On Mon, 10 Feb 2003, Dave Howe wrote:
> no, lilo is. if you you can mount a pgpdisk (say) without software, then you
> are obviously much more talented than I am :)
Bullshit. lilo isn't doing -anything- at that point without somebody or
something (eg dongle) being present that has the -plaintext- key. Without
the key the disk isn't doing anything. So no, lilo isn't mounting the
partition. It -is- a tool to do the mount.
Subtle but important distinction.
As to mounting the disk without software, not a problem it could be done all
in hardware. Though you'd still need the passphrase/dongle.
> for virtual drives, the real question is at what point in the boot process
> you can mount a drive - if it is not until the os is fully functional, then
> you are unable to protect the os itself. if the bootstrap process can mount
> the drive before the os is functional, then you *can* protect the os.
No you can't. If the drive is mounted before the OS is loaded you can put
the system into a DMA state and read the disk (screw the OS) since it's
contents are now in plaintext. You can also prevent the default OS from
being loaded as well.
Clue: If you own the hardware, you own the software.
--
____________________________________________________________________
We are all interested in the future for that is where you and I
are going to spend the rest of our lives.
Criswell, "Plan 9 from Outer Space"
[EMAIL PROTECTED] [EMAIL PROTECTED]
www.ssz.com www.open-forge.org
--------------------------------------------------------------------