ForgottenFlux@lemmy.world to Privacy@lemmy.mlEnglish · 1 month agoSignal under fire for storing encryption keys in plaintext on desktop appstackdiary.comexternal-linkmessage-square258fedilinkarrow-up1501arrow-down130cross-posted to: cybersecurity@sh.itjust.worksprivacy@lemmy.worldtechnology@lemmy.worldfoss@beehaw.orgprivacyguides@lemmy.oneprivacy@lemmy.ca
arrow-up1471arrow-down1external-linkSignal under fire for storing encryption keys in plaintext on desktop appstackdiary.comForgottenFlux@lemmy.world to Privacy@lemmy.mlEnglish · 1 month agomessage-square258fedilinkcross-posted to: cybersecurity@sh.itjust.worksprivacy@lemmy.worldtechnology@lemmy.worldfoss@beehaw.orgprivacyguides@lemmy.oneprivacy@lemmy.ca
minus-squareuis@lemm.eelinkfedilinkarrow-up1·edit-229 days ago Signal data will be encrypted if your disk is also encrypted. True. and you don’t have any type of verified boot process How motherboard refusing to boot from another drive would protect anything?
minus-square9tr6gyp3@lemmy.worldlinkfedilinkarrow-up1·29 days agoIts more about protecting your boot process from malware.
minus-squareuis@lemm.eelinkfedilinkarrow-up1·edit-228 days agoWell, yes. By refusing to boot. It can’t prevent booting if motherboard is replaced. EDIT: s/do anything/prevent booting/
minus-square9tr6gyp3@lemmy.worldlinkfedilinkarrow-up1·28 days agoThats correct. Thats one of the many perks.
minus-square9tr6gyp3@lemmy.worldlinkfedilinkarrow-up1·28 days agoIf the hardware signatures don’t match, it wont boot without giving a warning. If the TPM/Secure Enclave is replaced/removed/modified, it will not boot without giving a warning.
minus-squareuis@lemm.eelinkfedilinkarrow-up1·edit-228 days ago If the hardware signatures don’t match Compromised hardware will say it is same hardware If the TPM/Secure Enclave is replaced/removed/modified, it will not boot without giving a warning. Compromised hardware controls execution of software. Warning is done in software. Conpromised hardware won’t let it happen.
minus-square9tr6gyp3@lemmy.worldlinkfedilinkarrow-up1·28 days agoCompromised hardware doesn’t know the signatures. Math.
minus-squareuis@lemm.eelinkfedilinkarrow-up1·28 days agoCompromised hardware can’t create new signatures, but it doesn’t matter because it controls execution of software and can skip any checks.
True.
How motherboard refusing to boot from another drive would protect anything?
Its more about protecting your boot process from malware.
Well, yes. By refusing to boot. It can’t prevent booting if motherboard is replaced.
EDIT: s/do anything/prevent booting/
Thats correct. Thats one of the many perks.
EDIT: s/do anything/prevent booting/
If the hardware signatures don’t match, it wont boot without giving a warning. If the TPM/Secure Enclave is replaced/removed/modified, it will not boot without giving a warning.
Compromised hardware will say it is same hardware
Compromised hardware controls execution of software. Warning is done in software. Conpromised hardware won’t let it happen.
Compromised hardware doesn’t know the signatures. Math.
Compromised hardware can’t create new signatures, but it doesn’t matter because it controls execution of software and can skip any checks.