#geli — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #geli, aggregated by home.social.
-
Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf
https://blog.amberwolf.com/blog/2026/august/thin-client-thin-crypto-overview/
"… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.
The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"
-
Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf
https://blog.amberwolf.com/blog/2026/august/thin-client-thin-crypto-overview/
"… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.
The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"
-
Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf
https://blog.amberwolf.com/blog/2026/august/thin-client-thin-crypto-overview/
"… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.
The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"
-
Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf
https://blog.amberwolf.com/blog/2026/august/thin-client-thin-crypto-overview/
"… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.
The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"
-
Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf
https://blog.amberwolf.com/blog/2026/august/thin-client-thin-crypto-overview/
"… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.
The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"
-
It's 2026, and we still don't know what the ELI in GELI stands for 😂
I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄
cc: @RadioAzureus
-
It's 2026, and we still don't know what the ELI in GELI stands for 😂
I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄
cc: @RadioAzureus
-
It's 2026, and we still don't know what the ELI in GELI stands for 😂
I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄
cc: @RadioAzureus
-
It's 2026, and we still don't know what the ELI in GELI stands for 😂
I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄
cc: @RadioAzureus
-
It's 2026, and we still don't know what the ELI in GELI stands for 😂
I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄
cc: @RadioAzureus
-
New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.
https://vermaden.wordpress.com/2026/06/17/expand-geli-encrypted-bhyve-vm-zfs-disk/
-
New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.
https://vermaden.wordpress.com/2026/06/17/expand-geli-encrypted-bhyve-vm-zfs-disk/
-
New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.
https://vermaden.wordpress.com/2026/06/17/expand-geli-encrypted-bhyve-vm-zfs-disk/
-
New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.
https://vermaden.wordpress.com/2026/06/17/expand-geli-encrypted-bhyve-vm-zfs-disk/
-
New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.
https://vermaden.wordpress.com/2026/06/17/expand-geli-encrypted-bhyve-vm-zfs-disk/
-
https://www.europesays.com/africa/152551/ Ciidamada Kenya oo fashiliyey isku day Al-Shabaab ay ku geli lahaayeen xadka Mandera #AlShabaab #ay #ciidamada #day #fashiliyey #geli #isku #Kenya #ku #lahaayeen #Mandera #oo #Xadka
-
GELI suspend/resume fails on non-rootfs partition …
<https://www.reddit.com/r/freebsd/comments/1pr7l2k/geli_suspendresume_fails_on_nonrootfs_partition/> | <https://forums.freebsd.org/threads/geli-suspend-resume-fails-on-non-rootfs-partition-destroys-data.100860/>
― intriguing
― help, please (in either Reddit, or the Forums, if you can).
-
GELI suspend/resume fails on non-rootfs partition …
<https://www.reddit.com/r/freebsd/comments/1pr7l2k/geli_suspendresume_fails_on_nonrootfs_partition/> | <https://forums.freebsd.org/threads/geli-suspend-resume-fails-on-non-rootfs-partition-destroys-data.100860/>
― intriguing
― help, please (in either Reddit, or the Forums, if you can).
-
GELI suspend/resume fails on non-rootfs partition …
<https://www.reddit.com/r/freebsd/comments/1pr7l2k/geli_suspendresume_fails_on_nonrootfs_partition/> | <https://forums.freebsd.org/threads/geli-suspend-resume-fails-on-non-rootfs-partition-destroys-data.100860/>
― intriguing
― help, please (in either Reddit, or the Forums, if you can).
-
GELI suspend/resume fails on non-rootfs partition …
<https://www.reddit.com/r/freebsd/comments/1pr7l2k/geli_suspendresume_fails_on_nonrootfs_partition/> | <https://forums.freebsd.org/threads/geli-suspend-resume-fails-on-non-rootfs-partition-destroys-data.100860/>
― intriguing
― help, please (in either Reddit, or the Forums, if you can).
-
GELI suspend/resume fails on non-rootfs partition …
<https://www.reddit.com/r/freebsd/comments/1pr7l2k/geli_suspendresume_fails_on_nonrootfs_partition/> | <https://forums.freebsd.org/threads/geli-suspend-resume-fails-on-non-rootfs-partition-destroys-data.100860/>
― intriguing
― help, please (in either Reddit, or the Forums, if you can).
-
... Wondering if Adrian possesses the forbidden knowledge...
... What in the heck "Geom ELI" actually means! 😂
(Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)
-
... Wondering if Adrian possesses the forbidden knowledge...
... What in the heck "Geom ELI" actually means! 😂
(Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)
-
... Wondering if Adrian possesses the forbidden knowledge...
... What in the heck "Geom ELI" actually means! 😂
(Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)
-
... Wondering if Adrian possesses the forbidden knowledge...
... What in the heck "Geom ELI" actually means! 😂
(Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)
-
... Wondering if Adrian possesses the forbidden knowledge...
... What in the heck "Geom ELI" actually means! 😂
(Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)
-
Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.
-
Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.
-
Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.
-
Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.
-
Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.
-
@nixCraft nearly all suitably encrypted. No FDE.
OpenZFS encryption for:
* the sensitive part of a mobile hard disk drive
* three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.
GELI for 16 G swap.
GELI for 915 G /
tmpfs for /tmp/
<https://github.com/openzfs/zfs/issues/10256>
「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」
geli(8) <https://man.freebsd.org/cgi/man.cgi?query=geli&sektion=8&manpath=freebsd-release> – automatically configured when FreeBSD was installed.
tmpfs(4) <https://man.freebsd.org/cgi/man.cgi?query=tmpfs&sektion=4&manpath=freebsd-current> (FreeBSD 15.0-CURRENT)
#FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI
-
@nixCraft nearly all suitably encrypted. No FDE.
OpenZFS encryption for:
* the sensitive part of a mobile hard disk drive
* three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.
GELI for 16 G swap.
GELI for 915 G /
tmpfs for /tmp/
<https://github.com/openzfs/zfs/issues/10256>
「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」
geli(8) <https://man.freebsd.org/cgi/man.cgi?query=geli&sektion=8&manpath=freebsd-release> – automatically configured when FreeBSD was installed.
tmpfs(4) <https://man.freebsd.org/cgi/man.cgi?query=tmpfs&sektion=4&manpath=freebsd-current> (FreeBSD 15.0-CURRENT)
#FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI
-
@nixCraft nearly all suitably encrypted. No FDE.
OpenZFS encryption for:
* the sensitive part of a mobile hard disk drive
* three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.
GELI for 16 G swap.
GELI for 915 G /
tmpfs for /tmp/
<https://github.com/openzfs/zfs/issues/10256>
「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」
geli(8) <https://man.freebsd.org/cgi/man.cgi?query=geli&sektion=8&manpath=freebsd-release> – automatically configured when FreeBSD was installed.
tmpfs(4) <https://man.freebsd.org/cgi/man.cgi?query=tmpfs&sektion=4&manpath=freebsd-current> (FreeBSD 15.0-CURRENT)
#FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI
-
@nixCraft nearly all suitably encrypted. No FDE.
OpenZFS encryption for:
* the sensitive part of a mobile hard disk drive
* three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.
GELI for 16 G swap.
GELI for 915 G /
tmpfs for /tmp/
<https://github.com/openzfs/zfs/issues/10256>
「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」
geli(8) <https://man.freebsd.org/cgi/man.cgi?query=geli&sektion=8&manpath=freebsd-release> – automatically configured when FreeBSD was installed.
tmpfs(4) <https://man.freebsd.org/cgi/man.cgi?query=tmpfs&sektion=4&manpath=freebsd-current> (FreeBSD 15.0-CURRENT)
#FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI
-
@nixCraft nearly all suitably encrypted. No FDE.
OpenZFS encryption for:
* the sensitive part of a mobile hard disk drive
* three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.
GELI for 16 G swap.
GELI for 915 G /
tmpfs for /tmp/
<https://github.com/openzfs/zfs/issues/10256>
「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」
geli(8) <https://man.freebsd.org/cgi/man.cgi?query=geli&sektion=8&manpath=freebsd-release> – automatically configured when FreeBSD was installed.
tmpfs(4) <https://man.freebsd.org/cgi/man.cgi?query=tmpfs&sektion=4&manpath=freebsd-current> (FreeBSD 15.0-CURRENT)
#FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI
-
#NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.
*It stands for "Geom ELI."
As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆 -
#NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.
*It stands for "Geom ELI."
As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆 -
#NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.
*It stands for "Geom ELI."
As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆 -
#NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.
*It stands for "Geom ELI."
As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆 -
#NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.
*It stands for "Geom ELI."
As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆 -
Product Review: Attack on Titan Makeup Collection Vol 1
Hang out w/honorary Crusader, Geli as she shows us the new Attack on Titan collaboration by Game Beauty and Kdoansha, via the Attack on Titan Makeup Collection Vol. 1. Tune in to peep the colorful packlagig and product! What does Geli think? Press play and let's find out!...
https://comiccrusaders.com/product-review-attack-on-titan-makeup-collection-vol-1/
#kodansha #game beauty #make-up #attack on titan #collection #geli #hush nail bar -
Product Review: Attack on Titan Makeup Collection Vol 1
Hang out w/honorary Crusader, Geli as she shows us the new Attack on Titan collaboration by Game Beauty and Kdoansha, via the Attack on Titan Makeup Collection Vol. 1. Tune in to peep the colorful packlagig and product! What does Geli think? Press play and let's find out!...
https://comiccrusaders.com/product-review-attack-on-titan-makeup-collection-vol-1/
#kodansha #game beauty #make-up #attack on titan #collection #geli #hush nail bar -
@tehpeh of <https://forums.freebsd.org/threads/geli-zfs-vs-zfs-native-encryption-performance.90970/> fame!
GELI+ZFS vs ZFS native encryption performance
-
@tehpeh of <https://forums.freebsd.org/threads/geli-zfs-vs-zfs-native-encryption-performance.90970/> fame!
GELI+ZFS vs ZFS native encryption performance
-
@tehpeh of <https://forums.freebsd.org/threads/geli-zfs-vs-zfs-native-encryption-performance.90970/> fame!
GELI+ZFS vs ZFS native encryption performance
-
@tehpeh of <https://forums.freebsd.org/threads/geli-zfs-vs-zfs-native-encryption-performance.90970/> fame!
GELI+ZFS vs ZFS native encryption performance
-
@tehpeh of <https://forums.freebsd.org/threads/geli-zfs-vs-zfs-native-encryption-performance.90970/> fame!
GELI+ZFS vs ZFS native encryption performance
-
OpenZFS Native Encryption
https://friendica.ambag.es/display/e0590d38-6865-85a7-59b7-ab5071780338
-
OpenZFS Native Encryption
https://friendica.ambag.es/display/e0590d38-6865-85a7-59b7-ab5071780338