Comment on Windows 11 users reportedly losing data due to Microsoft's forcedWindows 11 users reportedly losing data due to Microsoft's forced BitLocker encryption

FreedomAdvocate@lemmy.net.au ⁨1⁩ ⁨month⁩ ago

• SpikesOtherDog@ani.social ⁨1⁩ ⁨month⁩ ago

  Step one, be forced to create a Microsoft account.

  Step two, create the account with a password you are SURE you remember

  Step three, create a PIN so you never have to enter your password

  Step four, forget your password

  source

  • OfficerBribe@lemm.ee ⁨1⁩ ⁨month⁩ ago

    Most likely this is the #1 reason. When Passkeys will become more popular, that will be another problem for regular users unless there is an easy account recovery option.

    Another possibility could be switching to local account and deleting MS account, but I would imagine that is more rare and most people would just abandon account. Then it can become the same issue with forgotten password though.

    source
  • sem@lemmy.blahaj.zone ⁨1⁩ ⁨month⁩ ago

    I guess there is a password recovery feature with Microsoft accounts, but people don’t remember which email they signed up with?

    Maybe it would help to read the initial reddit thread and not this article.

    source

    • SpikesOtherDog@ani.social ⁨1⁩ ⁨month⁩ ago

      people don’t remember which email they signed up with

      No. We are the top 5%-10% of users

      source
  • user224@lemmy.sdf.org ⁨1⁩ ⁨month⁩ ago

    You can still force local account.

    On setup: Shift + F10 -> click into the CMD window (it opens unfocused)

    cd oobe
    bypassnro
    

    And do not connect to network until you finish setup.

    Disabling auto updates was also very simple and intuitive. Couldn’t be easier.

    Meta + R -> Type gpedit.msc and press enter -> On left click Administrative templates -> All settings -> Configure Automatic Updates -> Select option 2, Enabled and Apply

    source

    • kernelle@0d.gs ⁨1⁩ ⁨month⁩ ago

      Bypassnro is the old method, no longer working since 24H2. I’ve tested this method on GitHub and it works for normal AND S-mode devices.

      • Ctrl + Shift + J before selecting secondary keyboard layout (sometimes you need to click on the outside borders of the form so the dev console pops up)
      • Type this (can use autocomplete): WinJS.Application.restart(“ms-cxh://LOCALONLY”)
      • Setup with local account

      source
    • SpikesOtherDog@ani.social ⁨1⁩ ⁨month⁩ ago

      I’m still creating local accounts using the bypass in the auto unattend file.

      If a drive is crypto locked and there is only a local account, it might as well be wiped if nobody has a password.

      source
  • FreedomAdvocate@lemmy.net.au ⁨1⁩ ⁨month⁩ ago

    Step 5, recover password?

    source

    • SpikesOtherDog@ani.social ⁨1⁩ ⁨month⁩ ago

      That’s if the password recovery feature was set up properly.

      source

      • FreedomAdvocate@lemmy.net.au ⁨1⁩ ⁨month⁩ ago

        Heaven forbid people take any personal responsibility.

        source
• kernelle@0d.gs ⁨1⁩ ⁨month⁩ ago

  All the time, then people get ran around in circles, are given a too technical explanation and give up more often than not.

  The encryption is not inherently a bad thing, but forcing people into account creation is where the trouble starts. With piss-poor customer support as the cherry on top, this should never be allowed.

  source

  • HakFoo@lemmy.sdf.org ⁨1⁩ ⁨month⁩ ago

    I’d say it’s a bad thing because it’s the wrong threat model as a default.

    More home users are in scenarios like “I spilled a can of Diet Sprite into my laptop, can someone yank the SSD and recover my cat pictures” than “Someone stole my laptop and has physical access to state secrets that Hegseth has yet to blurt on Twitch chat”. Encryption makes the first scenario a lot harder to easily recover from, and people with explicit high security needs should opt into it or have organization-managed configs.

    source

    • M1ch431@slrpnk.net ⁨1⁩ ⁨month⁩ ago

      “Someone stole my laptop and has physical access to state secrets that Hegseth has yet to blurt on Twitch chat”.

      Thanks for making laugh. It’s been a while.

      source
    • kernelle@0d.gs ⁨1⁩ ⁨month⁩ ago

      I agree, the encryption should be deliberate choice. And we’ve said nothing yet about the impact on performance.

      You used to almost be forced to make a recovery CD or USB when encrypting a drive, now people don’t even know how ‘important’ the MS account actually is.

      source
    • FreedomAdvocate@lemmy.net.au ⁨1⁩ ⁨month⁩ ago

      That’s what the online MS account is for - your encryption key is stored on your account that you can access from any web browser.

      source