BitJam
but had missed the fact that mk_swap_file would be optional. (Instead, I worried it would be the new forced default.)
Well, I was thinking of offering to make a swap file after we’ve made at least one persistence file and a swap file does not already exist.
AK-47 made a good point that using swap partitions from a host machine that is not ours is a possible security risk. So having a swap file on the live-usb is safer. Also, if the live-usb is encrypted then the swap file will be encrypted too. In addition, we now automatically disable adding/using swap partitions on encrypted live-usbs. You can bypass this with “live_swap=force”. We still use the swap file though since it is already encrypted. You can disable this with “live_swap=all-off”. If you just want to disable using swap partitions use “live_swap=off”.
OTOH, using an untrusted machine is inherently unsafe since there may be a key logger, etc. I imagine this is be a far greater risk than using some swap. If I were the black hat then I would use a keylogger and I wouldn’t bother with dissecting the swap partition.
[...] almost any English person would accept "bully" as a synonym for "Fascist". -- George Orwell (1944)