3 comments

[ 3.2 ms ] story [ 17.1 ms ] thread
Article with detailed description, machine translated from Russian: https://translate.google.com/translate?sl=ru&tl=en&js=y&prev...

It says the OS had user's home directory encrypted, but not the whole filesystem.

For those who prefer video, here is what you can do if you forgot your or someone's password: https://www.youtube.com/watch?v=cGu5AFCQ1Uw

Also, I think this bug also deserves a name, but nothing comes to mind. "hddunlock" maybe?

Also, I think this bug also deserves a name, but nothing comes to mind. "hddunlock" maybe?

hddbleed?

With this it attack it should be possible to extract the keys and access the encrypted home partition. Disk encryption and TPS chips are supposed to mitigate physical attacks. Its worrying if Ubuntu doesn't care about that vector.