Remix.run Logo
▲ bubblethink 4 hours ago

That's a minor convenience to not type passphrases and a fairly high risk of you losing the backup key. Not to mention, the entirely separate problem of storing the backup key securely. It doesn't pass the xkcd "correct horse battery staple" test for me.

▲drdexebtjl 3 hours ago | parent | next [-]

Do you not have backups? Why do you need to transplant the SSD to a different laptop to access the data using the backup key?

The SSD is also at risk of dying, so you need the backups anyway.

▲rlpb 3 hours ago | parent | prev | next [-]

Fedora uses LUKS where your backup key can just be a regular passphrase. A key derivation function is used internally to help with mitigating brute force attacks.

▲lakeviewterrace 3 hours ago | parent | prev [-]

All your arguments amount to "i don't understand why smart cards/yubikeys/etc exist when you can just use passwords"

▲bubblethink 3 hours ago | parent [-]

No, yubikey in the fido/webauthn form protects against phishing/TOTP snooping and replay over the web. TPMs for luks don't. See the other thread about evil maid.