Transfer device passphrase compromised inform Legacy (Tails/SVS)
THREAT162
· Inform: Handled by telling users how to protect themselves.
· Defined in catalog.py:2787
- Risk
- High impact × Low likelihood = 6 medium
- After mitigations
- Low impact × Low likelihood = 2 low
Threat actors: Any
Mitigations
| Mitigation | Status |
|---|---|
| Persistent FDE Storage of Transfer Device MITIG57 Legacy (Tails/SVS) | implemented |
Where it applies
Applies to 1 component in 1 scenario.
- Transfer Device Legacy (Tails/SVS)
Transfer & decrypt Legacy (Tails/SVS) · Transfer Device
Notes
Existing mitigations: Documentation states the device be encrypted using LUKS with a strong passphrase (MITIG57). Automated test for mitigation: No.
How this threat is matched
Listed for these components. A boundary covers every component inside it.