home.social

#geli — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #geli, aggregated by home.social.

fetched live
  1. Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf

    blog.amberwolf.com/blog/2026/a

    "… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.

    The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"

    #FreeBSD #GELI #HP #Dell #TPM #IGEL #PCR #KDF

  2. Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf

    blog.amberwolf.com/blog/2026/a

    "… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.

    The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"

    #FreeBSD #GELI #HP #Dell #TPM #IGEL #PCR #KDF

  3. Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf

    blog.amberwolf.com/blog/2026/a

    "… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.

    The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"

    #FreeBSD #GELI #HP #Dell #TPM #IGEL #PCR #KDF

  4. Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf

    blog.amberwolf.com/blog/2026/a

    "… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.

    The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"

    #FreeBSD #GELI #HP #Dell #TPM #IGEL #PCR #KDF

  5. Thin Client? Thin Crypto: An overview. ― Darren McDonald | AmberWolf

    blog.amberwolf.com/blog/2026/a

    "… Back in February 2025 I found a simple bug, a thin client operating system that saved its crash dumps to the disk unencrypted. Shocked by what I saw, I started looking deeper and found a very suspicious looking Key Derivation Function (KDF) protecting the disk encryption. I pulled on that thread for 18 months, and ended up finding a pile of bugs big enough that it got me a speaking slot at DEF CON 34 main track. This blog post is an overview of what happened, and where it leaves thin client full disk encryption in general.

    The short version of what I discovered is that every one of the three vendors that dominate the thin-client market, HP, Dell and IGEL, shipped full disk encryption you can defeat. As of early 2026 that was true across all three at once. The complexity of these attacks was fairly low, not at all what the phrase “TPM attack” usually conjures. No bus-sniffing, no glitching, no cryptanalysis. It was mostly reading bash scripts and using a USB stick. …"

    #FreeBSD #GELI #HP #Dell #TPM #IGEL #PCR #KDF

  6. @vermaden

    It's 2026, and we still don't know what the ELI in GELI stands for 😂

    I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄

    cc: @RadioAzureus

    #FreeBSD #GELI

  7. @vermaden

    It's 2026, and we still don't know what the ELI in GELI stands for 😂

    I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄

    cc: @RadioAzureus

    #FreeBSD #GELI

  8. @vermaden

    It's 2026, and we still don't know what the ELI in GELI stands for 😂

    I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄

    cc: @RadioAzureus

    #FreeBSD #GELI

  9. @vermaden

    It's 2026, and we still don't know what the ELI in GELI stands for 😂

    I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄

    cc: @RadioAzureus

    #FreeBSD #GELI

  10. @vermaden

    It's 2026, and we still don't know what the ELI in GELI stands for 😂

    I've emailed the author. He was very cordial, but kept his cards close to his chest. 😄

    cc: @RadioAzureus

    #FreeBSD #GELI

  11. New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.

    vermaden.wordpress.com/2026/06

    #verblog #freebsd #zfs #openzfs #resize #geli #bhyve #vm

  12. New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.

    vermaden.wordpress.com/2026/06

    #verblog #freebsd #zfs #openzfs #resize #geli #bhyve #vm

  13. New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.

    vermaden.wordpress.com/2026/06

    #verblog #freebsd #zfs #openzfs #resize #geli #bhyve #vm

  14. New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.

    vermaden.wordpress.com/2026/06

    #verblog #freebsd #zfs #openzfs #resize #geli #bhyve #vm

  15. New 𝗘𝘅𝗽𝗮𝗻𝗱 𝗚𝗘𝗟𝗜 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗲𝗱 𝗕𝗵𝘆𝘃𝗲 𝗩𝗠 𝗭𝗙𝗦 𝗗𝗶𝘀𝗸 [Expand GELI Encrypted Bhyve VM ZFS Disk] article on vermaden.wordpress.com.

    vermaden.wordpress.com/2026/06

    #verblog #freebsd #zfs #openzfs #resize #geli #bhyve #vm

  16. @alcinnz

    ... Wondering if Adrian possesses the forbidden knowledge...

    ... What in the heck "Geom ELI" actually means! 😂

    (Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)

    #BSD #GELI

  17. @alcinnz

    ... Wondering if Adrian possesses the forbidden knowledge...

    ... What in the heck "Geom ELI" actually means! 😂

    (Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)

    #BSD #GELI

  18. @alcinnz

    ... Wondering if Adrian possesses the forbidden knowledge...

    ... What in the heck "Geom ELI" actually means! 😂

    (Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)

    #BSD #GELI

  19. @alcinnz

    ... Wondering if Adrian possesses the forbidden knowledge...

    ... What in the heck "Geom ELI" actually means! 😂

    (Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)

    #BSD #GELI

  20. @alcinnz

    ... Wondering if Adrian possesses the forbidden knowledge...

    ... What in the heck "Geom ELI" actually means! 😂

    (Yes, I have emailed the author. He was very affable, and quite entertained by my query, but didn't divulge the secret!)

    #BSD #GELI

  21. Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.

    #FreeBSD #GELI

  22. Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.

    #FreeBSD #GELI

  23. Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.

    #FreeBSD #GELI

  24. Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.

    #FreeBSD #GELI

  25. Just ran into a good reason to use labels for your geli partitions. Years ago, when I replaced a drive, I did a geli init on it, and it was ada11 at the time. After a while I moved it's location so it became another ada. But the issue is that the old geli backup still has the name ada11 despite that device not existing. It also now means that I don't know what drive ada11 corresponds to if I do need to use it for a restore.

    #FreeBSD #GELI

  26. @nixCraft nearly all suitably encrypted. No FDE.

    OpenZFS encryption for:

    * the sensitive part of a mobile hard disk drive

    * three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.

    GELI for 16 G swap.

    GELI for 915 G /

    tmpfs for /tmp/

    <github.com/openzfs/zfs/issues/>

    「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」

    geli(8) <man.freebsd.org/cgi/man.cgi?qu> – automatically configured when FreeBSD was installed.

    tmpfs(4) <man.freebsd.org/cgi/man.cgi?qu> (FreeBSD 15.0-CURRENT)

    #FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI

  27. @nixCraft nearly all suitably encrypted. No FDE.

    OpenZFS encryption for:

    * the sensitive part of a mobile hard disk drive

    * three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.

    GELI for 16 G swap.

    GELI for 915 G /

    tmpfs for /tmp/

    <github.com/openzfs/zfs/issues/>

    「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」

    geli(8) <man.freebsd.org/cgi/man.cgi?qu> – automatically configured when FreeBSD was installed.

    tmpfs(4) <man.freebsd.org/cgi/man.cgi?qu> (FreeBSD 15.0-CURRENT)

    #FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI

  28. @nixCraft nearly all suitably encrypted. No FDE.

    OpenZFS encryption for:

    * the sensitive part of a mobile hard disk drive

    * three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.

    GELI for 16 G swap.

    GELI for 915 G /

    tmpfs for /tmp/

    <github.com/openzfs/zfs/issues/>

    「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」

    geli(8) <man.freebsd.org/cgi/man.cgi?qu> – automatically configured when FreeBSD was installed.

    tmpfs(4) <man.freebsd.org/cgi/man.cgi?qu> (FreeBSD 15.0-CURRENT)

    #FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI

  29. @nixCraft nearly all suitably encrypted. No FDE.

    OpenZFS encryption for:

    * the sensitive part of a mobile hard disk drive

    * three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.

    GELI for 16 G swap.

    GELI for 915 G /

    tmpfs for /tmp/

    <github.com/openzfs/zfs/issues/>

    「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」

    geli(8) <man.freebsd.org/cgi/man.cgi?qu> – automatically configured when FreeBSD was installed.

    tmpfs(4) <man.freebsd.org/cgi/man.cgi?qu> (FreeBSD 15.0-CURRENT)

    #FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI

  30. @nixCraft nearly all suitably encrypted. No FDE.

    OpenZFS encryption for:

    * the sensitive part of a mobile hard disk drive

    * three low-spec USB memory sticks that add around 145 GiB persistent removable L2ARC to a circa 2014 HP ZBook with 32 G memory and a ~1 TB internal HDD.

    GELI for 16 G swap.

    GELI for 915 G /

    tmpfs for /tmp/

    <github.com/openzfs/zfs/issues/>

    「… blocks in the L2ARC have the exact same on-disk representation as they do in the main pool. …」

    geli(8) <man.freebsd.org/cgi/man.cgi?qu> – automatically configured when FreeBSD was installed.

    tmpfs(4) <man.freebsd.org/cgi/man.cgi?qu> (FreeBSD 15.0-CURRENT)

    #FreeBSD #L2ARC #ZFS #OpenZFS #encryption #USB #memorystick #flash #flashdrive #mobile #GELI

  31. @stu

    #NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.

    *It stands for "Geom ELI."
    As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆

    #FreeBSD #GELI

  32. @stu

    is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* , even on persistent USB.

    *It stands for "Geom ELI."
    As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆

  33. @stu

    #NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.

    *It stands for "Geom ELI."
    As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆

    #FreeBSD #GELI

  34. @stu

    #NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.

    *It stands for "Geom ELI."
    As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆

    #FreeBSD #GELI

  35. @stu

    #NomadBSD is nice! Solid xfce desktop, persistent USB session (or desktop installer), and even GELI* #FullDiskEncryption, even on persistent USB.

    *It stands for "Geom ELI."
    As far as i can tell, only one person on the earth knows what ELI stands for. Yes, the author. Yes, I have emailed him., No, he's not telling. No, it doesn't stand for Encryption Layer Interface. Yes, I asked. 😆

    #FreeBSD #GELI

  36. Product Review: Attack on Titan Makeup Collection Vol 1
    Hang out w/honorary Crusader, Geli as she shows us the new Attack on Titan collaboration by Game Beauty and Kdoansha, via the Attack on Titan Makeup Collection Vol. 1. Tune in to peep the colorful packlagig and product! What does Geli think? Press play and let's find out!...
    comiccrusaders.com/product-rev
    #kodansha #game beauty #make-up #attack on titan #collection #geli #hush nail bar

  37. Product Review: Attack on Titan Makeup Collection Vol 1
    Hang out w/honorary Crusader, Geli as she shows us the new Attack on Titan collaboration by Game Beauty and Kdoansha, via the Attack on Titan Makeup Collection Vol. 1. Tune in to peep the colorful packlagig and product! What does Geli think? Press play and let's find out!...
    comiccrusaders.com/product-rev
    #kodansha #game beauty #make-up #attack on titan #collection #geli #hush nail bar