Newest from Microsoft: your HDD/SSD cryptic key is sent to cloud

mikrobitti.fi/uutiset/mb/8d823fc9-6283-4cfd-919f-6d8f30a71a8c

EFF has notified that Windows 10 sends the crypto hash of your drive (HDD or SSD) to Microsoft cloud service for no apparent reason.

It is the famed "DeviceEncryption" offer from Microsoft. It does not work on nearly all devices.
Also you HAVE TO use Microsoft account to enable this feature.

The system works so that if you forget your password and cannot anymore recover your encrypted files, you can get your hash from Microsoft and un-decrypt the drive.

Now here is a problem: Microsoft stores your hash information and if somebody steals it from Microsoft, then he also has access to it. Or maybe someone manages to capture your network traffic when hash is being sent to Microsoft server. There are many possible scenarios.

Attached: critical process part deux.jpg (1600x900, 92K)

Other urls found in this thread:

docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10
news.softpedia.com/news/windows-10-shouldn-t-upload-encryption-keys-to-microsoft-privacy-watchdog-says-525147.shtml
fixitalready.eff.org/win10/#/
twitter.com/SFWRedditImages

Wow, it's almost as if big companies collaborated with the US government in order to not let people have proper safe encryption.

Or the most plausible scenario, Microsoft just sells it to them

Attached: 1536441966050.jpg (700x525, 91K)

>sells

Hasn't this been happening since W10 launched? And can't you just save the key to an external drive instead?

> Encryption requires Microsoft account

Not sure if trolling or just stupid...

if you really cared about that you wouldn't be using windows. knowing how retarded normalfags are this is a good thing.

If you're using the encryption method included with Windows you do. It will not let you enable it unless you use a M$ account

>The system works so that if you forget your password and cannot anymore recover your encrypted files, you can get your hash from Microsoft and un-decrypt the drive.
how convenient.

just use veracrypt
like
rofl

>If you're using the encryption method included with Windows you do. It will not let you enable it unless you use a M$ account
Bullshit.

Bitlocker works fine without a Microsoft account.

Go be stupid somewhere else.

Nice try FBI

It's there as an alternative if you don't want to save spare keys to external hard drive or print them.

>Or maybe someone manages to capture your network traffic when hash is being sent to Microsoft server. There are many possible scenarios.
No one wants Jow Forums's Ryzen fetishism or donkey porn.

people use their computers for other things than shitposting. for work, school etc. imagine someone stole your 100 word essay you had to write

B-but my video games! I need to keep defending windows so i can keep playing my video games!

>for no apparent reason.
>The system works so that if you forget your password and cannot anymore recover your encrypted files, you can get your hash from Microsoft and un-decrypt the drive.
so there is a reason?
>Also you HAVE TO use Microsoft account to enable this feature.
that's because it stores the decryption key in your onedrive, optionally. if you're not logged in a microsoft account it doesn't do that.
this feature is mainly meant for portable devices like the shitty 8" tablets that came out when Windows 8 was released, because most of those BitLocker the drive during initial setup and don't really have a way to store the key on external media.

By law the information has to be provided for free to governmental agencies. They can only ask the agencies to pay for building the infrastructure necessary to interface to their systems.

>imagine someone stole your 100 word essay you had to write
For what purpose? It is not time-effective to find where that person lives/works, then to proceed to use aircrack or a wireless sniffer and hopefully find the right wifi signal I am on, so he can try his best to use a password list ripped off the internet to crack the wifi three-way handshake and then finally sniff my network traffic where he hopefully catches the packages that contain my essay. That person saves time writing his own essay.

>Autistic screeching
Go be stupidly autistic somewhere else...

never underestimate Jow Forums autists. hacking someones pc could be easier than writing an essay

>still trying to defend this
You were BTFO several posts ago. Why are you even still trying?

>You were BTFO several posts ago.
[Citation needed]
Bitlocker does not require a Microsoft account.

not much you can do when you get a gag order anyway right?

>[Citation needed]
Here you go faggot. Do your own homework next time

docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10
>If the device is not domain joined, a Microsoft account that has been granted administrative privileges on the device is required.

> Reading comprehension is hard
Okay jackass, here you go.

The recovery key can be saved to a USB drive or printed.

Maybe have an idea what you're talking about next time...

It says right fucking there that you need a Microsoft account, and yet you're still moving the goalposts.

just another reason to stay on win7

that's for bitlocker device encryption which, as outlined in , is for tablets that can't save the key to removable media, and is not the same as normal bitlocker encryption.

>EFF has notified that Windows 10 sends the crypto hash of your drive (HDD or SSD) to Microsoft cloud service for no apparent reason.
Just tell us what's pertinent--does ALL Windows 10 devices send that information to M$ or only those who uses a Microsoft Account/is running device encryption?

try reading the article and/or the thread, retard.

> I've never used a thing and don't know what I'm talking about.
Bitlocker does not require a Microsoft account, or a domain, I haven't moved shit, and you still don't know what you're talking about.

>no apparent reason.
>telling people this
>believing this

Pretty much the bad side of Jow Forums in a nutshell.

My desktop is literally encrypted with bitlocker without an Microsoft Account.

Article is paywalled brainlet.

I'd just like to interject for a moment. What you're referring to as GNU/Linux, is in fact, a cult, or as I've recently taken to calling it, GNU cult.

I don't get it, you have to opt-in with an account knowing exactly that the keys are sent up to cloud for recovery. What's the problem again?
You an already use bitlocker and export the keys yourself and not have to upload them. This has been the case for fucking years why is someone trying to shill this shit now?

it's not?
links to news.softpedia.com/news/windows-10-shouldn-t-upload-encryption-keys-to-microsoft-privacy-watchdog-says-525147.shtml
and fixitalready.eff.org/win10/#/
see pic related for screenshot of googlet translated article.

Attached: 2019-03-03T17:15:27.png (572x724, 125K)

1. This is FAR from new news and has been known about for YEARS. It was introduced in the same update that allowed you to login to your PC using your Microsoft account.
2. There are ways around it. You can install Windows as normal and enable Bitlocker after. I think if you setup Windows to login using your Microsoft account, then you will be forced to backup the key to the cloud. I have a windows install that is bitlockered and I never attached any microsoft account (don't have one).
3. It is a dumb feature, but it's a feature designed for dumb people. Imagine you are a brainlet, 99% chance if you encrypt your files your eventually going to forget your password and get locked out and not have a backup. This way if you get locked out, you can hit "forgot password" and go through normal steps to recover Microsoft account and unlock your drive. It's not for hiding your CP from the NSA, it's to stop some asshole whos stolen your laptop from emptying your paypal account with the password you saved in secret.txt on your desktop, or stop someone copying your c:\nudes\ folder.

This has to be a joke, right?
>uploading encryption keys
What the fuck

Well Windows as a whole is a joke, so there's that.

>included
>lists 3rd party shit
RETARDEDDEDEDEDEDEDEDED

>BitLocker
>third party
are you alright?

Reading comprehension is hard...