If you are clever , you can highjack the boot process by modifying the bootloader since on a typical full disk encryption setup , at least the bootloader has to be left unencrypted if not all of boot . So if you are really serious about full disk encryption you should be using hardware backed crypto storage a lot of enterprise class laptops and workstation motherboards come with TPM and dmcryptLUKS integrates nicely with TPM so that even your bootloader can ' t be highjacked by an attacker . But basically by getting between the bootloader and the kernel you can then modify memory all you want . <| sep |> This nizchich guy is a gold ! <| sep |> Betcha Grunwald would run with this , his kind of thing . <| sep |> Probably more than half of the next space station will be made of these modules . And if the moon base plan goes ahead probably too .