Re: [SLL] Ok, that's just evil.

2011-02-09 Thread Derek Simkowiak
/ I haven't messed with Deb or Ubuntu yet, [...]/ Ubuntu will do what you want. I use the full-disk encryption from the Ubuntu installer (dm-crypt). I use it on 100% of my computers, incl. all my VM servers, my netbook, and my MythTV box. The Ubuntu installer situation is the

Re: [SLL] Ok, that's just evil.

2011-02-09 Thread Chuck Wolber
On Wed, 9 Feb 2011, Bill Thompson wrote: Although I'm not quite sure why you would do full disk encryption on a running server or why you would want the encryption overhead on a MythTV box. Are these systems running in a insecure location? Is there such a thing as a secure location?

Re: [SLL] Ok, that's just evil.

2011-02-09 Thread Derek Simkowiak
/ Although I'm not quite sure why you would do full disk encryption on a running server [...] Are these systems running in a insecure location?/ Last year one of my clients in a secure Seattle office building got hit by theft. They lost workstations and laptops. But even if your

Re: [SLL] Ok, that's just evil.

2011-02-09 Thread Bryan McLellan
On Wed, Feb 9, 2011 at 4:08 PM, Bill Thompson bi...@mahagonny.com wrote: rest, not just unmounted or off-line. As for the lawsuits, the court would require that you turn over the encryption keys and/or passwords so there is no protection there. Would they? There are 5th amendment concerns.

Re: [SLL] Ok, that's just evil.

2011-02-09 Thread Derek Simkowiak
/You need a solution that encrypts the data at rest, not just unmounted or off-line./ Indeed, once the system boots up with the passphrase, disk encryption does nothing for you. It can also be easily broken in many common circumstances: http://news.cnet.com/8301-13578_3-9876060-38.html

Re: [SLL] Ok, that's just evil.

2011-02-09 Thread Erik Ryberg
Bryan McLellan wrote: On Wed, Feb 9, 2011 at 4:08 PM, Bill Thompson bi...@mahagonny.com wrote: rest, not just unmounted or off-line. As for the lawsuits, the court would require that you turn over the encryption keys and/or passwords so there is no protection there. Would they? There are 5th