Timeline for Why is the "administrator" password not saved in Tails?
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jan 26, 2017 at 11:08 | comment | added | cacahuatl | There are a lot of fundamental misunderstanding of information theory and information security here that are out of scope for Tor's stack exchange site. | |
| Jan 24, 2017 at 5:54 | comment | added | agd | As to your assertion [at your "2."] that tampering with a boot sector is "simpler" than providing any password of their choice twice [e.g. >>1<< >>1<<]; I think you have erred. | |
| Jan 24, 2017 at 5:53 | comment | added | agd | I did think that if an adversary could readily be root, that they could much more easily try to decrypt our information; and at the least transfer our encrypted data to a different system where passphrases could be much more rapidly presented to our data. {It seems that today's "strong" passphrase is tomorrow's "weak" passphrase. As has already occurred with passwords; and is hinted at by the increasing sizes of cryptocurrencies.} I did not realize that anyone with access to the media had the equivalent of root access. | |
| Jan 24, 2017 at 5:52 | comment | added | agd | If I follow your "However, instead..." correctly: the vulnerability you describe being exploited there implies that an adversary would have ongoing surreptitious access; and corrupt and return the media to me, so that I would inadvertently provide my passphrase to their keylogger; and they would then need to reaccess my media to get my info. 2)Correct? | |
| Jan 24, 2017 at 5:49 | comment | added | agd | However, I did think that our passphrase was used to gain access to the encrypted storage; in the same way that a password gains access to anything, by being compared against a stored copy thereof. Your answer indicates that our passphrases are used more directly, and are mathematically applied to our data, through an encryption algorithm; with NO need to store our passphrase on our media. So that the ONLY way in which our passphrases are actually "stored" on our media is by the way in which our stored data is altered by our passphrase? 1)Correct? | |
| Jan 24, 2017 at 5:49 | comment | added | agd | Of course I did not suggest that users be denied the ability to ever be root -- that would obviate the whole trust-building notion of "open" software. [See my Title] | |
| Dec 23, 2016 at 3:20 | history | answered | cacahuatl | CC BY-SA 3.0 |