• lustrum@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    86
    ·
    1 year ago

    What does “without any disks in use” mean?

    • If the computer is powered off, moved or confiscated, there is no data to retrieve.
    • We get the operational benefits of having fewer breakable parts. Disks are among the components that break often. Therefore, switching away from them makes our infrastructure more reliable.
    • The operational tasks of setting up and upgrading package versions on servers become faster and easier.
    • Running the system in RAM does not prevent the possibility of logging. It does however minimise the risk of accidentally storing something that can later be retrieved.
      https://mullvad.net/en/blog/2022/1/12/diskless-infrastructure-beta-system-transparency-stboot/
    • jarfil@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      There are devices that allow moving and confiscating computers without powering them off.

      The rest are true.

        • jarfil@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago

          Sure, but how often does that happen to servers running 24/7? They’d have to set up some sort of dead man’s switch, movement sensors, or something. It’s unlikely they’d get a day’s notice that the servers are going to be confiscated for forensic analysis.

          • DoomBot5@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            How long do you think it takes to broadcast a network wide shutdown command over the management network?

            • jarfil@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 year ago

              How long do you think would you have? Also, any manual action on your part would be obstruction, while an automated system could be defended as anti-theft protection.