The original cold boot paper was released in 2008 and they only demonstrated the attack on DDR2 memory [1]. A paper published in 2013 [2] discussed cold boot on modern hardware. "This study is based on 5 different…
More info on their relationship with Debian: https://tails.boum.org/contribute/relationship_with_upstream "For various reasons Tails tries to diverge by the smallest possible amount from its upstream projects, and…
OpenVPN defaults to tunneling over UDP, but optionally supports TCP. SSH is always over TCP. Here's a bit of info from the man page [1] for anyone who's curious: " OpenVPN is designed to operate optimally over UDP, but…
You can use LVM to make the swap partition inside the encrypted container. If you don't want to use LVM, you can just use a swap file on an encrypted partition (but this isn't supported with btrfs).
Speed isn't the only consideration. If you're using disk encryption, the only way to remove keys from RAM is to power off or hibernate. Preserving state between sessions with hibernation is much more convenient. Also,…
In this case it will just prompt you for for the recipient. This command is too verbose though. You can type: gpg -e file The output will be file.gpg. It will ask you for a recipient unless you have "default-recipient"…
The original cold boot paper was released in 2008 and they only demonstrated the attack on DDR2 memory [1]. A paper published in 2013 [2] discussed cold boot on modern hardware. "This study is based on 5 different…
More info on their relationship with Debian: https://tails.boum.org/contribute/relationship_with_upstream "For various reasons Tails tries to diverge by the smallest possible amount from its upstream projects, and…
OpenVPN defaults to tunneling over UDP, but optionally supports TCP. SSH is always over TCP. Here's a bit of info from the man page [1] for anyone who's curious: " OpenVPN is designed to operate optimally over UDP, but…
You can use LVM to make the swap partition inside the encrypted container. If you don't want to use LVM, you can just use a swap file on an encrypted partition (but this isn't supported with btrfs).
Speed isn't the only consideration. If you're using disk encryption, the only way to remove keys from RAM is to power off or hibernate. Preserving state between sessions with hibernation is much more convenient. Also,…
In this case it will just prompt you for for the recipient. This command is too verbose though. You can type: gpg -e file The output will be file.gpg. It will ask you for a recipient unless you have "default-recipient"…