I was wondering when a reporter would uncover this.

[dazzr@social.tchncs.de]

@GossiTheDog Several concerns added up to make me leave M$ last year. Good decision.

Happy and free, this is no concern of mine, and I will just enjoy the afternoon sun. Microsoft is history.

[katzenismus@mk.absturztau.be]

@GossiTheDog@cyberplace.social don't keep your password on some server. always use a notebook if you can

[jt_rebelo@ciberlandia.pt]

@squillace well, it's part of how Windows works with Microsoft (online) accounts at least since Windows 8.1 (I had to recover an encryption key to help someone reset their Surface device and I got it through their user account, a Microslop support rep back then told me that they couldn't help if there wasn't a cloud backup, the key wasn't accessible to the user without it). So users don't really have a choice in the matter (no access to key at all, or have it on Microslop's cloud).
@Infoseepage @GossiTheDog

[gsprs@mastodon.social]

@GossiTheDog I don’t understand putting your trust in black box proprietary encryption software when TrueCrypt/VeraCrypt exist and are older than BitLocker by 3 years, stupid doesn’t even begin to describe it.

[spiro8mastodeon@toot.community]

@GossiTheDog yes true

[catdragon@mastodon.world]

@GossiTheDog am I a Luddite if I mention that paper can get tossed into a fireplace or shredded?

[fedops@fosstodon.org]

@GossiTheDog there's no secure in slop. Never has been.

[yoshi@toot.community]

@GossiTheDog Never, ever trust any company to secure your secrets. Use local storage like Proton to keep it on your own devices, under your own control

[abmurrow@hachyderm.io]

@GossiTheDog That's not encryption, that's just a password with extra steps.

[troi@techhub.social]

@GossiTheDog I was already in the process of getting everything Microsoft dragged up to its cloud out. Dropbox is finally killed off, and as much of Google as I can, but they don't make it easy.

[mossman@social.vivaldi.net]

@gsprs @GossiTheDog last time I set up a Win11 machine a year and a half ago, it was obligatory to use an account (they had blocked all the workarounds at the time) - and BitLocker was automatically activated. Not sure it's even easy to deactivate that and use VeraCrypt instead, now.

On my previous Win11 machine, I was able to bypass using an account and BitLocker was not provided. In that case I found I could put a firmware lock on the drive - good enough for my purposes.

[olangella@fosstodon.org]

@bontchev @GossiTheDog which is why I don't have a Microsoft operating system

[rairii@labyrinth.zone]

@GossiTheDog "so bitlocker is super secure, right?"

yeah, that's what i thought too, until a few years ago, when most of windows boot environment bugs i found came with bitlocker key dumping or derivation as a side effect

there's more default settings than just that that leads to a less secure configuration

[heretochewgum@fosstodon.org]

@Yoshi @GossiTheDog

https://keepassxc.org/

[autonomousapps@mstdn.social]

@GossiTheDog jfc

> Federal investigators in Guam believed the devices held evidence that would help prove individuals handling the island’s Covid unemployment assistance program were part of a plot to steal funds.

[lokalmatator@social.tchncs.de]

@GossiTheDog
So, wo auch das Thema dann mal durch ist.

Gut das wir im Bereich der kritischen Infrastruktur auf unabhängige #Software setzen.

[ml@social.mitexleo.one]

@GossiTheDog I'm happy with my LUKS encryption

[alandvalonline@mastodon.social]

@GossiTheDog PIRACY flaw.

[linuxine@social.linuxine.net]

@GossiTheDog for me, Bitlocker is basically Microsoft saying "for your safety, we will encrypt your device, don't you worry, I keep the key". Personally, I prefer to choose and keep the key myself when I want something locked And now it is even better to learn that the key is not given to the user by default, but provided to the FBI

[cycrev@infosec.exchange]

@Killertomato @GossiTheDog when reading about privacy violation enforcement actions by the FTC there were a lot that would have been resolved by this. Laptops full of patient data stolen from a car, etc.

Honestly it probably mitigates most crimes where an encrypted hard drive avoids the risk. Not all. And not all the non-crime related reasons people care about privacy