Conversation

Notices

1. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Tuesday, 18-Apr-2023 00:19:31 EDT lnxw48a1
   Seen via @clacke:
   
   https://nondeterministic.computer/@mjg59/110216984788495049
   
   > If you installed a Linux system with disk encryption more than a couple of years ago, there's a decent chance it's using a weak key derivation function and someone who cares enough would be in a position to brute-force it. https://mjg59.dreamwidth.org/66429.html has more details and instructions on how to update to a better KDF.
   
   #Linux #LUKS #security #encryption #privacy
   1. lnxw48a1 (lnxw48a1@nu.federati.net)'s status on Tuesday, 18-Apr-2023 01:39:37 EDT lnxw48a1

      in reply to
      > ... if you're using an encrypted `/boot`, stop now ...
      
      I'll check, but I think my original LUKS LVM partition is old enough that GrUB didn't support that at all.
      
      I remember it because a Windows manual at work mentioned it as a major security weakness of non-Windows OSes.