• henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 months ago

    With what? Where would you store the encryption key for the encryption key on a desktop system where it would not be accessible to an attacker?

    Perhaps there could be a pin or password that must be entered every time to decrypt it into memory.

    • boredsquirrel@slrpnk.net
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 months ago

      Something you know, something you have, something you are.

      3FA:

      • Pin
      • Security Key/TPM/Secure element
      • fingerprint / iris scan

      You could also start with just one of these

      • ArcaneSlime@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 months ago

        fingerprint / iris scan

        Nope, I’m out. I’m not giving my unchangeable biological data to the Computer Gods because A) Fuck that and B) the police in my country can compel the use of biometrics to unlock things but cannot compel you to give up your pass as it is protected by the first amendment. Yes I think the bios should be protected too but that isn’t the reality in which I live.