So AEM ist not available for every machine. Assume you don’t have AEM on yours, what would you do to prevent an Evil-Maid attack? The problem is, that unencrypted stuff is on your HDD/SSD and that unencrypted boot sector can be infected with malware. So why not remove this nasty part onto an USB s…

51lieal made a guide for detaching the header [image] Qubes OS Installation - Detached encrypted boot and header Community Guides Used device in testing and confirm is worked : windows vmware (host using old pc) and my laptop. both are using uefi. Keep in mind that bel…

Oh Thanks! Should have used the search before posting…

[image] Suspicious_Actions: Assume you don’t have AEM on yours, what would you do to prevent an Evil-Maid attack? Using a SED SSD you can do a couple of things: High security: Use sedutil to boot a tiny readonly partition that is used to unlock and make visible all of your readwrite partit…

[image] brendanhoar: Using a SED SSD Which is better than to trust your USB whatever, as I see it.

Poor mans AEM

User Support

anon40243023 November 13, 2022, 4:49pm 2

51lieal made a guide for detaching the header