My experience with #FlashDrives recently has been mixed. I have no problem in encrypting them with #LUKS, using #cryptsetup or with formatting a partition with #Btrfs, for instance, using #gparted and doing other tinkering with #Gnome #disks. But the problem has been with the actual drives themselves. The cheaper ones seem to have quite a few bad sectors, etc. and so they’re not really reliable for medium term storage.
1/2
So today I tired #mkfs.btrfs and this works. I was using #gparted, which can’t create #encrypted file systems and so I created a blank (cleared) one, used #cryptsetup to create the #encryption on the device, and then created the brtrfs file system.
TIL: If you want to `cryptsetup open` a BitLocker encrypted drive using the recovery key (8 blocks of 6 digits each), make sure to enter it _with_ the dashes between each block of digits, else it won't be recognized.
hey neat, Linux 6.10 improved disk encryption performance on my system by ~42% https://gist.github.com/lucaswerkmeister/965d312193362ccfea6378006ce8cb81
Quick guide on encrypting an external drive. Assuming the drive is at /dev/sda with a /dev/sda1 partition
Set up encrypted volume (-y for verifying the password)
# cryptsetup luksFormat -y -v /dev/sda1
Unlock the encrypted volume and create a mapping to /dev/mapper/DUDE
# cryptsetup luksOpen /dev/sda1 DUDE
Create a file system
# mkfs.ext4 /dev/mapper/DUDE
Mount the partition
# mkdir /mnt/DUDE
# mount /dev/mapper/DUDE /mnt/DUDE
Mit Agent Shredder kannst du unterwegs verschlüsselte Backups von SD Karten erstellen und diese unwiederbringlich löschen.
tragbar offline off grid LUKS passt in die Hosentasche
@AgentShredder nutzt Open Source Software nach aktuellem Stand der Technik.
#Cryptsetup 2.7.0 Unveils Advanced #OPAL Hardware Encryption Support
https://linuxiac.com/cryptsetup-2-7-0-unveils-advanced-opal-hardware-encryption-support/
@campuscodi: A few notes and thoughts on CVE-2023-2283 in #libssh:
* libssh (libssh-4 in Debian and derivatives) ≠ libssh2 (libssh2-1 in Debian and derivatives)
* Obviously only servers using libssh to let users log in should be affected by any authentication bypass. Most libssh reverse dependencies though seem to be client-side applications.
The only potential libssh server-side reverse dependencies I so far found are:
* #cryptsetup-ssh
* #tmate-ssh-server
* maybe #cockpit-bridge
LUKS: Alte verschlüsselte Container unsicher? Ein Ratgeber für Updates
Angeblich konnte die französische Polizei einen LUKS-Container knacken. Kein Grund zur Panik, aber ein Anlass, Passwörter und LUKS-Parameter zu hinterfragen.
| R.I.P Natenom 