▲ 939 ▼ Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor (www.tomshardware.com) submitted 5 months ago by throws_lemy@lemmy.nz to c/technology@lemmy.world 126 comments fedilink hide all child comments YellowKey reportedly works in Windows 11, Windows Server 2022 and 2025, but not in Windows 10.
[–] TheEighthDoctor@lemmy.zip 2 points 5 months ago (4 children) Companies care permalink fedilink source parent hideshow 4 child comments replies: [–] SleeplessCityLights@programming.dev 6 points 5 months ago (2 children) When I worked at an MSP, BitLocker cost companies thousands of dollars when it did something strange. User error has very catastrophic consequences with BitLocker and nobody that actually cares about security uses BitLocker. From my professional experience it is malware. The places where I have seen it used on purpose was because of policy bullshit and everyone agreed that it was a hindrance rather than an advantage. permalink fedilink source parent hideshow 2 child comments replies: [–] TheEighthDoctor@lemmy.zip 6 points 5 months ago* (last edited 5 months ago) (1 child) And from my experience in banking, healthcare and others; every company uses bitlocker on workstations, I saw EncFS once in dozens of companies audited. permalink fedilink source parent hideshow 1 child comment replies: [–] SleeplessCityLights@programming.dev -1 points 5 months ago Using encryption on files systems is fine, but the Microslop Bitlocker implementation is awful. In any ecosystem that is not fully regulated BitLocker is a liability. I have had colleagues that could beat it. permalink fedilink source parent [–] freely1333@reddthat.com 3 points 5 months ago Companies care that you have access to it. The “companies that care” literally wrote the backdoor. permalink fedilink source parent
[–] SleeplessCityLights@programming.dev 6 points 5 months ago (2 children) When I worked at an MSP, BitLocker cost companies thousands of dollars when it did something strange. User error has very catastrophic consequences with BitLocker and nobody that actually cares about security uses BitLocker. From my professional experience it is malware. The places where I have seen it used on purpose was because of policy bullshit and everyone agreed that it was a hindrance rather than an advantage. permalink fedilink source parent hideshow 2 child comments replies: [–] TheEighthDoctor@lemmy.zip 6 points 5 months ago* (last edited 5 months ago) (1 child) And from my experience in banking, healthcare and others; every company uses bitlocker on workstations, I saw EncFS once in dozens of companies audited. permalink fedilink source parent hideshow 1 child comment replies: [–] SleeplessCityLights@programming.dev -1 points 5 months ago Using encryption on files systems is fine, but the Microslop Bitlocker implementation is awful. In any ecosystem that is not fully regulated BitLocker is a liability. I have had colleagues that could beat it. permalink fedilink source parent
[–] TheEighthDoctor@lemmy.zip 6 points 5 months ago* (last edited 5 months ago) (1 child) And from my experience in banking, healthcare and others; every company uses bitlocker on workstations, I saw EncFS once in dozens of companies audited. permalink fedilink source parent hideshow 1 child comment replies: [–] SleeplessCityLights@programming.dev -1 points 5 months ago Using encryption on files systems is fine, but the Microslop Bitlocker implementation is awful. In any ecosystem that is not fully regulated BitLocker is a liability. I have had colleagues that could beat it. permalink fedilink source parent
[–] SleeplessCityLights@programming.dev -1 points 5 months ago Using encryption on files systems is fine, but the Microslop Bitlocker implementation is awful. In any ecosystem that is not fully regulated BitLocker is a liability. I have had colleagues that could beat it. permalink fedilink source parent
[–] freely1333@reddthat.com 3 points 5 months ago Companies care that you have access to it. The “companies that care” literally wrote the backdoor. permalink fedilink source parent