I was a sales engineer for a company that sold software that managed the Opal SED's. We knew, and told, customers that Sleep mode completely bypassed the drive authentication. Our software disabled Sleep mode in Windows and forced Hibernate instead because of this. It's been 4-5 years at this point so who knows if that's still the case. My point is though this is less "discovery" as much as a known limitation that anyone doing a POC or asking good questions in a demo would have know about.
I've seen this eluded to earlier in the thread, but personally I think it worth looking at HD's that support native FDE instead of a software solution. You don't have the same OS limitations, performance hits, or potential incompatibilities. Nearly all drive manufacturers have announced some sort of native encryption and some are already shipping. We are using Seagate drives today in our Dell systems and its incredibly painless.
I work for a non-profit group here in Michigan, The Geek Group, that is always looking for donations. We run quite a few classes to teach kids about computers and keeping a steady flow of systems to have them rip apart and learn tends to be a strugle.
"The Geek Group is an American based, 501-c-3, non-profit organization with members from all over the world who have been brought together for one simple purpose, to have fun while learning and sharing knowledge for a positive impact on mankind.
We educate the public with fun and interesting science projects. From our Tesla Coil to Geekmobile Unit 3, our projects catch the eye while demonstrating scientific concepts in a fun and interesting manner. In addition to this, we also conduct classes on various areas of computer science, mechanical and electrical engineering, high voltage physics and more.
The Group also offers services to the public. Current on-line services include computer repair and web design. We are also capable of security advising, prototypical design, and software development. We also hold private demonstrations of our projects for schools and other groups.
To learn more about The Geek Group, please feel feel to browse the site. We promise to keep you entertained. Because the Geek shall inherit the Earth!"
Slashdot Mirror
I was a sales engineer for a company that sold software that managed the Opal SED's. We knew, and told, customers that Sleep mode completely bypassed the drive authentication. Our software disabled Sleep mode in Windows and forced Hibernate instead because of this. It's been 4-5 years at this point so who knows if that's still the case. My point is though this is less "discovery" as much as a known limitation that anyone doing a POC or asking good questions in a demo would have know about.
I've seen this eluded to earlier in the thread, but personally I think it worth looking at HD's that support native FDE instead of a software solution. You don't have the same OS limitations, performance hits, or potential incompatibilities. Nearly all drive manufacturers have announced some sort of native encryption and some are already shipping. We are using Seagate drives today in our Dell systems and its incredibly painless.
http://www.seagate.com/www/en-us/products/laptops/momentus/momentus_5400_fde.2/
At least a patch was available before the worm hit.
Well....next time it will do something really bad, I swear!
I can't help myself...
That is definately NOT the case here. They were alerted well before this information was ever released.
Apache has revised there posting to say that the ISS patch acctually does work.
I work for a non-profit group here in Michigan, The Geek Group, that is always looking for donations. We run quite a few classes to teach kids about computers and keeping a steady flow of systems to have them rip apart and learn tends to be a strugle.
akaylor@thegeekgroup.org
http://www.thegeekgroup.org
"The Geek Group is an American based, 501-c-3, non-profit organization with members from all over the world who have been brought together for one simple purpose, to have fun while learning and sharing knowledge for a positive impact on mankind.
We educate the public with fun and interesting science projects. From our Tesla Coil to Geekmobile Unit 3, our projects catch the eye while demonstrating scientific concepts in a fun and interesting manner. In addition to this, we also conduct classes on various areas of computer science, mechanical and electrical engineering, high voltage physics and more.
The Group also offers services to the public. Current on-line services include computer repair and web design. We are also capable of security advising, prototypical design, and software development. We also hold private demonstrations of our projects for schools and other groups.
To learn more about The Geek Group, please feel feel to browse the site. We promise to keep you entertained. Because the Geek shall inherit the Earth!"