Re: [dm-crypt] 'discard' as default

[Arno Wagner <arno@wagner.name>]

On Sun, Feb 03, 2019 at 18:57:42 CET, Christoph Anton Mitterer wrote:
> On Sun, 2019-02-03 at 18:34 +0100, Arno Wagner wrote:
> > Specrte and Meltdown are indeed nice examples why that can 
> > backfire damatically. Security, like most good engineering,
> > is about redundancy. You cut a bit here and a bit there and
> > suddenly you are nacked. Not good at all.

[...]
 
> Anyway, guess there is nothing more upstream can/should do about
> this... it's good to have an option to enable TRIM (for those who
> deliberately want it) and it's good that it's not the default.
> If distros choose to possibly weaken security, it's up to them and
> unfortunately their users.

I agree on that one. All we can reasonably do is warn. 
Although being a security expert does feel like being
a climate scientists sometimes....

Regards,
Arno
-- 
Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno@wagner.name
GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D 9718
----
A good decision is based on knowledge and not on numbers. -- Plato

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier