Utilizing Write-Blocked SD Card to Improve Security

[enmus]

@slcoleman elaborated it more detailed from here, if I’m not wrong

Encryption of app vms?

For the border crossing situation mentioned above I have a rather unusual possibility for you. First get yourself an Opal 2.0 compliant SSD (any Samsung SSD should do) and activate the device to turn on encryption with a non-default key. Format the device and create a partition table as normal. Unlock the “shadow MBR” with your key and format the device again and create your partitions for your VMs to live on and install. What does this do? When the device is still locked anybody looking at it…