Avoiding LVM -

[J.Witvliet at mindef.nl]

-----Original Message-----
From: users-bounces at lists.fedoraproject.org [mailto:users-bounces at lists.fedoraproject.org] On Behalf Of Craig White
Sent: zaterdag 6 april 2013 3:45
To: users at lists.fedoraproject.org
Subject: Re: Avoiding LVM -

On Thu, 2013-04-04 at 12:41 -0500, Matthew J. Roth wrote:
> Joe Zeff wrote:
> > 
> > On 04/04/2013 08:45 AM, Bill Oliver wrote:
> > >
> > > I take my laptop on the road a lot, and I have work stuff on it I 
> > > don't want the world to see.  I don't encrypt the whole disk, but 
> > > I have an encrypted partitiion, and keep sensitive data on it.
> >
> > You might also consider keeping it on a flash drive with an ext4 
> > file system, as most people who'd find it wouldn't know how to read it.
> 
> 
> As a warning to future readers, this is just bad advice because then 
> the files would be unencrypted on a device that is much easier to lose.
----
and one that has a substantially higher likelihood of failure than a hard drive. It was a bad recommendation on so many levels. Anyone who entrusts their only copy of a valued file to a USB flash drive is certain to learn a lesson the hard way.

Craig


-----Original Message-----
So, a better advise is to simply encrypt the entire disk,
And to keep sensitive info on an _also_ encrypted mem-stick.

If you worry about failures (loosing) the mem stick, perhaps you can put the encrypted image on your own web-site...
Or keep an "dd"-copy of the stick in "/tmp/random.tmp" 

Security has its price, the more secure you want to feel, the higher the costs, or efforts.

Hw


______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het electronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.