logoalt Hacker News

OptionOfT • yesterday at 5:37 PM • 2 replies • view on HN

We used these: https://apricorn.com/aegis-padlock-usb3

They work well in high security environments because you can allowlist the vendor and product id of only these hard drives, and you don't have to set up procedures where people HAVE to encrypt their drives before use.

So cost-wise it makes sense.

But for personal use? BitLocker / VeraCrypt all the way.


Replies

lifeisloving • yesterday at 6:18 PM

MS stores your Bitlocker keys on Microsoft servers now if you ever login with a OneDrive account, at least they were.

And MS has handed those keys over to law enforcement before.

➕ show 3 replies
chasd00 • yesterday at 6:34 PM

You can probably implement your own these days. I would use a model to generate a requirement document, then human review, then generate an implementation plan, then human review, then take it to build. Have a different model to a code review and testing. End with human code review and testing.

You could make your own BitLocker conforming to your requirements without relying on or trusting any cloud or corporate entity.

➕ show 1 reply