From their blog:

Now regarding YellowKey, lots of you are wondering how does one even find such backdoor ?

I'll tell you how, it took me more time trying to get it to work than the amount of sleep I had in two years combined. No AI involved, no help in any shape or form. I could have made some insane cash selling this but no amount of money will stand between me and my determination against Microsoft.

[...]

I can't wait when I will be allowed to disclose the full story, I think people will find my crashout very reasonable and it definitely won't be a good look for Microsoft.

Looking forward to the full story.

YellowKey can be triggered simply by merely copying some files to a USB stick and rebooting to the Windows Recovery Environment. We tested this ourselves, and sure enough, not only does it work, it bears all the hallmarks of a backdoor, down to the exploit's files disappearing from the USB stick after it's used once.

Somebody on twitter “reverse engineered” the exploit. Apparently ms shipped debug code in production. At least it’s not called Backdoor_FBI outright.

How it works:

1. Recovery tools look for a config file called RecoverySimulation.ini on the OS drive
2. If Active=Yes, it enables "test mode" for the recovery tools
3. Test mode unlocks your BitLocker drive but a flag called FailRelock tells it to skip relocking
4. cmd.exe spawns with full access to your "encrypted" drive

JuSt MaKe A sEcUrE bAcKdOoR

You’d think this would only be the 100th-or-so embarrassing security-defying bug to plague micro$oft but you’d be wrong.

It’s like we’re in a world where most people use windows to log on to facebook. Its bizarre.

They also state the vulnerability is well-hidden, and that they "could have made some insane cash selling this, but no amount of money will stand between me and my determination against Microsoft."

based.

Lmao, remember when Microsoft wouldn't make a backdoor for the US government? https://mashable.com/archive/fbi-microsoft-bitlocker-backdoor

I wonder what favor the government traded for this. Or maybe what threats were made to Microsoft...

Finally, some good news. Now I can stop having to interact with my companies shitty outsourced service desk when I need a Bitlocker key.

Closed source security mechanism has backdoor

More news at 9

Buttlocker

There was a reason for disappearance of TrueCrypt

That makes me think of when TrueCrypt suddenly stopped being developed: https://www.techmonitor.ai/technology/cybersecurity/is-truecrypt-a-victim-of-hacking-4280447?cf-view

I guess LUKS is safe.

of course there's a back door. You motherfuckers think they'll TPM secure boot lock file manage SECURTYYYY and not let five eyes waltz in whenever they fucking well please?

Bitlocker is Temu encryption

Well, Microsoft "Security" hard at work.

I would bet it coincides with them implementing "AI" or shortly after. They're going to say they didn't know, it's not their fault because Slopbot9000 did it.

The process is dead simple: grab any USB stick, get write access to the "System Volume Information," and copy into it the "FsTx" folder and its contents. Shift+click Restart to get Windows to the recovery environment, but then switch to holding down the Control key and don't let go. The machine will reboot, and without asking any questions or showing any menus, will drop you in an elevated command line with full access to the formerly Bitlocked drive, without asking for any keys.

Its dead simple to get write access to System Volume Information

Not even local admins have access to it. A local admin would have to take ownership of that folder (not recommended), but if a local admin is doing that for this exploit, they can just turn off Bitlocker rather than go through this nonsense.

I misunderstood the exploit. See replies.

BitLocker is basically malware, so who fucking cares. Far more people have it accidentally on and get locked out than people that have purposefully activated it.

Anything that isn't open source can't be secure. That doesn't mean that everything open source is secure though.

I lost 3 years of work and my research dissertation because of bitlocker. Fuck you microslop, now I do everything on Linux because of your security garbage

Picture got me confused. Do you use a usb stick or a hammer?

Why do they call it "drive encryption" when it does not need a user-provided password or other key?

Microslop can't even claim incompetence. The way this reads, the function is intended as a back door.