Hacker News new | ask | show | jobs
by colechristensen 1324 days ago
>trying to encourage less technical users to be secure

The threat of “losing the keys to all the data” is considerably larger than the threat of having your computer and data stolen for an average home user. It can’t just be a matter of more secure is better… you have to have an idea of what you’re trying to prevent.

All of our shit has been lost in one leak or another so at this point it seems like it barely matters.

2 comments

My happy medium is encrypted PCs that sync everything onto my unencrypted home server.

If you're already in my bedroom, I've got bigger problems than my family photos.

If I leave my laptop on the bus, it's a VISA problem.

This isn't for everybody, but it's probably the safest my family can be.

This is not great from a robbery point of view or a disposal point of view.

Syncing to a cloud service would be better.

This is the other side of the problem: the issue is wider than your data and doesn't even need to be about FDE or other encryption. Simply using decent passwords/passphrases more generally is a hurdle to jump before even considering FDE because the other set of risks are when a bot gains access to the machine by those means it may be able to gain access to information to enable identity fraud or even get direct access to banking information (most care a lot more when their money is at stake than just their data or reputation). The circumstance in this post may not seem relevant here to us, but to a non-technical user the two are easily conflated (“I heard about someone who used a strong password and lost access to everything when it was forgotten”).