Comment on Do you encrypt your data drives?
h3ndrik@feddit.de 5 months agoSure. It’s just effort. I have to go fetch the power tools, fetch the drills, if I want to do it correctly also mount a vise or go fetch a piece of scrap wood and some clamps…
At work I’d additionally need 3 training courses to be allowed to operate the drill and visit the workshop. And it’ll still not be certified that the information is now gone.
AnUnusualRelic@lemmy.world 5 months ago
In an enterprise setting, it’s probably a bit of a hassle with everything having to follow some kind of process…
h3ndrik@feddit.de 5 months ago
Somehow they don’t trust the software developers with operating heavy machinery 😆
Anyways, I think we’re moving away from the topic… At work I didn’t encrypt harddisks anyways. They just put the servers into a special area in the datacenter that has a fence and a separate lock.
At home I just encrypt stuff so I don’t have to remember what I put where and handle things differently. Of course everything depends on the specific scenario and threat model. I have a bit of stuff archived on my server that isn’t around anymore, could be a copyright violation. I also have my complete life stored there, documents, finances, emails of a decade, pictures, backups of family members, passwords for emergency access to things. I also used to travel a lot with my laptop in the backpack and that can get stolen. At some point a long time ago I decided to encrypt my harddisks and stop worrying. Since at least 10 years there isn’t any speed penalty anymore and it takes like 20 seconds to set it up on Linux…
But I can also see why not everyone wants to do it this way.
AnUnusualRelic@lemmy.world 5 months ago
I’m still in the planning stage of my home network (we’re redoing the whole place so I’m doing a proper network) and TrueNas will be at the centre of it. So far, I’m not considering encryption (my laptops have /home encrypted though).
I’m not sure what the risk of a Disney raid on my server is. It could be a real thing, or not. It really depends on many things.
However, all in all, the lack of a proper solution for a quick server wipe beyond the usual thermite load, is problematic.
h3ndrik@feddit.de 5 months ago
Why don’t you consider encrypting your NAS, if I might ask? Inconvenience on boot? Because that’s one inconvenience I currently live with… After a power outage I have to fetch a keyboard and type in the password, since the mainboard doesn’t have remote-management and I’ve never set up an automatic way to transfer/fetch the encryption key…