Hacker News new | ask | show | jobs
by mr_mitm 41 days ago
It's only useless if you assume a perfectly capable attacker. That's not every attacker, though. We're not always up against a nation state actor, in fact, some attackers are quite dilettante. I believe the assumption that if something doesn't defend against the most capable attacker it's useless and we might as well not bother is not helpful.

I know my bike lock can be cut within seconds by someone who is sufficiently skilled and determined. I'm still going to lock my bike.

1 comments

law enforcement? stolen bags? state sponsored agents? that's the only times you should be worred and it fails horribly at those.
What about employees smart enough to boot a laptop from a thumb drive but not smart enough to disassemble it who just want admin to install some game from a dubious source? What about other scenarios neither you or I can think of right now? The cost of activating bitlocker is so low, I'd do it just in case.

Also, I'd argue the stolen bag scenario usually features dilletante attackers.

I had to think about this and research, but actually bag theft is one of the ways companies are attacked these days.