spiralofhope [24.11.2018 22:17]:

>> Drive encryption has advantages in terms of keeping secrets and
>> foiling the evil-maid scenario.
> I always thought an evil maid could fiddle with the bootloader/etc or
> root to wholly compromise the system somewhat easily, and then it's
> just a matter of waiting for the user to use a key or passphrase. It's
> two-step, but still straightforward.
>
> Maybe there's another term for this variation?

Could you have /boot on a USB stick that you carry with you when not at
the computer?
--
Hilsen Harald