Re: Advice on encrypted filesystem

From	David Christensen <dpchrist@holgerdanske.com>
Newsgroups	linux.debian.user
Subject	Re: Advice on encrypted filesystem
Date	2020-06-27 21:50 +0200
Message-ID	<AmoZP-6EP-7@gated-at.bofh.it> (permalink)
References	(5 earlier) <Am1TA-1h3-5@gated-at.bofh.it> <Am2wh-1tR-1@gated-at.bofh.it> <Am7Pj-4K4-1@gated-at.bofh.it> <Amak9-6px-1@gated-at.bofh.it> <Ame4q-ft-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

> On 6/27/20 6:00 AM, David Christensen wrote:
>> On 2020-06-26 18:25, David Wright wrote:
>>
>>> There's still the problem of what one does about sensitive data if
>>> one has been rash enough to write it unencrypted onto an SSD. Would
>>> shred -n 1   be preferable? Not really, because that doesn't hit the
>>> ex-file areas. What then?
>>
>> The best option is to command the SSD firmware to do a "secure
>> delete". Some SSD manufacturers provide utilities for doing this.
>> Alternatively, it can be done from the command line with Linux.


On 2020-06-27 01:05, Admin4 wrote:
 > 1) backup your data to external usb drive
 >
 > 2) reinstall with encrypted enabled
 >
 > 3) restore data

That process is likely to leave both host-accessible and hidden 
unencrypted blocks from the prior installation on the device.


 > = a lot of unencrypted data get's overwritten (if user does not have a
 > lot of data, generate some X-D)

"a lot" is not the same as "all".  The ATA secure erase command is 
designed to erase all blocks, both host-accessible and hidden.


David

Thread

Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 03:30 +0200
  Re: Advice on encrypted filesystem Roberto C. Sánchez <roberto@debian.org> - 2020-06-25 03:40 +0200
    Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-25 04:20 +0200
    Re: Advice on encrypted filesystem john doe <johndoe65534@mail.com> - 2020-06-25 09:50 +0200
    Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 13:40 +0200
      Re: Advice on encrypted filesystem David <bouncingcats@gmail.com> - 2020-06-25 15:30 +0200
        Re: Advice on encrypted filesystem Nicolas George <george@nsup.org> - 2020-06-25 15:40 +0200
          Sound in Jitsi/BBB [was: dvice on encrypted filesystem] <tomas@tuxteam.de> - 2020-06-25 16:00 +0200
            Re: Sound in Jitsi/BBB [was: dvice on encrypted filesystem] Nicolas George <george@nsup.org> - 2020-06-25 16:00 +0200
              Re: Sound in Jitsi/BBB [was: dvice on encrypted filesystem] <tomas@tuxteam.de> - 2020-06-25 16:10 +0200
        Zoom client for Linux (was: Re: Advice on encrypted filesystem) rhkramer@gmail.com - 2020-06-25 16:20 +0200
      Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 16:30 +0200
  Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-25 04:30 +0200
    Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-25 13:50 +0200
      Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-26 15:30 +0200
        Re: Advice on encrypted filesystem rhkramer@gmail.com - 2020-06-26 16:40 +0200
        Re: Advice on encrypted filesystem Michael Stone <mstone@debian.org> - 2020-06-26 17:50 +0200
          Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-26 21:10 +0200
            Re: Advice on encrypted filesystem Michael Stone <mstone@debian.org> - 2020-06-26 21:50 +0200
              Re: Advice on encrypted filesystem David Wright <deblis@lionunicorn.co.uk> - 2020-06-27 03:30 +0200
                Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 06:10 +0200
                Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 09:10 +0200
                Re: Advice on encrypted filesystem Admin4 <admin4@dwaves.de> - 2020-06-27 10:10 +0200
                Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 21:50 +0200
                Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 22:20 +0200
                Re: Advice on encrypted filesystem Andrei POPESCU <andreimpopescu@gmail.com> - 2020-06-27 10:50 +0200
                Re: Advice on encrypted filesystem David Christensen <dpchrist@holgerdanske.com> - 2020-06-27 23:30 +0200

csiph-web