Comment on Microsoft's Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi
ryannathans@aussie.zone 11 months agoVeracrypt drive encryption does not have the same problem, it would be secure even with physical access
Comment on Microsoft's Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi
ryannathans@aussie.zone 11 months agoVeracrypt drive encryption does not have the same problem, it would be secure even with physical access
kadu@lemmy.world 11 months ago
ryannathans@aussie.zone 11 months ago
Yeah, it’s safe because of no TPM usage. You can boot from an encrypted drive, it’ll prompt for the key instead of auto loading from vulnerable hardware
Natanael@slrpnk.net 11 months ago
Bitlocker supports the same usecase, but everybody wants that automatic boot feature so…
It also lets you store a secondary key on a server and require the computer to be on trusted networks to be able to retrieve it to boot, but I’ve never ever heard of anybody using that
ryannathans@aussie.zone 11 months ago
Pretty sure it uploads the key to microsoft servers when you do that