Hacker News Reader

Anyone noticed that the File Vault password also seems to leak? https://www.flickr.com/photos/osr/16139512701/lightbox

So basically a File Vault disk encryption is useless? Any clarification would be welcome :)

From the FAQ: Can it actually decrypt FileVault? Thunderstrike can not directly decrypt FileVault keys, but it does record the password the user types in to decrypt an encrypted boot volume and could use other data exfiltration techniques to send the key to the attacker's system.

That has been known since 2012

Reply on news.ycombinator.com