https://bugs.kde.org/show_bug.cgi?id=346741

--- Comment #7 from Holger <h.kl...@gmx.de> ---
(In reply to Claus Appel from comment #6)
> Could you please elaborate on why this is not secure? It is not clear to me.

Sure. An unencrypted HDD can either be physically extracted and read / modified
in another PC, that is running it's own operating system. To that other
computer everything on your HDD is just data, no restrictions apply.

The second even easier possibility is, to boot your device from a USB-Stick, in
case you didn't deny this in the BIOS. So the foreign OS is running directly on
your hardware and considers your HDD as plain data.

You can copy *anything* you like, modify it, destroy it. You could leave a
backdoor, change root passwords or create new accounts with root privileges.
You get *full* control over every bit of data written on that disk.

Encryption will protect you: Nobody can read your data and they cannot modify
it or create backdoors. Sure, they can still destroy everything. Encryption
does not replace a regular backup.

At your desktop at home you usually tolerate this kind of thread. You rely on
the security of your house, though an adversary may intrude without you
noticing (got a cleaning lady?). On the other hand a laptop staying behind in a
classroom with 30 bored pupils, while you visit the bathroom ... I wouldn't
take the risk.

A lock screen alone is only a minor deterrent like a sign to plead you, not to
tread on the grass. Encryption can be a nasty fence with barbwire to keep the
evil outside.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to