QuickLogin attack demo shows Omarchy FDE laptops fall to brief unattended access

evilsocket · x · 2026-09-12

Security researcher DrWhax demonstrated a "QuickLogin" attack against Omarchy, the Arch-based Linux setup popularized by DHH: an attacker with brief physical access can leverage the fast-login flow to bypass full-disk encryption (FDE) and gain system access.

The takeaway: disk encryption doesn't make an unattended laptop safe — physical access combined with auto-login/session persistence defeats FDE. The demo was amplified by security accounts bl4sty and evilsocket.

Original post →

More from Safety

Safety channel →