132
A security researcher says Microsoft secretly built a backdoor into BitLocker, releases an exploit to prove it (www.techspot.com)
submitted 5 months ago by to c/technology@beehaw.org
4 comments fedilink hide all child comments
 

A researcher known as "Nightmare-Eclipse" recently released YellowKey, a security vulnerability that allegedly enables a full bypass of BitLocker's full-volume encryption. The researcher described YellowKey as one of the most "insane" flaws they have ever encountered and has also accused Microsoft of potentially embedding a legitimate backdoor in BitLocker's data protection system.

To no-one's surprise

all 4 comments

sorted by: hot top controversial new old
[–] 15 points 5 months ago

A second backdoor. Windows also uploads your BitLocker keys to Microsoft's servers by default, just in case somebody needs to get in later.

  • permalink
  • fedilink
  • source
    •
    [–] 10 points 5 months ago (1 child)

    The legally have to because of the US Cloud Act.

    Every single US company has a backdoor because of this.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 1 point 5 months ago

    Move to Linux! I would be happy to personally help anyone here who is interested yet unsure.

  • permalink
  • fedilink
  • source
    •
    129 comments in c/technology@lemmy.world view that post
    9 comments in c/technology@lemmy.zip view that post
    8 comments in c/news@lemmy.world view that post
    4 comments in c/cybersecurity@infosec.pub view that post
    2 comments in c/security@lemmy.ml view that post
    2 comments in c/pulse_of_truth@infosec.pub view that post
    1 comment in c/hackernews@lemmy.bestiver.se view that post