Re: [Sheflug] Linux Security

[Ben Oliver <ben@xxxxxxxxxxxx>]

On 2024-07-09 12:08:33, Matt Marsh wrote:
> You mentioned that you have a concern about your whole data being dependant 
> on the small part of the drive where the keys are stored. I understand the 
> concern, but these days SSDs rarely fail - and if they do, it is often all or 
> nothing. It's not quite the same as in the days of spinning platters. And of 
> course, you should have an adequate backup strategy in place for these sorts 
> of eventualities anyway...

This is my thought too. You can and should backup your LUKS header, but also 
your data.

These days backups can also be done versioned and encrypted using a tool like 
borg [0] or restic [1]

I've had drive failures but encryption has never been an obstacle to 
recovering data.

However I really do like having peace of mind that if someone were to pinch my 
device the data on it remains private.

[0] - https://www.borgbackup.org/
[1] - https://restic.net/

_______________________________________________
Sheffield Linux User's Group
http://sheflug.org.uk/mailman/listinfo/sheflug_sheflug.org.uk
FAQ at: http://www.sheflug.org.uk/mailfaq.html

GNU - The Choice of a Complete Generation