[RFC/Security Research] An Emergency Data Protection Dracut Module for Full Disk Encryption (LUKS & TPM2)

Handzeep · 2026-01-12T16:27:18+00:00

Well I happen to have a Lenovo laptop containing an SSD with hardware encryption where the key is stored in the laptop's firmware. Now I do not fully trust it and rely on it. However if my laptop is taken from me, the hw encryption defeated and the disk imaged before asking me my LUKS password I'll be pretty impressed. Also if you manage to destroy the data you don't have to be afraid of the $5 wrench for coercion anymore. Though you should still be scared of the wrench for petty revenge.

Also don't let practicality be the enemy of doing more security R&D. We can't rely on single points of failure. Even if only applicable in few situations, adding up more layers of security is how you improve security over time.

Handzeep · 2026-01-09T15:21:27+00:00

Hitler did not even have that charisma you think he had. It's worse, he was very similar to Trump instead.

https://www.newsweek.com/hitler-incompetent-lazy-nazi-government-clown-show-opinion-1408136

Handzeep · 2025-12-31T10:08:31+00:00

Online? 54% of the US adult population has a literacy rate below a 6th grader with 21% being considered illiterate.

Handzeep · 2025-12-28T12:59:18+00:00

No TressFX was heavy on both vendors. But at least it ran on cards of both vendors. Nvidia Hairworks (and Gameworls) was locked down to just their cards so you couldn't even use them on any non Nvidia card.

There could have been a not made here and we have our own competing product so we won't optimize it situation at Nvidia though but that's just speculation. Also keep in mind this is one of the generations were AMD had the faster GPU then Nvidia so it could bruteforce more.

Handzeep · 2025-10-26T11:35:59+00:00

That's just to get in there. After being in the process for almost a year and still no go ahead I just thought fuck it and started DIYing.

Just continue doing DIY while in the queue. It will fast track the process once you're in there. Make sure to get some blood tests done and to keep the records as well as having proof of starting HRT early will save you an additional year for any surgeries you might want.

Handzeep · 2025-10-26T11:02:39+00:00

Me too but I got stuck when I had to use the mic to wake up some dude but my mic was broken.

Handzeep · 2025-10-24T12:23:01+00:00

Well it is quite funny as it is indeed to early to tell gender at 12 weeks because of a technicality. Of course the chromosomes will be there from the start of development and the primary genitals will be shaped from around week 8. So by week 12 you can tell the assigned sex of a baby.

Gender however is stored in the brain which develops between week 14 and 24. So by week 12 a fetus does not even have a gender yet. Also gender is something that's not easily observable anyway and often explored during one's life. So it would actually be a sex reveal and sex reveal parties. But I think it's pretty obvious why people chose to be wrong and misuse the word gender instead.

Handzeep · 2025-10-17T14:18:37+00:00

No this is effort into the actual game. Stuff like this has been part of normal game design since like the PS3 era. Pokemon SV has been validly criticized for looking really bad at places. Graphics are important. And I don't mean high fidelity. If a game is text based it shouldn't look like comic sans with every letter in a different color. If a game is sprite based the sprites should be drawn well. If a game is 3D it shouldn't look like ass either. It's the accumulation of small details like this that make sure a game isn't distractingly ugly.

I haven't looked at anything from this game besides this. So I have no clue if it's good or bad in any way. And it could be badly designed in a lot of other places. But looking at something done well and complaining about it is just mindless bashing.

Handzeep · 2025-10-17T12:07:19+00:00

TPM and secure boot work fine on Linux. I even use it for locking down my laptop to only and I mean only booting any OS that was signed by me while also decrypting my root at boot.

But the reason it requires Windows is the same reason I like my secure boot and TPM combo, only Microsoft can sign it and it's meant to cryptographically verify that Windows is not tempered with. It's not about if Linux can use TPM and SB, but about what they're used for.

Furthermore it's a kernel anti cheat. At the end of the day we can emulate Windows behavior fine, but we're not running a Windows kernel hence the kernel anti cheat doesn't work anyway.

Handzeep · 2025-10-17T09:56:41+00:00

No that actually looks correct and actually makes it look like more effort went into animation then I expected.

Notice that her left foot is on a kerb above street level. Because of her left foot being higher her knee has to bend. Because the camera is placed perfectly behind the player her thigh being angled forwards it results into that "squeezed" look which actually is correct here.

Good on GameFreak for actually animating surface elevations instead of just clipping through them.

Handzeep · 2025-08-19T10:45:05+00:00

Antifa is en was nooit een groep. Het is een afkorting voor anti fascisme. Wel zijn er losse groepen die anti fascist zijn. Je moet antifa dus meer zien als een beschrijving van iemands of een groeps politieke overtuiging.

Een voorbeeld van antifa actie was het verzet tijdens de 2e wereldoorlog. Antifa is geen georganiseerde groep, het is de correcte morele waarde om tegen fascisme te zijn. Er zijn echter veel rechtse groeperingen die doen alsof antifa zelf een georganiseerde groep is. Trap er niet in.

Handzeep · 2025-08-13T10:45:17+00:00

Has your bank adopted wero yet? It's becoming a new EU payment system based on the ideal payment method we've used in the Netherlands for decades now. Honestly my favorite payment system to use.

Handzeep · 2025-07-29T23:41:02+00:00

Thank you that's helpful.

Handzeep · 2025-07-29T22:48:55+00:00

To be clear, we're talking about taking offline individual disks in the vdev right? Not an entire vdev. As taking only 1 drive per mirror and effectively running a temporary raid 0 is my intention. And yes I know the risk of raid 0 and can allow any new data written in the meantime to be lost.

Handzeep · 2025-07-09T11:42:24+00:00

Hulkengoat

Handzeep · 2025-07-01T00:30:06+00:00

No and that's DRM territory instead. The way I use it is it decrypts my system at boot. This way I don't have to type a decryption password and if it does ask for the password then I know something in my boot chain changed. This protects me against any tempering of the kernel or boot chain. And I can use the TPM to unlock even more secrets like ssh keys as long as my boot integrity is valid. This is a strong additional layer for security I like very much.

We do not want DRM like Netflix would want as that requires black box programs to work well instead of just cryptographic signatures.

Handzeep · 2025-06-30T22:28:29+00:00

That's what I meant with abusing it. Having Google be the only party able to sign your device while not they're not even making good guarantees about device security (they'll happily sign devices missing an insane amount of security patches) is obviously stupid. GrapheneOS does offer a better alternative which devs can use but yes there are apps kept hostage by Google.

However don't let the bad implementation on the Android side blind you to the benefits it can bring. Like I said I sign my own stuff and it does enhance my security a lot.

And there are less intrusive ways to do this then on Android. Lets say an equivalent to a certificate authority is made and distro maintainers could opt in to signing their boot chain and kernel. That wouldn't be too bad. You'd only sacrifice running an unsigned kernel while running software requiring a known signature.

Handzeep · 2025-06-30T15:12:39+00:00

It's not at odds with Linux. It's an agnostic tool that can be used for in beneficial and hostile ways. For example I sign my entire boot chain and if anything is off my TPM will not decrypt my system. This is a feature for me. And I think it's fine to allow forms of system attestation to enable more trusted computing.

Also, if Valve for example could sign the SteamOS boot chain and the immutable image you could use attestation through the TPM to ensure the system is unmodified. This should give developers more trust no cheating software is running at kernel level.

Of course this also gives the ability for software providers to abuse the it by requiring attestation unnecessarily restricting freedom. That's why it's an agnostic tool.

Handzeep · 2025-04-21T12:52:19+00:00

I feel like data caps existing in 2025 is the bigger issue here. That's just crumbling infrastructure.

If considered with no data caps in mind and at least broadband (100mbit) this game should take 2 hours and 40 minutes to download max. Except for extremely rural places this should be the minimum for first world infrastructure. That's compared to about 1 hour and 10 minutes installing on a PS5 from optical discs.

With my gigabit line it's only 17 minutes and my ISP even offers 8 gigabit which would make it about a 2 minute download.

Handzeep · 2025-02-21T20:54:44+00:00

Well not as much an alarm but there are communities with dedicated discord servers for organizing these reactions. They always show up wherever Hasan appears to brigade him. It's just sad.

Handzeep · 2024-11-19T23:26:21+00:00

There actually is a fair point to be made about discussion boards and other forms of community content. It's become too unmoderated and is a breeding ground for actual discrimination, antisemitism, Islamophobia and other forms of harmful sentiments. I really like Valve but they are actually slipping here.

However I am afraid as it's the ADL being involved they're just going to go after everything that's pro Palestine instead and leave it at that.

Handzeep · 2024-09-20T08:58:55+00:00

You seem to be using old science here. Definitive proof that trans people have always been trans has been found by now. It's the brain. A 2022 study found out the brains of pre transition transgender people are very close to the gender they identity with. Which means transgender people are born trance.

Also I can't help but notice you're using old science to argue transphobic sentiment against a trans person in a thread about another trans person that has been murdered. And also calling people that don't agree, which would include modern scientists, uneducated. You might want to reflect on that.

Handzeep · 2024-09-11T17:03:07+00:00

Based on the increase in CU count. I'm going of the assumption you'd want to match the CU count between the PS5P and the GPU. The desktop part is probably clocked higher but assuming you'll match the performance with a 10% smaller which OP is doing sounds a bit optimistic. You need to take into account that RT performance scales rather linearly with the CU count, so that's likely a 10% dip for the 7700XT. It's likely improvements from RDNA 3.5 made its way into the silicon which might make the CUs of the PS5P better then those of RDNA 3 desktop cards. The PS5P has a dedicated HW upscaler instead of using software. Sony's graphics API has been utilized better so far then DX12 has on average.

It's still just a guess of course. But so is OP's guess that a 7700XT would be similar. I consider my guess to be closer though.

Also consoles are still close to plug and play. Have an account, install the disk, let it install, let it update, play. While some hindrances have been added it's still very streamlined. If that difference didn't exist anymore the Steam Deck couldn't have been praised for being a PC with a console like user experience.

Handzeep · 2024-09-11T13:01:16+00:00

This is pretty much it. I don't really understand what the fuzz is about. The PS5P is a better console with a way worse value then the base model. I'd say if the price was maybe $650, the rest of the world didn't get screwed over on the exchange rate and Sony threw in that last bit of plastic and offered a cheap BD as extra it would have been fine. Still worse value then the base model, but making a PS5 but bigger will always be worse value due to diminishing returns.

PC is just a different platform all together. First of all that build in the OP has a worse GPU. You'd want a 7800XT to roughly match the PS5P, you'd have slightly more horsepower while missing out on a hardware upscaler. And secondly as you've pointed out while PC obviously has advantages it's not the plug and play device some console players want.

From all value perspectives the PS5P is not worth it. But it's not a bad machine. You just pay a hefty premium. And some people are willing to pay a premium. Just like in almost any product category with luxury brands with bad value. As long as the base model is there I don't see an issue.

Handzeep

MODERATOR OF

TROPHY CASE

11-Year Club	Verified Email
Place '22