Microsoft gave FBI a set of BitLocker encryption keys to unlock suspects' laptops: Reports | TechCrunch

7 months ago by commander to c/technology

The FBI served Microsoft a warrant requesting encryption recovery keys to decrypt the hard drives of people involved in an alleged fraud case in Guam.
load all comments
blanketswithsmallpox 6 points 7 months ago

Regular old ZIP with AES-256 should do the trick for anything truly important you want to keep locked down.

You could always do sly stuff like Hidden volumes with Veracrypt as well. Leave the crumb trail for the low key shit or old nudes of gfs you have permission to keep.

path: 0 21737245, hotness: undefined, score: 6, children: 7
waitmarks 11 points 7 months ago

Or donโ€™t use an operating system that uploads your encryption keys to their corporate servers for โ€œbackupโ€.

path: 0 21737245 21738167, hotness: undefined, score: 11, children: 6
Kissaki 1 point 7 months ago

Or decline the upload recommendation.

path: 0 21737245 21738167 21738427, hotness: undefined, score: 1, children: 3
uszo165 7 points 7 months ago

There is no recommendation that a user can decline. Windows uploads the keys without asking, without consent.

path: 0 21737245 21738167 21738427 21740568, hotness: undefined, score: 7, children: 2
Kissaki 2 points 7 months ago

Do you have a source for that?

This article said "by default". The article they link to on that talks about encryption on by default on new PCs. The article I read before this one said "Microsoft recommends".

BitLocker FAQ says

How can the recovery password and recovery key be stored?

The recovery password and recovery key for an operating system drive or a fixed data drive can be saved to a folder, saved to one or more USB devices, saved to a Microsoft Account, or printed.

/edit: fix quote

path: 0 21737245 21738167 21738427 21740568 21748221, hotness: undefined, score: 2, children: 1
uszo165 1 point 7 months ago

My source was my own experience that my Windows 11 volume is encrypted and I have never been asked about key upload. So I assumed this happens automatically. I guess I am mistaken. I did not consider that my installation has no online Microsoft account. But since Windows is closed source no one knows for sure what gets uploaded.

path: 0 21737245 21738167 21738427 21740568 21748221 21775465, hotness: undefined, score: 1, children: 0
technology
technology

@lemmy.world

login for more options
87402
21272
15822

This is a most excellent place for technology news and articles.

Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


go to feed...