Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Except on mac your data can leak into tmp or swap.

I was going to go on a rant about how encrypting home directories is practically pointless, and you really need full disk encryption if you're worried about people snooping, but was glad to see that the developers know where your info can leak...



PGP's Full Disk Encryption for Mac is a no-brainer... on my admittedly brand-new i7 MBP I can't see any lag or slowness yet I know everything is encrypted.

I do wish it would encrypt RAM during sleep, however.


It's good, but I just wish it wasn't so buggy. It's very annoying how intrusive and buggy it is for such an important piece of software.


>Except on mac your data can leak into tmp or swap.

Only if you let it: http://docs.info.apple.com/article.html?path=Mac/10.6/en/118...


I would word that as "Only if you don't explicitly disable it". Not trying to be super-pedantic, but I think it's important to note that the default is unencrypted, since most people probably won't change that default, especially when the feature isn't mentioned on the FileVault doc page.

But yeah, flip that switch if you're running OSX.

EDIT: Acutally looks like that is the default on Snow Leopard. Disregard this comment.


kgo may have been referring to how the contents of /private/tmp, /private/var/log and /private/var/tmp are not encrypted and may contain private information, such as com.apple.QuickLook.thumbnailcache.

I've had some success using scripts on the following website to plug these holes, but recently, I have been more concerned with my data's survivability than my privacy. Once that grad degree is done, I hope to return to a more secure approach.

http://xercestech.com/fixing-filevault-random-key-disposable...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: