Microsoft BitLocker

“handing over bitlocker keys (that get uploaded to MS by default when you sign in with a microsoft account) to the feds”

“BitLocker with pin is not vulnerable to that (or any other) attack.”

“A vulnerability can't leak your key if the TPM doesn't know the entire key and relies on the user to supply the missing parts”

“how is the time limit enforced? With hardware access, it would be easy to change time or increase the clock rate”

“A vulnerability can't leak your key if the TPM doesn't know the entire key and relies on the user to supply the missing parts of the key in the form of a PIN.”

“the default Secure Boot BitLocker configuration, for all its architectural tradeoffs, can probably be credited for an enormous amount of data loss mitigation”

“If you're at all serious about security and not user convenience, you deploy BitLocker with a PIN instead of TPM only.”

“BitLocker with a password (the equivalent of the LUKS configuration in question) does not share these issues.”

“Bitlocker is a few buttons in the UI, configurable via Group Policy”

“Except for the bitlocker vulnerability that lets someone with the physical computer bypass it.”

“Does the encryption keep the user's data safe if the device is lost or stolen? Yes? Then it fulfills its main purpose.”

“If you were using bitlocker to replace truecrypt, you'd have a boot password and this would not affect you at all.”

“There's nothing nefarious in this part, even if I think it exposes an unwisely large attack surface”

“My company doesn’t require use of Bitlocker at all, because all actual work happens on computers on-premises”

“automatically, without user consent, encrypt the storage drives preventing any computer use until the user goes to aka.ms”

“It's straightforward to configure BitLocker disk encryption to be more secure, but it creates enormous headaches for admins, so they don't do it.”

“I've always found it silly that Microsoft's default BitLocker implementation doesn't make it easy to do the obvious thing”

“so far as I know, protecting the TPM key with a PIN would mitigate this issue, but it's still bad.”

“anybody who has been paying attention has assumed for at least 20 years that all of Microsoft's shit is backdoored anyway”

“It seems undeniably a backdoor, why on earth would a very specific folder/file name and a specific boot combination just "magically" open up an encrypted drive.”

“That's something that even your Grandma can do, as opposed to installing VeraCrypt”

“back up your "full disk encryption" keys to your cloud account, completely unencrypted, and share them with the cops”

“the nice thing about Bitlocker is that you don't need to put in your key 99% of the time”

“a huge improvement and addresses many commonly known Full Disk Encryption vulnerabilities”

“It's a few clicks to choose to re-key and not have the key saved to your Microsoft account.”

“It's a fairly reasonable default setting for average users who simply want their data protected from theft.”

“There is reasonable suspicion, some might argue evidence, that Microsoft voluntarily cooperated with U.S. Intelligence Community”

“Microsoft has the right approach here with Bitlocker defaults”

“I trust BitLocker and Apple's encryption to protect my stuff against snooping thieves”

“making you vulnerable to data breaches, government requests, and corporate policy changes you have zero control over”

“Microsoft is offering a feature that keeps your data safe from thieves and stalkers”

“The difference is Microsoft has the keys to your front door, Apple only has an encrypted copy of your house (but no key).”

“while bitlocker may be backdoored in the same way, it is at least maintained”

“Companies know that putting themselves in a position where they can betray their users, means they will be forced to do so.”

“It's certainly a reasonable default. People lose or have their laptops stolen much more often than they get targeted by their governments.”

“Microsoft appears to store this data in a manner that can be retrieved through "simple" warrants and legal processes”

“Microsoft cares so little about privacy and security that they would do it just to end the help customers who lose their key support tickets”

“is still a hell of a lot better than the old default of no encryption”

“It protects their data in the event that someone steals the laptop, but still allows them to recover their own data later from the hard drive.”

“Bitlocker by default (although there is a convenient backdoor for high-paying customers”