Credit to @ryanc@infosec.exchange

I just did the graphic

you are viewing a single comment's thread
view the rest of the comments
[–] 12 points 1 day ago (5 children)

I've seen so many setups where people encrypt their data but forget to encrypt their swap.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 6 points 1 day ago (4 children)

    what's the problem? it's not like you dump the entire contents of your system's ram to disk any time use hibernate /s

  • source
  • parent
  • hideshow 4 child comments
  • [–] 4 points 1 day ago (3 children)

    Even without hibernation, data in apps you have open will end up in the swap if your system is ever RAM-constrained.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 day ago (2 children)

    Generally it only happens to programs you keep running in the background and might not use for a long time that also don't have much background activity. For example password managers.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 day ago (1 child)

    It depends on what you set your swappiness to, too. I think Linux distros still have pretty aggressive defaults that swap more than they probably need to.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 15 hours ago

    I have taken a couple classes in Linux centric forensics and one of the things I often wandered about is if there is an easy way to add jitter or shift individual file blocks by a word (64 bits) or even half the size of a data block. Say every two hours shift up or down so attempts to read a mechanical hard drive would be chaotic.

  • source
  • parent