Live data from Hacker News

Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

techcrunch.com

41–50 of 694 posts

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#41

This is almost certainly users who elect to store their BitLocker keys in OneDrive. Don't think Apple wouldn't do the same. If you don't want other people to have access to your keys, don't give your keys to other people.

> Don't think Apple wouldn't do the same.

Except for that time they didn't.

https://www.apple.com/customer-letter/

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#43

This is almost certainly users who elect to store their BitLocker keys in OneDrive. Don't think Apple wouldn't do the same. If you don't want other people to have access to your keys, don't give your keys to other people.

Just use open source encryption

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#44
post #4

> Microsoft told Forbes that the company sometimes provides BitLocker recovery keys to authorities, having received an average of 20 such requests per year. At least they are honest about it, but a good reason to switch over to linux. Particularly if you travel. If microsoft is giving these keys out to the US government, they are almost certainly giving them to all other governments that request them.

Why take the drastic step of switching to linux (a difficult endeavor) when you can simply turn off key uploading.

Why continue to use an operating system that’s adversarial towards you?

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#45
It's interesting how many comments these days are like, "well of course".

Back in the day hackernews had some fire and resistance.

Too many tech workers decided to rollover for the government and that's why we are in this mess now.

This isn't an argument about law, it's about designing secure systems. And lazy engineers build lazy key escrow the government can exploit.

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#46
post #26

This is almost certainly users who elect to store their BitLocker keys in OneDrive. Don't think Apple wouldn't do the same. If you don't want other people to have access to your keys, don't give your keys to other people.

> Don't think Apple wouldn't do the same. Of course Apple offers a similar feature. I know lots of people here are going to argue you should never share the key with a third party, but if Apple and Microsoft didn't offer key escrow they would be inundated with requests from ordinary users to unlock computers they have lost the key for. The average user does not understand the security model and is rarely going to sto…

Apple's solution is iCloud Keychain which is E2E encrypted, so would not be revealed with a court order.

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#49
post #23

This is almost certainly users who elect to store their BitLocker keys in OneDrive. Don't think Apple wouldn't do the same. If you don't want other people to have access to your keys, don't give your keys to other people.

It is the default setting on windows 11 to share your key with microsoft.

It's also the "default" in Windows 11 to require a recovery bitlocker key every time you do a minor modification to the "bios" like changing the boot order

Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

#50
post #5

FYI BitLocker is on by default in Windows 11. The defaults will also upload the BitLocker key to a Microsoft Account if available. This is why the FBI can compel Microsoft to provide the keys. It's possible, perhaps even likely, that the suspect didn't even know they had an encrypted laptop. Journalists love the "Microsoft gave " framing because it makes Microsoft sound like they're handing these out because they lik…

The "reasonable default" is to force the user to actually make the choice, probably after forcing the user to prove they understand the implications.
Post reply on HN