Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops

Post by jcalvinowens » Fri, Jan 23, 2026, 7:13 PM UTC

dcrazy wrote: post #145

jcalvinowens wrote: post #78

Earlier quoted context omitted.

> Apple's solution is iCloud Keychain which is E2E encrypted, so would not be revealed with a court order. Nope. For this threat model, E2E is a complete joke when both E's are controlled by the third party. Apple could be compelled by the government to insert code in the client to upload your decrypted data to another endpoint they control, and you'd never know.

That was tested in the San Bernardino shooter case. Apple stood up and the FBI backed down.

Post by thewebguyd » Fri, Jan 23, 2026, 7:14 PM UTC

Aurornis wrote: post #75

ferrouswheel wrote: post #45

It's interesting how many comments these days are like, "well of course". Back in the day hackernews had some fire and resistance. Too many tech workers decided to rollover for the government and that's why we are in this mess now. This isn't an argument about law, it's about designing secure systems. And lazy engineers build lazy key escrow the government can exploit.

> Back in the day hackernews had some fire and resistance. Most of the comments are fire and resistance, but they commonly take ragebait and run with the assumptions built-in to clickbait headlines. > Too many tech workers decided to rollover for the government and that's why we are in this mess now. I take it you've never worked at a company when law enforcement comes knocking for data? The internet tough guy fantas…

Post by direwolf20 » Fri, Jan 23, 2026, 7:15 PM UTC

otterley wrote: post #65

tokyobreakfast wrote: post #52

Earlier quoted context omitted.

What is your proof they don't have a duplicate key that also unlocks it? A firm handshake from Tim?

If they say they don't, and they do, then that's fraud, and they could be held liable for any damages that result. And, if word got out that they were defrauding customers, that would result in serious reputational damage to Apple (who uses their security practices as an industry differentiator) and possibly a significant customer shift away from them. They don't want that.

Post by jjnoakes » Fri, Jan 23, 2026, 7:17 PM UTC

vanviegen wrote: post #111

Aurornis wrote: post #95

Earlier quoted context omitted.

> The real issue is that you can't be sure that the keys aren't uploaded even if you opt out. The fully security conscious option is to not link a Microsoft account at all. I just did a Windows 11 install on a workstation (Windows mandatory for some software) and it was really easy to set up without a Microsoft account.

And how do you know the keys are never uploaded if you don't have an account?

Post by SmellTheGlove » Fri, Jan 23, 2026, 7:23 PM UTC

matheusmoreira wrote: post #164

Aurornis wrote: post #5

FYI BitLocker is on by default in Windows 11. The defaults will also upload the BitLocker key to a Microsoft Account if available. This is why the FBI can compel Microsoft to provide the keys. It's possible, perhaps even likely, that the suspect didn't even know they had an encrypted laptop. Journalists love the "Microsoft gave " framing because it makes Microsoft sound like they're handing these out because they lik…

Power users should stop bothering with Windows nonsense and install Linux instead so that they can actually have control over their system. It's 2026. The abuses of corporations are well documented. Anyone who still chooses Windows of their own volition is quite literally asking for it and they deserve everything that happens to them.