LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-21-2017, 01:06 AM   #1
rblampain
Senior Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 11
Posts: 1,288

Rep: Reputation: 52
is encrypting hdd/partition a common security measure?


I am aware that if a computer/laptop is lost or stolen, it is easy to remove the hdd and access its contents from another machine. Is it a common security measure to encrypt a hard didk drive or its partitions in order to protect the confidentiality of the data. Is this method transparent to the user and the programs accessing the data or is there more complications that I cannot foresee, knowing nothing about encryption except its existence (like a need to decrypt before accessing data).

Thank you for your help.
 
Old 10-21-2017, 03:11 AM   #2
Michael Uplawski
Senior Member
 
Registered: Dec 2015
Posts: 1,622
Blog Entries: 40

Rep: Reputation: Disabled
Quote:
Originally Posted by rblampain View Post
Is it a common security measure to encrypt a hard didk drive or its partitions in order to protect the confidentiality of the data.
I do understand the question and the answer is 'yes'.
What I do not understand is, in which way my answer could help anybody. “Many people encrypt their hard drives”, its implicitness being so obvious, that they do not bother to talk about it. Question: Would that be a case of something “common”? I am struggling with the English word “Implicitness” but cannot find better expressions in my online-dictionaries.

Quote:
Is this method transparent to the user and the programs accessing the data or is there more complications that I cannot foresee, knowing nothing about encryption except its existence (like a need to decrypt before accessing data).
The usual way with cryptfs is to mount an encrypted drive in the presence of a key or keyfile, or several keys and/or keyfiles. From then on, what you write to the drive “is encrypted” and what you read from the drive “is decrypted”. Unmount your encrypted drive to be safe.
 
1 members found this post helpful.
Old 10-21-2017, 08:15 AM   #3
rblampain
Senior Member
 
Registered: Aug 2004
Location: Western Australia
Distribution: Debian 11
Posts: 1,288

Original Poster
Rep: Reputation: 52
Thank you for the answer which help someone like myself who knows nothing about the usefulness of encryption in everyday computing. "Implicitness" more or less means "cela va sans dire" in French meaning that, in theory, one thing automatically follows another. By "common" I meant "generally applied". I only mention this because when I was learning a second language within its native speakers, nobody dared correcting my mistakes which I found very frustrating although in your case there is no mistake.
 
Old 10-22-2017, 09:25 AM   #4
dave@burn-it.co.uk
Member
 
Registered: Sep 2011
Distribution: Puppy
Posts: 601

Rep: Reputation: 172Reputation: 172
Most people do not encrypt their drives.
It is only those who are paranoid or actually have real secrets that bother.
It is pretty common knowledge amongst computer repairers that they are far more likely to see encrypted drives than they should.
That is usually because encryption is far more common amongst those who actually don't look after their machines.
 
Old 10-22-2017, 10:06 AM   #5
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
Quote:
Originally Posted by dave@burn-it.co.uk View Post
Most people do not encrypt their drives.
Big statement; some of us do.

Quote:
It is only those who are paranoid or actually have real secrets that bother.
It's not just for those who might be "paranoid" and/or have "secrets" to hide. If your PC is physically stolen, and you have encrypted your drive(s), without knowing your decryption key/password (or a lot of time and maybe a supercomputer), you data is as safe at it can be, from being read. That would obviously apply a lot to the business environment, but can also include documents about thinks like, your identity related documents, passports, birth certificate, etc.

It is a good idea these days to be as safe as you can.

Quote:
It is pretty common knowledge amongst computer repairers that they are far more likely to see encrypted drives than they should.
That is usually because encryption is far more common amongst those who actually don't look after their machines.
??
 
1 members found this post helpful.
Old 10-22-2017, 10:20 AM   #6
dave@burn-it.co.uk
Member
 
Registered: Sep 2011
Distribution: Puppy
Posts: 601

Rep: Reputation: 172Reputation: 172
QED??
 
Old 10-22-2017, 01:18 PM   #7
Michael Uplawski
Senior Member
 
Registered: Dec 2015
Posts: 1,622
Blog Entries: 40

Rep: Reputation: Disabled
History.

We are history. I am. Or I have never been here, in the first place.
Quote:
Most people do not encrypt their drives.
It is only those who are paranoid or actually have real secrets that bother.
It is pretty common knowledge amongst computer repairers that they are far more likely to see encrypted drives than they should.
That is usually because encryption is far more common amongst those who actually don't look after their machines.
Things change retroactively for us. The new generation knows that all we did once, we never did and things that were have never been... maybe the essence of getting old.
 
Old 10-22-2017, 01:37 PM   #8
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by dave@burn-it.co.uk View Post
Most people do not encrypt their drives.
It is only those who are paranoid or actually have real secrets that bother.
It is pretty common knowledge amongst computer repairers that they are far more likely to see encrypted drives than they should.
That is usually because encryption is far more common amongst those who actually don't look after their machines.
oh, the good old "i have nothing to hide" argument.
i believe it is my right to do things behind closed doors.
i know the probability that someone steals/takes my machine and gathers data from it is very low, but still i wouldn't want it to happen.
it's one of those typical once-in-a-lifetime situations.
you wear a safety belt not because you have a car accident every day, but on the extremely unlikely off-chance that it might happen one day, and would be fatal without it.

no, i don't think encryption is only for spies and other intelligence or IT professionals.
 
Old 10-22-2017, 09:33 PM   #9
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,323
Blog Entries: 28

Rep: Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142Reputation: 6142
I have experience with only one encrypted laptop, and that was one I had on loan from a big corporation for a training gig. It worked just fine.

I haven't encrypted any of my own drives, mostly because I'm lazy.

Based on my own circle, I would say encrypting drives is not common, but it's not unusual either.

Last edited by frankbell; 10-22-2017 at 09:34 PM.
 
1 members found this post helpful.
Old 10-23-2017, 01:49 AM   #10
Philip Lacroix
Member
 
Registered: Jun 2012
Distribution: Slackware
Posts: 441

Rep: Reputation: 574Reputation: 574Reputation: 574Reputation: 574Reputation: 574Reputation: 574
Quote:
Originally Posted by dave@burn-it.co.uk View Post
Most people do not encrypt their drives. It is only those who are paranoid or actually have real secrets that bother.
I wouldn't let you ransack my house either.

Quote:
Originally Posted by Ed Snowden
«Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say»
Now I'll bring further evidence in support of Godwin's law, by observing that the «nothing to hide» argument is often (mis)attributed to Joseph Goebbels, though it seems that a US government official might have been the first one to use it, with respect to Upton Sinclair's complaint about his mail – and his friend's and family's – having been opened.

Quote:
Originally Posted by Upton Sinclair
«Not merely was my own mail opened, but the mail of all my relatives and friends – people residing in places as far apart as California and Florida. I recall the bland smile of a government official to whom I complained about this matter: "If you have nothing to hide you have nothing to fear."»

"The Profits of Religion", 1918
Anyway, I do encrypt my data. And Eric Hameleers wrote a fine README about doing it on Slackware: README_CRYPT.TXT

Last edited by Philip Lacroix; 10-23-2017 at 02:41 AM.
 
Old 10-23-2017, 06:27 AM   #11
dave@burn-it.co.uk
Member
 
Registered: Sep 2011
Distribution: Puppy
Posts: 601

Rep: Reputation: 172Reputation: 172
I didn't say I had nothing to hide or anything like that.
I don't bother encrypting my drive because no one has access to it - unless my house is broken into and then I would be far moree worried about other things.
 
Old 10-23-2017, 07:16 AM   #12
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
Quote:
Originally Posted by dave@burn-it.co.uk View Post
I didn't say I had nothing to hide or anything like that.
I don't bother encrypting my drive because no one has access to it - unless my house is broken into and then I would be far moree worried about other things.
No, you didn't say you had something to "hide", but you did say "It is only those who are paranoid or actually have real secrets that bother.", which implies that anyone who HAS encrypted their drive(s), has something to "hide and/or is "paranoid".

When there are very legitimate reasons for protecting one's drives with encryption. If someone breaks into your house on the other-hand (and you do not have your drives encrypted), well it's as easy as getting a live CD/DVD/USB and your documents; here they come... or should I say.. go... sold to the highest bidder!

I've got the piece of mind that, even if someone does physically steal my PC, they are probably going to need a supercomputer, to have any real hope of reading any of my documents (or even starting my system).
 
Old 10-23-2017, 07:30 AM   #13
dave@burn-it.co.uk
Member
 
Registered: Sep 2011
Distribution: Puppy
Posts: 601

Rep: Reputation: 172Reputation: 172
As I said, you are paranoid or something else that am too polite to suggest.
 
Old 10-23-2017, 08:54 AM   #14
jsbjsb001
Senior Member
 
Registered: Mar 2009
Location: Earth, unfortunately...
Distribution: Currently: OpenMandriva. Previously: openSUSE, PCLinuxOS, CentOS, among others over the years.
Posts: 3,881

Rep: Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063Reputation: 2063
Quote:
Originally Posted by dave@burn-it.co.uk View Post
As I said, you are paranoid or something else that am too polite to suggest.
No, sorry david, I'm not, just realistic.

Your a fo*l.
 
Old 10-23-2017, 11:49 AM   #15
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Quote:
Originally Posted by dave@burn-it.co.uk View Post
As I said, you are paranoid or something else that am too polite to suggest.
your previous post (the one i replied to) was mildly derogative.
fine.
but it was clearly mildly derogative towards other people.
now you are getting mildly abusive towards one poster.
is that all you can think of when arguments fail you?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Encrypting portable hdd actinide Linux - Security 1 08-02-2017 04:01 AM
HDD Partition Failed Boot / ddrescue Operation Completed / Now What to Try and Restore Failing HDD/Partition? GNewbie Linux - Newbie 15 10-14-2016 03:42 PM
Encrypting a common data partition between distros tommyttt Linux - General 4 08-07-2010 02:47 AM
routers as a security measure cylarz Linux - Security 4 04-24-2006 12:20 PM
Posing a new security measure..... zhizaki Slackware 4 09-28-2005 11:13 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:13 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration