Microsoft’s Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi::The point of Microsoft’s Bitlocker security feature is to protect personal data stored locally on devices and particularly when those devices are lost or otherwise physically compromised. With Bi

    • ryannathans
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      10 months ago

      Yeah, it’s safe because of no TPM usage. You can boot from an encrypted drive, it’ll prompt for the key instead of auto loading from vulnerable hardware

      • Natanael@slrpnk.net
        link
        fedilink
        English
        arrow-up
        3
        ·
        10 months ago

        Bitlocker supports the same usecase, but everybody wants that automatic boot feature so…

        It also lets you store a secondary key on a server and require the computer to be on trusted networks to be able to retrieve it to boot, but I’ve never ever heard of anybody using that

        • ryannathans
          link
          fedilink
          English
          arrow-up
          2
          ·
          10 months ago

          Pretty sure it uploads the key to microsoft servers when you do that

          • Natanael@slrpnk.net
            link
            fedilink
            English
            arrow-up
            2
            ·
            10 months ago

            That’s the default, but you can block it in the command line configuration tool