Hacker News new | ask | show | jobs
by bo1024 3384 days ago
Good overview. Someone else in the thread mentioned a disk encryption solution that works with hibernation.

To step back for those who aren't familiar, disk encryption is not at all like Apple's remote locking feature and does not require you to activate it remotely or something like that. It just means that the data on your hard drive is stored encrypted ("scrambled") so that it cannot be read without a password that decrypts it. When you power on the computer, you provide the password, but a thief who doesn't know that password can't decrypt it.

Also there is no need for a remote erasing feature because the encrypted data is as good as erased for someone without the password. (This all assumes you use a secure enough password.)

This is actually more secure than Apple's remote lock in many ways because the remote lock can be avoided by preventing the device from ever accessing the internet or possibly bypassed by removing the hard drive and accessing it using some other computer. (There are protections that prevent this in the iPhone case but I don't know about Mac laptops, don't think so).

1 comments

I believe it is possible to activate them separately, but Apple also has full-disk encryption, which obviously you should enable if you are concerned about data theft. The remote wipe I think is just for extra peace of mind, but the encryption should really be your first line of defense.
You really should use full disk encryption on all media today. If for no other reason it makes it easy to dispose of disks as you outgrow them, without worrying about erasing personal data.

Windows 10 Pro has bitlocker, Linux has LUKS, FreeBSD have Geli, and OS X has its own system.

I remember reading how Microsoft had weakened Win8 bitlocker security (compared to Win7) [1]. I don't know what is the status/comparison to Win10. If someone has, please reply.

[1] https://www.wilderssecurity.com/threads/has-bitlocker-been-w...

From Wikipedia:

Starting with Windows 8 and Windows Server 2012 Microsoft removed the Elephant Diffuser from the BitLocker scheme for no declared reason.[47] Dan Rosendorf's research shows that removing the Elephant Diffuser had an "undeniably negative impact" on the security of BitLocker encryption against a targeted attack.[48] Microsoft later cited performance concerns, and noncompliance with the Federal Information Processing Standards (FIPS), to justify the diffuser's removal.[49] Starting with Windows 10 version 1511, however, Microsoft added a new FIPS-compliant XTS-AES encryption algorithm to BitLocker.[6]