Surprise, surprise.
Forcing security measures onto someone who doesn’t understand them or know how to recover their data if something goes wrong is a bad idea.
Windows 11 users reportedly losing data due to Microsoft's forcedWindows 11 users reportedly losing data due to Microsoft's forced BitLocker encryption
Submitted 10 months ago by moe90@feddit.nl to technology@lemmy.world
Comments
reseller_pledge609@lemmy.dbzer0.com 10 months ago
Rooki@lemmy.world 10 months ago
Yeah it can happen, when you force people without their consent encrypting their data.
cy_narrator@discuss.tchncs.de 10 months ago
Forcing people is one thing, not telling them its a thing is completely different. Most Windows users dont even know their Windows has bitlocker enabled and those keys are out of their sight
Melonpoly@lemmy.world 10 months ago
Isn’t that what Iphone and Android already do?
Rooki@lemmy.world 10 months ago
The only phone manufacture that does that is Google with pixel. Any other phone is for my knowledge either “weakly” encrypted or not at all.
Still your Mobile OS isnt just upgrading and encrypting your SD card and main drive. Thats the point.
MonkderVierte@lemmy.ml 10 months ago
Different threat model and usage scenario.
OfficerBribe@lemm.ee 10 months ago
Android I think just uses same credentials you use to unlock account, at least I am not aware of any recovery key. And you are prompted for credentials from time to time so it is harder to forget. I use fingerprint as main unlock + pattern and I have to enter pattern roughly once a week I think.
On Windows if you set up Windows Hello (fingerprint or PIN usually), you are not reminded to enter password afterwards so eventually you can forget it.
Object@sh.itjust.works 10 months ago
One major difference is that it is so much easier to lock yourself out of the desktop TPM chip compared to mobile device security chips because they’re not tightly coupled.
surewhynotlem@lemmy.world 10 months ago
Huh … I never noticed. Probably because my phone OS never failed to boot, requiring me to pull data off the HDD directly.
Lembot_0002@lemm.ee 10 months ago
Most people don’t have anything of importance on their phones. And the tuning options are almost absent on phones, so it is less problematic bug-wise.
FreedomAdvocate@lemmy.net.au 10 months ago
How are these people losing access to their MS accounts on their computers?
kernelle@0d.gs 10 months ago
All the time, then people get ran around in circles, are given a too technical explanation and give up more often than not.
The encryption is not inherently a bad thing, but forcing people into account creation is where the trouble starts. With piss-poor customer support as the cherry on top, this should never be allowed.
HakFoo@lemmy.sdf.org 10 months ago
I’d say it’s a bad thing because it’s the wrong threat model as a default.
More home users are in scenarios like “I spilled a can of Diet Sprite into my laptop, can someone yank the SSD and recover my cat pictures” than “Someone stole my laptop and has physical access to state secrets that Hegseth has yet to blurt on Twitch chat”. Encryption makes the first scenario a lot harder to easily recover from, and people with explicit high security needs should opt into it or have organization-managed configs.
SpikesOtherDog@ani.social 10 months ago
Step one, be forced to create a Microsoft account.
Step two, create the account with a password you are SURE you remember
Step three, create a PIN so you never have to enter your password
Step four, forget your password
FreedomAdvocate@lemmy.net.au 10 months ago
Step 5, recover password?
OfficerBribe@lemm.ee 10 months ago
Most likely this is the #1 reason. When Passkeys will become more popular, that will be another problem for regular users unless there is an easy account recovery option.
Another possibility could be switching to local account and deleting MS account, but I would imagine that is more rare and most people would just abandon account. Then it can become the same issue with forgotten password though.
sem@lemmy.blahaj.zone 10 months ago
I guess there is a password recovery feature with Microsoft accounts, but people don’t remember which email they signed up with?
Maybe it would help to read the initial reddit thread and not this article.
user224@lemmy.sdf.org 10 months ago
You can still force local account.
On setup: Shift + F10 -> click into the CMD window (it opens unfocused)
And do not connect to network until you finish setup.
Disabling auto updates was also very simple and intuitive. Couldn’t be easier.
Meta + R -> Type gpedit.msc and press enter -> On left click Administrative templates -> All settings -> Configure Automatic Updates -> Select option 2, Enabled and Apply