From: Hannes Erven <h.e@gmx.at>
To: dm-crypt@saout.de
Subject: Re: [dm-crypt] encrypted root: prevent / detect tampering with kernel / initrd
Date: Tue, 29 Dec 2009 22:31:16 +0100 [thread overview]
Message-ID: <4B3A7524.1040900@gmx.at> (raw)
In-Reply-To: <20091229202429.GB17029@tansi.org>
Arno Wagner schrieb:
> On Tue, Dec 29, 2009 at 12:11:58AM +0100, Heinz Diehl wrote:
>> "Please repeat with me: there is no way to avoid or detect backdoors if
>> physical access to the machine has ever been granted." (Werner Koch on
>> gnupg-users 19.02.2009 on exactly the same topic).
>
> I don't agree.
How do you protect against e.g. a hardware key logger? You don't.
-hannes
next prev parent reply other threads:[~2009-12-29 21:31 UTC|newest]
Thread overview: 25+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-12-28 20:28 [dm-crypt] encrypted root: prevent / detect tampering with kernel / initrd Olivier Sessink
2009-12-28 21:20 ` Luca Berra
2009-12-28 21:41 ` Olivier Sessink
2009-12-28 23:11 ` Heinz Diehl
2009-12-29 10:05 ` Olivier Sessink
2009-12-29 10:23 ` [lesh] Ivan Nikolic
2009-12-29 12:25 ` Olivier Sessink
2009-12-29 12:37 ` Milan Broz
2009-12-29 20:24 ` Arno Wagner
2009-12-29 21:15 ` Heinz Diehl
2009-12-29 23:02 ` Olivier Sessink
2009-12-30 2:52 ` Arno Wagner
2009-12-30 14:16 ` Heinz Diehl
2009-12-30 15:34 ` Arno Wagner
2009-12-29 21:31 ` Hannes Erven [this message]
2009-12-29 21:41 ` Gregy
2009-12-30 2:53 ` Arno Wagner
2009-12-28 22:41 ` Zdenek Kaspar
2009-12-28 22:51 ` Zdenek Kaspar
2009-12-28 22:57 ` Heinz Diehl
2009-12-29 20:18 ` Arno Wagner
2009-12-29 22:52 ` Olivier Sessink
2009-12-30 2:56 ` Arno Wagner
2009-12-30 10:48 ` Olivier Sessink
2009-12-30 15:28 ` Arno Wagner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4B3A7524.1040900@gmx.at \
--to=h.e@gmx.at \
--cc=dm-crypt@saout.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.