Trollface

forgejo: https://forgejo.asudox.dev/Asudox
matrix: https://matrix.to/#/@asudox:matrix.org

aspe:keyoxide.org:D63IYCGSU4XXB5JSCBBHXXFEHQ

  • 8 Posts
  • 58 Comments
Joined 1 year ago
cake
Cake day: June 25th, 2023

help-circle










  • Let’s say you have LUKS with TPM enabled. Verified or Safe Boot is also on, so someone cannot access your decrypted files just with some live usb distro. And let’s say you also have a password set for changing BIOS/UEFI settings so the attacker cannot disable safe boot without a password. So the attacker might want to steal the hard drive in this case to get the data, but that’s also not possible because the hard drive is encrypted and the key is in the TPM. The way TPM also checks for integrity makes the system tamper-proof. So any attempt at tampering with the hardware will trigger the tamper protection and ask the user for a recovery passphrase to let the TPM hand over the decryption key again. So actually TPM is useless without safe boot and without a password for the user account in your OS. The only thing protecting your data from the attacker in this case is your user password… unless the user has one of these raspberry pi pico devices that are programmed to take the TPM keys sent to the CPU at boot in plaintext. Though I am pretty sure this is also fixed or will be fixed in the future. Maybe public key cryptography could help. I haven’t researched that yet.

    TL;DR: TPM is pretty useless without safe boot, but is pretty decent with safe boot. TPM is not the securest thing in the world but for a regular user it’s probably the best choice without sacrificing convenience.











  • I recently picked up Rust, still a beginner, but it’s very nice. And the compiler errors and tips are top. Since I used only Python before, Rust is my first compiled language and I’m glad it was Rust. Options and Result’s are also something I appreciate tbh. Other than for AI, simple stuff and maybe prototypes, I would use Rust over Python. Definitely recommend it. The borrow checker is a pain in the ass though. I’ll also be using it later for embedded systems when I become more fluent with it. I am also currently making a big project with Rust that I haven’t been able to do with Python.