption password, this gives me a very Bitlocker-like setup, but without the shittiness of having my encryption keys linked to microsoft’s terrible encryption system and user accounts, i can actually control my stuff like this. For a laptop, i must say data-at-rest encryption is a must!

    This setup gives me multiple security layers; took my laptop off me -> booted my laptop, faced with user password -> tried to boot another OS, TPM wiped itself, no more encryption key -> computer now asks for encryption password, has to find a way around LVM2 encryption -> LVM2 encryption (somehow) defeated they must now crack my user password, or have to (try) to decrypt my credentials on the file system itself; after all these convoluted and extremely hard steps i think we can agree this person really deserves to have access to my cool wallpapers






  • richardisaguy@lemmy.worldtolinuxmemes@lemmy.worldWindows VS Linux
    link
    fedilink
    arrow-up
    3
    arrow-down
    3
    ·
    edit-2
    2 months ago

    i seriously do not understand what’s up with some of you, why do you spell stuff like in “m$”. The extra work to type it like this doesn’t matter at all. It makes no difference, Microsoft will not shut down because you spelled their name as “micro$oft” on your lemmy post or something like that. why do you keep doing this, i don’t understand.