That’s actually what the duress password does and did here. Deleting the data would be too slow, so it gets rid of the keys instead.
In the simplest case, absolutely. I ran into black screens and wayland issues due to a combination of needing to enable simpledrm in the command line and working with secure boot. Not too much extra once you figure it out, though.
Regarding the wait time, maybe I just got lucky, but just waited for my CPU usage to come back down and spammed modinfo -F version nvidia or some such until it stopped erroring. My actual hang-up was getting simpledrm working and then secure boot.
Yep, checklist of basically everything I went through over the weekend. Sorted now, thankfully
I was on arch as a vestige from my school days, having never quite found the time to switch to something more stable. When I saw the news over the weekend, I checked and found 1 would-be-infected package on my machine that was thankfully months out of date. I’m well past the point of wanting to examine PKGBUILDs every time (hence the out of date package). But, instead of just removing AUR packages and sticking to arch repos, I decided to sweep up the technical debt by wiping and installing Fedora. I’m liking it so far, minus the absolute pain in the ass that is Nvidia on Linux. Fuck academics and their insistence on writing everything targeting CUDA; otherwise, I’d have saved a good bit of money a few years ago with a much more compatible AMD card.
<ESC><ESC><ESC><ESC>ujj<ESC>u<ESC>v0wsffs<C-z><C-s><A-F4><A-enter>vim pres.typ...
My recollection is that the keys are stored on the TPM and can’t be exported. Backups kick the can down the road; now the adversary demands access to your backups. If the keys can’t leave the TPM and the TPM is wiped, then there is no more leverage that can be applied that will unlock the phone. The adversary might still try to get at other kinds of backups anyway to search for whatever data they were after to begin with, but that’s a separate issue.