Hacker News new | ask | show | jobs
by cypherpunks01 5243 days ago
I'd be very worried about special proprietary drives like these that have an encryption/decryption chip. What if the chip fails? How easy will it be to read the bytes off of a drive if it fails in the future? Here are my solutions instead:

On a Mac (Lion+), use FileVault 2. It provides pre-boot full drive encryption.

On Linux, use dm-crypt/LUKS. Why oh why is this still not easy to set up?

On Windows, use TrueCrypt full drive pre-boot authentication.

On an Android phone (ICS+), use the new android full drive encryption.

On an iPhone, I imagine you're SOL?

4 comments

Fedora has proper disk encryption as a checkbox option during installation. It's very easy to set up.
Ubuntu does as well, with a choice between home directories only or the whole disk. It's not actually that hard to set up dm-crypt manually, although not something I'm about to suggest to my grandmother.
I do the first option (VileFault 2 on Lion), but I don't trust closed-source encryption software. Who knows if CBP can read my files because Apple does or does not do key escrow? It's terrifying, considering what's happening to people like that creepy media slut Jake Appelbaum at the hands of the CBP.

Even though I use filevault, I keep my SSH keys and GPG keys encrypted, and I GPG encrypt anything I wouldn't want the cops reading.

What if the chip fails?

What if you forget your password? You should have backups (and not just a backup password).

On Linux, use dm-crypt/LUKS. Why oh why is this still not easy to set up?

It is very easy IMO (the only differing steps are creating a crypted container and opening it). I think you mean to ask why it is not an available option in most distros' graphical installers.

iPhone storage is encrypted by default.