you are viewing a single comment's thread
view the rest of the comments
[–] 52 points 1 year ago (6 children)

Called it. Enabling bitlocker by default for all Win11 users was going to bite them in the ass.

  • source
  • hideshow 6 child comments
  • [–] 30 points 1 year ago (5 children)

    The protection of FDE is the carrot they give to get you to enable TPM 2.0. The stick is the remote attestation which can be used for nefarious purposes like DRM and other types of denial/system lockdown at Microsoft's discretion.

    It's true it's hard to motivate people into taking a better security posture for themselves but forcing them like this doesn't come from a good and sincere place.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 11 points 1 year ago (3 children)

    Especially given how easy it is to bypass Bitlocker anyway: https://youtu.be/Cc6vrQSVMII

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 1 year ago

    This 49 minute video ends with the presenter saying that fixes for what they demonstrated were shipped in July’s patch Tuesday

    The recommended mitigation is the use of TPM and a PIN, which is going to apply to any machine where the user went “with the flow” during Windows 11’s OOBE

  • source
  • parent
  • [–] 4 points 1 year ago

    Thanks for this, I accidentally locked my wife's tablet when I was testing if Linux would run on it from USB drive. Came back to win 11 and it was bitlocked, with no codes in her Microsoft account and no idea where else to find them. Hopefully I can study this and figure out a way to bypass it

  • source
  • parent