Comment on Microsoft's Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi

• ryannathans@aussie.zone ⁨11⁩ ⁨months⁩ ago

  Yeah, it’s safe because of no TPM usage. You can boot from an encrypted drive, it’ll prompt for the key instead of auto loading from vulnerable hardware

  source

  • Natanael@slrpnk.net ⁨11⁩ ⁨months⁩ ago

    Bitlocker supports the same usecase, but everybody wants that automatic boot feature so…

    It also lets you store a secondary key on a server and require the computer to be on trusted networks to be able to retrieve it to boot, but I’ve never ever heard of anybody using that

    source

    • ryannathans@aussie.zone ⁨11⁩ ⁨months⁩ ago

      Pretty sure it uploads the key to microsoft servers when you do that

      source

      • Natanael@slrpnk.net ⁨11⁩ ⁨months⁩ ago

        That’s the default, but you can block it in the command line configuration tool

        source