• 0 Posts
  • 1.32K Comments
Joined 1 year ago
cake
Cake day: July 2nd, 2025

help-circle

  • Correct me if I’m wrong but I also think drive encryption with TPM would require that the drive be decrypted while in use. This device wouldn’t be of any value if it weren’t in use, so there’s also that.

    Effectively, yes, but that’s misleading. Self encrypting drives talk directly to the tpm and encrypt/decrypt on the fly with each read/write. It isn’t decrypting the whole drive when you boot, it just unlocks the key.

    If it’s powered on and running normally, then yes they can potentially gain access by infiltrating the OS layer, and then the drive just willingly decrypts anything they want to read on the fly. As soon as they power off (or it crashes or receives a remote reboot command, etc), they are locked out. Unless of course they can break the TPM, but that’s going into conjecture territory.

    The main scenario where a SED is better than something like bitlocker is the fact that the OS never knows about the key. Say they grabbed the device while it’s running and were able to compromise the OS, now they have access to the drive data as long as it keeps running, but as soon as it shuts down the drive cannot be decrypted without unlocking the key at boot again. With bitlocker, they can read the key from the protected OS memory and decrypt the drive whenever/wherever.

    If running an espionage campaign against a trillion dollar company with Uncle Sam in the back pocket, I’d confidently bet against this system

    I would use all the tools available to me, and wouldn’t count on one single solution, it’s one of many layers of protection you can use.

    Point is, it isn’t a pointless technology, there are lots of use cases.

    I’m imagining something that perhaps micro-batches audio through a raw_audio - encrypt -> storage process, but say every 15 seconds or so. Then transport the encrypted data to a device with decryption keys.

    Sure… Now imagine having setup this system where everything you record is encrypted and sent to a remote location. When they access the drive, which only has encrypted recording data, it’s useless, but they can see your script that’s sending it to your remote location, and potentially track you down that way. Wouldn’t it be nice to have that encrypted at rest too, even if it’s not 100% foolproof?


  • You originally asked what the point is of a self encrypting device. Even assuming this particular device in question has the attack vector you pointed out (I don’t know, I haven’t checked), it isn’t pointless.

    Your attack vector assumes the key is in memory. That would be a very odd and weird design that I’ve never seen… The auth key is usually stored on cryptographically secure hardware (a tpm), you unlock it at boot and it talks to the drive, the OS doesn’t know about it or see it.

    There’s technically an attack vector there, an unproven one that assumes they have a backdoor or an undisclosed flaw at the hardware level… so sure, if you really really don’t want to risk it, encrypt your data yourself.

    There are a lot of reasons to choose these devices:

    1. Performance
    2. Nothing to configure os side, you just write to it and it’s encrypted. Power loss means it cannot be decrypted by a malicious actor.
    3. Disposal. You can often issue a single command that scrambles the auth key and now all the data is unrecoverable without you needing to write every byte.





  • Right, because kids are still developing mentally and their toys may as well be alive, so you want them to develop empathy.

    This is not the case with a mathematical model you interact with as an adult. I like to curse at llms and remind them they are not human regularly to keep me grounded and not allow the notion that they are sentient to fester.

    They aren’t sentient. They don’t have hopes and dreams, they don’t experience joy and sadness, they don’t persist between sessions, they deserve the same empathy as a calculator, and I bet if your calculator gave you 3 as an answer to 2*2, you’d call it a piece of shit.









  • Shut up asshole, we have been saying this for years, but you Nazis refuse to support anything other than sacrificing us for your comfort.

    Not that it matters, it’s still a correct assessment regardless of election timing. You have nothing of value to say in response, so you can me a troll or a Russian bot or whatever, just keep voting Nazi blue no matter who!

    For context, I’m Palestinian. I’ve been griefing my massacred people since the last genocide while being called names by assholes like you for asking for support.

    This is why we say you deserve everything that’s happening. You only care about you and yours, and we’re done sacrificing ourselves for you, sacrifice yourselves, Nazis.


  • When the existing information isn’t super helpful, and the problem requires deep understanding of Linux, there are two choices:

    1. Find an active Linux forum and ask your question, ignore the assholes telling you to RTFM and wait a few days for someone to ask you to provide the output of a command you never knew existed, go through several rounds of remote asynchronous troubleshooting over a few days and eventually maybe you figure out what’s wrong. You are amazing, you make the community amazing, but meanwhile my computer is unstable and I can’t use it.

    2. Tell AI what symptoms you’re experiencing, it gives you basic troubleshooting steps and explains them, and what took days now takes minutes.

    Or, a better example, say you know what you want to do: deploy some docker containers including caddy and cloudflared, you want to deploy them through a CI process so it’s repeatable, you want to segment their networks. Say you’re well versed in all these topics but don’t have much docker or compose experience, you can wade through the documentation to figure out the best way to set it up, and it’ll take you a few days. Or describe the end state and have a solid starting point and enough explanation to correct bad AI assumptions and skip the first few weeks of regretting a decision because no one highlighted where it could go wrong.

    AI makes reading the manual for many integrated systems possible.



  • The average American is not targeted by fascism, the only thing they are upset about is gas and grocery prices. The average liberal is not targeted by fascism, they’re infinitely offended by everything Trump is doing but excuse it when their side does similar things.

    You scream at us that fascism is coming and that we must sacrifice ourselves by voting for democrats that also want to wipe us out, but they are not willing to fight alongside us.

    That is key, the narrative from liberals used to be “vote for democrats so we can live to fight another day”, but now it’s openly “vote for democrats or else more of you will be sacrificed, do you want more of you to be sacrificed?”

    If we’re being sacrificed either way, we won’t support the side asking us to thank them for sacrificing fewer of us.

    You are defending liberalism, and guilt tripping us for not supporting the side that wants to exterminate us slowly.


  • Liberals are fascists, they are exterminating marginalized communities, recent examples include Biden’s genocide and blue states abandoning trans people.

    Slow fascism is still fascism, you just elect to sacrifice us because you think the only alternative is to also sacrifice you, when in reality the only righteous choice is for both of us to sacrifice something.

    Liberals don’t want to sacrifice anything, you only want to sacrifice others on your behalf. That’s the truly disgusting take, and it’s really fucking sad that you still don’t understand what I’m saying.