[ Thanks to An Anonymous
Reader for this link. ]
“Full disk encryption is becoming a very popular method
of protecting ones self from data theft nowadays, especially among
linux users. What someone might not know is that setting up secure
full disk encryption isn’t as easy as selecting it from a linux
installer or choosing the option in some software program. If you
use full disk encryption, you could be, and most likely are,
vunerable to a multitude of attacks that could render your efforts
useless. Your probably at risk if:* Your kernel isnt encrypted and is on your local drive (the
standard option for most ‘full disk encryption’ solutions)
* You have a firewire port
* You leave your computer unattended at any time its on, or
directly after its been shut down“This tutorial will show you how these are threats and how to
deal with each one of them. I will explain how to solve these
problems only on linux, but it should be adaptable to any *nix
OS.”