• 0 Posts
  • 139 Comments
Joined 2 years ago
cake
Cake day: August 12th, 2024

help-circle


  • I very deliberately put good in quotes.

    His tenure consisted of economic recovery from the economic crisis of 2001, the start of EU membership negotiations, and the reduction of military influence on politics. In late 2012, his government began peace negotiations with the Kurdistan Workers Party (PKK) to end the Kurdish–Turkish conflict, negotiations which ended three years later. […] Erdoğan’s presidency has been marked by democratic backsliding and a shift towards authoritarianism.

    Mugabe’s administration expanded healthcare and education. […] Pursuing decolonisation, Mugabe emphasised the redistribution of land controlled by white farmers to landless blacks; […] He was praised as a revolutionary hero of the African liberation struggle who helped free Zimbabwe from British colonialism, imperialism, and white minority rule. Critics accused Mugabe of being a dictator responsible for economic mismanagement and widespread corruption and human rights abuses, including anti-white racism, crimes against humanity, and genocide.

    Often “good” just means “ended the (civil) war (by killing lot of the opposing side), thus bringing economic stability and growth while rebuilding infrastructure and (propagandised) education.”


  • On big problem is also this: many of the strongman started by being “good” before turning “evil”.

    They often bring actually change in a rigid and locked down situation. And often people have tangible benefits as a result. That’s why the autocrats often have broad support in the population. They actually helped them 20 years ago. People remember the good things of the past and ignore the terrible things of the present.

    I really don’t want to be in his position and I don’t know how to defend an election against Russian propaganda without severely limiting freedom of speech/press.


  • Everything that was luks encrypted is unrecoverable once you overwrite the luks header. Trying to guess the master key takes longer than the lifetime of the universe.

    Just make sure that is gone and you are good. If you deleted all partitions and installed another (unencrypted) OS on the drive there is a very good chance the luks headers are gone for good.




  • That is just factually incorrect. Many plants produce the exact molecules or proteins that are used as hormones in humans. Hormones do much much more than influence breast size. In fact most hormones are completely unrelated to gender and sex. Ever felt stressed? Hormones. Ever felt hungry? Hormones. Actually … ever felt anything at all? Hormones. And plants do the same. They also feel stressed and they use some of the same hormones in the process.






  • That is not the point of TPM only unlock. Tell me, can you access the files on a windows system that automatically unlocks bitlocker and then boots to the windows login screen? What can you read without a user password? If you try to boot a different OS and read the data from there, the bitlocker encrypted drive will not be automatically unlocked.

    Bitlocker TPM only mode is ment to protect against a stolen hard drive and attacks in which the whole laptop is accessed by attackers (like someone breaking into your hotel room while you are at breakfast). Now bitlocker is broken in TPM only mode and many vulnerabilities exist, but conceptually its purpose is not only to protect against a stolen hard drive.


  • To expand: both bitlocker and LUKS (what OP probably uses on Linux) can unlock without userinput from TPM or require a user password or use the TPM and a password. Its just the defaults are different. In all cases, the TPM/passwords are used to decrypt the Volume Master Key that is used to de/encrypt the actual disk. If you change your password you don’t have to reencrypt 2TB of hard drive and wait 20+h.

    With TPM only unlock, secure boot/verified boot is used to ensure the hard disk is accessed using the correct operating system and no meaningful changes have been made to the system since the last boot. With bitlocker, several vulnerabilities in bitlocker allow full decryption in TPM only mode because windows is fundamentally broken. So you should always use pin+TPM unlock.

    PS. about the encrypted user data: that is not part of bitlocker. It encrypts the whole drive and that’s it. DPAPI is a windows component that encrypts some user data with the user password. For example chrome cookies are saved in DPAPI so even an administrator can not read your cookies while you are not logged in to the system (if you log in they can read everything)