hard but during encryption his pc turned off for some reason and after boot when he gonna open hard drive he faced bad sector error. Is there any way to recovery data??
I doubt it. They should encrypt the partition devoted to user data only, right after backing it up. Encrypting the whole hard drive like this is shooting yourself in the foot.
So why it faced bad sector? We have password key but when we click on hard drive we faced bad sector
It was hard external drive
There's no difference
Because this is not something you can do for a moment and later on pick up where you left off
Umm, are saying FDE in general is bad or just this windows stuff?
I'm saying that it shouldn't be done carelessly because many things can go wrong, ranging from power failure to forgetting the password. And let's be honest here, what's the point of encrypting the entire HD, with the OS included, when what you want to be encrypted is just the used data? Encrypting everything seems like unnecessary suffering to me.
Because virtually every OS writes temporary data to disk and sometimes is weird and wonderful locations. Also leaving the SAM database (for Windows) shadow file (Linux) on an unencrypted partition/drive is just looking for trouble
> shouldn't be done carelessly Agreed. > what you want to be encrypted is just the used data Two exceptions come to mind. First, you might not want anyone to know e.g. what programs you have installed. Let's say you're investigated under suspicion of involvement in some hacking. It would do you no good if anyone can see that you have a program for the specific type of hacking and you installed it during the time frame of the attack. Second, you may want to use FDE to protect your binaries from tampering. If I have FDE, I know for a fact that without my key an attacker couldn't possibly backdoor my OS. Device mapper under Linux has support for integrity checking without encryption, but I have yet to see a distro that lets you install the system in this way.
Agreed. I wonder if doing so would be of any use for the average user with the bare minimum awareness of security though. I mean, unless they aren't an average user ofc.
Fair enough. The most common threat is a thief or somebody who doesn't like you much so just encrypting the data might be enough. Unless you piss off a Linux dev / admin with physical access to the device, then you have to worry about backdoors in OS 😅
Обсуждают сегодня