Since Linux 6.9, LUKS suspend stopped wiping disk-encryption keys from memory
mathstodon.xyz
July 2, 2026
1 min read
🔥🔥🔥🔥🔥
58/100
Summary
Mastodon web application requires JavaScript to function properly. Users can also opt for native apps available for their platform.
Key Takeaways
- The Mastodon web application requires JavaScript to function properly.
- Users are encouraged to use native apps for Mastodon on their respective platforms.
Community Sentiment
Positives
- The introduction of a test for this bug is a significant step towards improving security in Linux, as it helps prevent similar regressions in the future.
- Debian's cryptsetup-suspend extension demonstrates innovative thinking in enhancing security, even if it is not officially supported by the main kernel.
- The discussion around memory encryption techniques highlights the importance of defense-in-depth strategies in securing sensitive data against physical attacks.
Concerns
- The fact that critical security bugs arise from simple oversights in a large codebase raises serious concerns about the reliability of open-source software.
- The ongoing presence of the encryption key in memory during suspend poses a significant security risk, which could be exploited by anyone with physical access to the device.
- Relying on extensions like cryptsetup-suspend for security is problematic, as it indicates a lack of robust support in the main kernel, potentially leaving users vulnerable.
