Tag Info

Hot answers tagged

10

Core Storage versus resizing … Will I need to decrypt my Lion HD in order to resize it? … For 10.7 (Build 11A511): yes. Whether a future release of OS X will allow greater flexibility, I don't know. If you use diskutil to monitor backward conversion — diskutil coreStorage list — you may find that the amount converted eventually falls short, just ...


5

From what I have read, people have not seen significant slowdowns in performance. However, this does not mean there is not one. http://www.oreillynet.com/pub/a/mac/2003/12/19/filevault.html This is a good article, but it does claim there is not really any performance problems and it is from when Filevault first came out 6 years ago. ...


5

A third party solution like Dropbox should always be considered insecure, as you leave your data in the hands of a company you cannot "see or touch". Such companies might operate under the laws of another country which permits/forbids differently than the country you live in, and therefore making any legal actions nearly impossible in case of abuse. ...


5

I'm not sure what you mean by "system password". If you're talking about the password to an admin account, or even root, then it's not an issue; FileVault security is completely independent of overall OS security (well, with one exception: if someone subverts the box, installs something like a keylogger, then hands it back to you and captures your FV ...


4

After losing almost my entire afternoon trying to figure out why this was happening, I finally found a workaround. As Ben said before, this is a bug related to FileVault. When you're using FileVault, your LaunchServices database is not read correctly after a reboot. Since it's where your associations (files and URLs) are stored, they are all reverted to the ...


4

This worked for me: Log out of your filevault account Log in as the Administrator (any other user account works, but it is always a good idea to have a separate admin account) in the Terminal: su - <yourusername> will ask for you password hdiutil compact *.sparseimage will ask for your filevault (account) password Success, 33GB freed.


4

This assumes that the hard drive is physically intact. This came up on the Apple Discussion Boards for 10.5. Put the drive into a 2.5" enclosure and hook it up to another Mac. Use an Admin account (call it user2) to mount user1's FileVault using the following command in Terminal: sudo hdiutil attach /Volumes/UpInFlames/Users/user1/user1.sparsebundle where ...


4

Log out with the Time Machine disk attached. It will first recover disk space, then backup. This is the only method supported by Apple. If you only want to encrypt some files, you can create encrypted disk images using Disk Utility and copy those files there, trashing and secure deleting the originals afterwards. The Sparse Bundle format is the technology ...


4

Entering the following in Terminal will work to implement noatime flag on boot drive with FDE activated as used by FileVault 2 on OS X 10.8 Mountain Lion. First elevate the user to give super user permissions sudo su Then copy and paste the following to create the plist file: cat > /Library/LaunchDaemons/com.nullvision.noatime.plist << DELIM ...


3

These files contain resources required for displaying the boot screen of OS X Lion before loading the actual operating system or in cases there is no system partition (or when it's broken). They contain a flat list of files (no hierarchy), and each file has a name of up to 64 characters. The file format is as follows; all numbers are little endian, i.e. ...


3

I haven't tested this, but I think you can "normalize" the account by removing its HomeDirectory attribute. sudo dscl -f /Volumes/Backup/var/db/dslocal/nodes/Default / -delete /Local/Target/Users/fvtest HomeDirectory (with your username instead of "fvtest".) Note that the attribute names are rather confusing; there are two relating to the home directory, ...


3

If you'd like it to be used in the same manner as FileVault (unencrypted on login, encrypted automatically on logout), just move the data to somewhere in your user homedirectory, get your permissions set up right, and then symlink to the data from the default location. If you just want to make an encrypted archive, you could do that with an encrypted DMG ...


3

You need to try to recover the FileVault disk image; if you can get that back, you can mount it (though you need to supply your old login password to decrypt it). In Mac OS v10.3-10.4, the disk image was a single file; in v10.5, they switched to using a sparse bundle format, which breaks the image into a bunch of "band" files, and I'm pretty sure you need ...


2

I use some more solutions in order to keep my files safe. You may never be to sure about anything, even tho on the website they say that only I have the password… it’s still their software and server… I use private disk, and sometiems keeper from dekart. both work great http://www.lazybit.com/index.PHP/2010/10/18/secure-files-on-dropbox?blog=2


2

I would suggest if you want to use DropBox for cloud storage of any sensitive information that you create a TrueCrypt volume/folder in your DropBox. There are instructions on DropBox on how to do this. In fact, security issues are plaguing DropBox right now in the online media and there are many blogs/articles about using TrueCrypt with DropBox that should ...


2

Sorry... there's no way. SparseBundles are Mac OS X Only. You could boot your Mac from an external USB or FireWire drive and access the files that way. EDIT: Things have changed since I posted this answer years ago and now, apparently Catacombae's DMGExtractor can do this. Thanks to André for mentioning that, it's new to me!


2

Apparently DMGExtractor only reads sparseimages and NOT sparsebundles. See this for a kind explanation of the differences: http://www.ehow.com/info_12228366_difference-between-sparse-sparse-bundle.html The read/write speed on encrypted sparseimages is even below EncFS. However the read/write speed on encrypted sparseimages is 10x - 20x times faster. If ...


2

You can disable FileVault by giving your home directory more space. Try moving some of the bigger files to an external hard disk first. EDIT : Adding more info on how to calculate how much diskspace you need to turn off FV. FileVault puts the contents of your home directory into an encrypted disk image, then deletes the original files. Turning off ...


2

FileVault 2 creates a partition which is then managed by it, kinda how LVM works in Linux (the partition seems to be able to contain more than one "partition" but the file system sees it as only one). So "Whole Disk Encryption" doesn't touch BootCamp drives at all; it just encrypts its Boot partition. Looking at this CoreStorage stuff, it seems more like a ...


2

I've commented on one of your similar questions, since I think there's a better way to store MySQL data in an encrypted state. This sounds like a permissions issue. On your home folder, FileVault sets permissions to rwx------ (i.e. owner can read, write and execute, but the group and other users have no permissions), versus the default rwxr-xr-x of a ...


2

Yes, in 10.9 you can roll it back while its busy encrypting diskutil cs revert /Volumes/title_drive -passphrase You will then be promted with the OS X password unlock/decrypt dialog. After that it starts decrypting. Check the status with diskutil cs list Look for "Conversion Progress" and check if "Conversion Direction:" is set to "backward"


2

To remove a user from FileVault enabled accounts, type the following at the terminal prompt: sudo fdesetup remove -user username Where "username" is the name of the user you wish to remove. If the command's successful, no further output will be offered. (You'll know if it's worked because that user will no longer be able to log in to the machine when you ...


2

Since the hard drive is encrypted, the login screen cannot show these files directly before you unlock the drive by logging in. If you activate File Vault, certain resources, like the Apple icon, are placed on the Recovery HD partition for presenting them. These resources are recreated every time you change a setting affecting the boot login screen, e.g. ...


1

Not an answer in the strict sense to the specific question. However, as a user I bypassed the need of the answer by converting my Windows 8 system into a virtual machine on the Macbook Pro. However, I would have tried the following if I hadn't abandoned the original question earlier (to save time!): Allow Bootcamp to create the Windows7/8 USB bootable ...


1

man diskutil says: The volume must be resizable (the above types are) and also mounted. Conversion is done live and in-place; targeting the boot volume is supported; as much of the conversion as possible is done before an eject or reboot is necessary. So apparently answer to my question is "yes". I'll keep the question open though if there are ...


1

However, as you may be aware, FileVault 2 on Mac OS X Lion (10.7) only encrypts the system drive You can encrypt non-system drive with FileVault 2: 10.7: Using FileVault2 to encrypt a second hard drive with user folders System 10.7 The secondary hard drive is decrypted after a user logs in (either manually or you could save the drive encryption ...


1

Use a tool like SMART Utility (shareware -- free to use the first few times) to see if your disk is failing. If you have any pending, reallocated, or remapped sectors, then your disk is failing and you should replace it. You have to actually look at these counters because disks will report "SMART Status: Verified" even if they're having these failures. You ...



Only top voted, non community-wiki answers of a minimum length are eligible