On: A laptop ban would be a disruptive privacy risk

[aaomidi]

Does someone have a nice guide to do full disk encryption, and other recommendations so that we can at least be a little certain our data isn't being tampered with?

[cmurf → aaomidi]

https://github.com/Drive-Trust-Alliance/sedutil

That's if you trust TCG and OPAL, and have an OPAL drive. Windows will use OPAL automatically if available for at least Pro and Enterprise and Server products, I'm not sure about Home. Apple and Linux have software implementations (typically with AES hardware support by the CPU).

Edit: Looks like it's been forked. https://github.com/sedutil/sedutil

The TCG and OPAL folks should have commissioned this work for a UEFI application, and open sourced it.

[rm_-rf_slash → aaomidi]

Might make more sense to buy a cheap laptop for travel and keep it separate from your work and personal life as much as you can.

At least that way you can't be accused of hiding anything if you literally have nothing to hide - at least at the airport.

[technofiend → rm_-rf_slash]

If you live in linux-land and assuming bandwidth is not an issue, then it's trivial to move to a VDI solution. See Apache Guacamole for an excellent example of web-enabling remote desktop access.