Which release should we be using?

Aaron Toponce aaron.toponce at gmail.com
Fri Aug 26 17:25:10 CEST 2011


On 08/23/2011 01:04 AM, Werner Koch wrote:
> On Tue, 23 Aug 2011 03:47, papillion at gmail.com said:
>> stored in a Keepass database that resides in a TrueCrypt container. It's
>> protected well. My actual key is protected by a 62 character passphrase
> 
> ... as long as the box is pwoered down.  Hard disk encryption does not
> help if the box is up and you are attacked by malware.

Oh, you can own an encrypted filesystem, even if the box is down. The
Evil Maid attack makes this trivial. And it doesn't matter the
encryption software used either.

-- 
. o .   o . o   . . o   o . .   . o .
. . o   . o o   o . o   . o o   . . o
o o o   . o .   . o o   o o .   o o o

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 591 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20110826/798bdc02/attachment.pgp>


More information about the Gnupg-users mailing list