undefined | Better HN

0 pointskylehotchkiss8y ago0 comments

Does this bypass filesystem encryption?

0 comments

It might, if you added "root" as a user able to unlock the disk. But you'd probably have needed to set a password for the root account to do that.

Someone12348y ago

You have a valid user as far as the OS is concerned, so you'd be able to access encrypted files and copy them off of the machine.

tempay8y ago

Only if the laptop is locked (as the encryption key is already in memory).

kylehotchkissOP8y ago

Any chance that self clears after an interval?

Might be a bad day to leave the laptop at the table at the coffeeshop when ordering.

tempay8y ago

By default no as most people expect things to keep running when they lock their laptop.

There is a setting to immediately destroy the key when the laptop sleeps. It might be outdated but [1] should give you a starting point for setting it up.

[1] http://mattwashchuk.com/articles/2016/01/08/maximizing-filev...

satysin8y ago

If it does then it means Apple's encryption implementation is fucked.

j / k navigate · click thread line to collapse

0 comments

ams61108y ago

It might, if you added "root" as a user able to unlock the disk. But you'd probably have needed to set a password for the root account to do that.

Someone12348y ago

You have a valid user as far as the OS is concerned, so you'd be able to access encrypted files and copy them off of the machine.

tempay8y ago

Only if the laptop is locked (as the encryption key is already in memory).

kylehotchkissOP8y ago

Any chance that self clears after an interval?

Might be a bad day to leave the laptop at the table at the coffeeshop when ordering.

tempay8y ago

By default no as most people expect things to keep running when they lock their laptop.

There is a setting to immediately destroy the key when the laptop sleeps. It might be outdated but [1] should give you a starting point for setting it up.

[1] http://mattwashchuk.com/articles/2016/01/08/maximizing-filev...

satysin8y ago

If it does then it means Apple's encryption implementation is fucked.

j / k navigate · click thread line to collapse