← Back to context

Comment by johncolanduoni

2 days ago

A warning doesn’t help at all. The main threat model for FDE is that someone steals your device and dumps the disk. If you don’t protect the boot process somehow, then you’re just storing the encryption key next to the data.

If you don’t care about that (which is not “military level security”, laptop thieves stealing creds is a thing), just don’t use FDE or use it with an on-boot password every time. No point in the theater.

> laptop thieves stealing creds is a thing

Two factor is a thing. FDE is such a 1990s idea.

  • Wow. That’s a new one. Where exactly do you think the authentication tokens you obtain using 2FA are stored?