Return-Path: Received: from localhost (localhost [127.0.0.1]) by mail.saout.de (Postfix) with ESMTP id 67F4796BA for ; Mon, 10 Aug 2009 12:34:54 +0200 (CEST) Received: from mail.saout.de ([127.0.0.1]) by localhost (mail.saout.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8QK5ZX3R+4uu for ; Mon, 10 Aug 2009 12:34:49 +0200 (CEST) Received: from ciao.gmane.org (main.gmane.org [80.91.229.2]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mail.saout.de (Postfix) with ESMTPS for ; Mon, 10 Aug 2009 12:34:49 +0200 (CEST) Received: from list by ciao.gmane.org with local (Exim 4.43) id 1MaSDG-0003vG-Hn for dm-crypt@saout.de; Mon, 10 Aug 2009 10:34:46 +0000 Received: from 84-119-57-140.dynamic.xdsl-line.inode.at ([84.119.57.140]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 10 Aug 2009 10:34:46 +0000 Received: from gebi by 84-119-57-140.dynamic.xdsl-line.inode.at with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Mon, 10 Aug 2009 10:34:46 +0000 From: Michael Gebetsroither Date: Mon, 10 Aug 2009 12:34:37 +0200 Message-ID: References: <20090808132614.GA29656@fancy-poultry.org> <4A7D91A8.5080902@gmx.de> <20090808153635.GA31434@fancy-poultry.org> <20090810061245.GA9508@maude.comedia.it> <20090810071046.GA7462@fancy-poultry.org> <4A7FF65A.9010108@gmx.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: news Subject: Re: [dm-crypt] LUKS/dm-crypt vulnerable? List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de * Marc Ballarin wrote: > Only booting from a trustworthy medium would help and the same is true > in the case of truecrypt. No, even this does not help. As it's too easy to get code persistent in some location on the computer which is run on every boot. michael -- It's already too late!