I was wondering when a reporter would uncover this.

[abmurrow@hachyderm.io]

@GossiTheDog That's not encryption, that's just a password with extra steps.

[troi@techhub.social]

@GossiTheDog I was already in the process of getting everything Microsoft dragged up to its cloud out. Dropbox is finally killed off, and as much of Google as I can, but they don't make it easy.

[mossman@social.vivaldi.net]

@gsprs @GossiTheDog last time I set up a Win11 machine a year and a half ago, it was obligatory to use an account (they had blocked all the workarounds at the time) - and BitLocker was automatically activated. Not sure it's even easy to deactivate that and use VeraCrypt instead, now.

On my previous Win11 machine, I was able to bypass using an account and BitLocker was not provided. In that case I found I could put a firmware lock on the drive - good enough for my purposes.

[olangella@fosstodon.org]

@bontchev @GossiTheDog which is why I don't have a Microsoft operating system

[rairii@labyrinth.zone]

@GossiTheDog "so bitlocker is super secure, right?"

yeah, that's what i thought too, until a few years ago, when most of windows boot environment bugs i found came with bitlocker key dumping or derivation as a side effect

there's more default settings than just that that leads to a less secure configuration

[heretochewgum@fosstodon.org]

@Yoshi @GossiTheDog

https://keepassxc.org/

[autonomousapps@mstdn.social]

@GossiTheDog jfc

> Federal investigators in Guam believed the devices held evidence that would help prove individuals handling the island’s Covid unemployment assistance program were part of a plot to steal funds.

[lokalmatator@social.tchncs.de]

@GossiTheDog
So, wo auch das Thema dann mal durch ist.

Gut das wir im Bereich der kritischen Infrastruktur auf unabhängige #Software setzen.

[ml@social.mitexleo.one]

@GossiTheDog I'm happy with my LUKS encryption

[alandvalonline@mastodon.social]

@GossiTheDog PIRACY flaw.

[linuxine@social.linuxine.net]

@GossiTheDog for me, Bitlocker is basically Microsoft saying "for your safety, we will encrypt your device, don't you worry, I keep the key". Personally, I prefer to choose and keep the key myself when I want something locked And now it is even better to learn that the key is not given to the user by default, but provided to the FBI

[cycrev@infosec.exchange]

@Killertomato @GossiTheDog when reading about privacy violation enforcement actions by the FTC there were a lot that would have been resolved by this. Laptops full of patient data stolen from a car, etc.

Honestly it probably mitigates most crimes where an encrypted hard drive avoids the risk. Not all. And not all the non-crime related reasons people care about privacy

[ruston@mstdn.ca]

@GossiTheDog Another reason I do not use Microsoft. I am forced at work to use it but i try as many work around to avoid it as much as possible. Only another 450 days left of being forced to use it.

[squillace@hachyderm.io]

@jt_rebelo @Infoseepage @GossiTheDog that is precisely the point. you CAN possess and NOT backup your keys in a cloud. But sure, it makes it easy for msft to help you out in a pinch. But MSFT could upload an encrypted version -- they do not offer that. Unfortunately.

[toxy@mastodon.acc.sunet.se]

@GossiTheDog Bloody Nora!

[ailurocrat@scicomm.xyz]

@Infoseepage @GossiTheDog Corporations can't be trusted.They prove that over and over.

[squillace@hachyderm.io]

@jt_rebelo @Infoseepage @GossiTheDog altneratively, they could store it in the TEE encrypted drive now, but again, they don't offer that. MSFT can't touch that one. But you have to know; normal users obviously do not.

[christopherkunz@chaos.social]

@GossiTheDog uploading the BitLocker recovery keys to the MS cloud is not default behavior, is it? Even the Forbes article states that you can opt-out of it (or do you even have to opt-in?).

[jkmcnk@mastodon.social]

@christopherkunz @GossiTheDog if you have to to opt out, that makes it default behaviour by definition.

[christopherkunz@chaos.social]

@jkmcnk Yup, certainly. Firing up my win machine now to see what's up with that.