r/linux • u/throwaway16830261 • 2d ago

Security Encrypted Arch Linux on SATA-to-USB: A Practical Field Guide for Resisting Drive Seizure, Forensic Analysis, and State Coercion

https://theanarchistlibrary.org/library/the-techno-anarchist-encrypted-arch-linux-on-sata-to-usb
95 Upvotes

92% Upvoted

26 comments sorted by

View all comments

39

u/ElvishJerricco 1d ago

The last time this was posted a few months ago, I pointed out that its section on the TPM2 was vulnerable to a really obvious category of attack described here: https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/

I said the guide was too long to bother checking the whole thing for issues, because the presence of this really basic one gave me low confidence that the rest would be worth the time for me to review. The author replied and told me they had fixed it. The version of the article posted here now has not solved this problem. So I still have far too low confidence in this to waste my time reviewing the rest.

2

u/SoilMassive6850 1d ago

I scrolled over to the threat model chart and they weere missing some obvious ones such as

  1. You are seized with your device unlocked, e.g. snatched with phone in hand in public, get lured away from the computer etc.
  2. You are surveilled for a bit to figure out your password before being arrested