Public bug reported:

In Jaunty Beta, when installing using the encrypted LVM option, the disk
partitioning step proceeds far too quickly.
A proper disk encryption setup should involve overwriting the whole disk
with /dev/urandom. Otherwise, it's easy for an attacker to tell which
parts of the disk were written to, and possibly deduce useful
information from that.

Also, somebody who wants to encrypt their disk will almost certainly
find the possibility of an attacker recovering pre-encryption data very
undesirable.


If the time to do this is too long, a compromise would be the installer asking 
the user whether the disk should be cleared, defaulting to "Yes". This could be 
also useful for users who cleared the disk on their own before running the 
installer.

** Affects: ubuntu
     Importance: Undecided
         Status: New

-- 
Installer doesn't wipe the disk when installing on encrypted LVM
https://bugs.launchpad.net/bugs/361025
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to