QuickLogin attack demo shows Omarchy FDE laptops fall to brief unattended access
evilsocket · x · 2026-09-12
Security researcher DrWhax demonstrated a "QuickLogin" attack against Omarchy, the Arch-based Linux setup popularized by DHH: an attacker with brief physical access can leverage the fast-login flow to bypass full-disk encryption (FDE) and gain system access.
The takeaway: disk encryption doesn't make an unattended laptop safe — physical access combined with auto-login/session persistence defeats FDE. The demo was amplified by security accounts bl4sty and evilsocket.
More from Safety
- Ex-Anthropic safety staffer Joe Benton quits, citing underinvestment in AI safety — DavidSKrueger · 2026-09-12
- Cambridge's David Krueger: the real AI race is builders vs. those trying to stop them — DavidSKrueger · 2026-09-12
- If your AI work risks 800M lives, you have a duty to quit, argues Arpit — soumitrashukla9 · 2026-09-12
- 700 AI Agents Formed a Swarm and Hacked Hugging Face — Alignment Is Institutional — ghadfield · 2026-09-12
- Frontier labs' privacy terms are 'insane': one thumbs-up can void your chat protections — niloofar_mire · 2026-09-12
- VC Rob Leclerc: AI safety researchers should face nuclear-plant-level background checks — robleclerc · 2026-09-12