this post was submitted on 13 Nov 2025
12 points (77.3% liked)

Linux

10174 readers
796 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago
MODERATORS
Ategon@programming.dev
anzo@programming.dev
dwraf_of_ignorance@programming.dev
12
Why call it full-disk encryption when the EFI partition has to be unencrypted? (programming.dev)
submitted 1 week ago by onlinepersona@programming.dev to c/linux@programming.dev
36 comments fedilink hide all child comments
 

Sounds like a misnomer to me.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] onlinepersona@programming.dev -3 points 6 days ago (2 children)

With that logic there's no need to even encrypt your partitions ๐Ÿคท

[โ€“] dgdft@lemmy.world 10 points 6 days ago

Absolutely not โ€” the skill level needed to tamper with a bashrc, pull credentials + keys, or generally hunt for sensitive info on an unencrypted disk is worlds apart from the skill level needed to modify an EFI binary.

[โ€“] spiffpitt@lemmy.world 7 points 6 days ago

security isn't real, just increasing deterrence for attackers.

if you can access something, they can access it, it's just a matter of effort needed to get there.