On 12-11-08 11:34 AM, Micah Lee wrote:
> ... get encrypted. When you're not encrypting your whole hard drive, "evil
> maid" style attacks become much easier. If someone gets physical access
> to your computer for just a couple minutes, they can boot to a live cd
> and replace your /usr/bin/ssh or /usr/bin/gpg with malicious versions.

If someone gets physical access to your computer, all is lost, because
they can replace the BIOS and/or the bootloader.  The other points you
make are valid.


--
Unsubscribe, change to digest, or change password at: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech

Reply via email to