Comment by nxobject
Comment by nxobject 9 hours ago
If the encryption was that easy to bypass, was it worth it at all?
Comment by nxobject 9 hours ago
If the encryption was that easy to bypass, was it worth it at all?
There are some reasons you'd want to encrypt even without a secret key. One is it makes it easier to erase data (just erase the key).
It also makes bit flip errors a lot more obvious, which is another way of saying harder to ignore, so that can go either way.
Can't bit flip errors also destroy encrypted volumes much more easily?
I think it depends. Encrypted filesystems typically encrypt contents of each file separately - that way you don't need to read / write the whole disk to read it write any individual file contents. Of course that means metadata may be in plain text or may be separately encrypted - again possibly folder by folder instead of all metadata at once. Exact details would vary with different file system encryption schemes.
Whereas if you image the disk and encrypt the image properly, that gives you all the great confidentially guarantees but no random access.
> Encrypted filesystems typically encrypt contents of each file separately - that way you don't need to read / write the whole disk to read it write any individual file contents.
Ah, that's not true of "full disk encryption". It usually encrypts the disk blocks.
File-based encryption is stronger; you can use different protection classes on different files, you can use authenticated encryption, etc. iOS does it this way and I assume other systems have caught up, but don't know any in particular.
Stealing a camera is much harder than stealing an SD card out of a camera.
Yeah but the Camera's owner is much more likely to notice "my camera is missing" than "the SD card is blank for some reason... the SD card must have failed"
EDIT: The linked PDF has a photo, the camera literally opens up to access the SD card.
This is professional equipment, used for surveys. Think espionage, not consumer hardware.
The manufacturer didn’t even know encryption was enabled, because as long as the camera was working, it would just provide all files over USB without any encryption.
It was basically enabled by accident, and the only thing it prevented was recovery of files directly from the SD card when the camera was damaged.