Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

techspot.com

Post reply on HN
Print view View original

141–150 of 280 posts

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#141

Post by Brian_K_White »

naasking wrote: post #125
Brian_K_White wrote: post #89

Earlier quoted context omitted.

But nothing has changed. It's fair to say it's silly, jeuvenile, but it's also fair to say MS deserve absolutely no normal respect you would pay a turd. Maybe the poster actually is 12 and we all have a right to be 12 for a while. There's always a new generation discovering today what we discovered 30 years ago.

Nothing has changed? Microsoft is a huge open source contributor now, produced one of the largest open source ecosystems in use (.NET) and provides free access to the biggest open source software repositories (GitHub). Sorry to say, but believing nothing with MS has changed is deranged.

Nothing has changed except that it's even worse now than before, and the venue or arena changes every few years (os to developer tools to office to cloud etc). vscode or .net core or whatever you think is so valuable does not make MS your friend any more than giving you free IE did. Come the fuck on. It is beyond ignorant to try to make this argument. (or it's perfectly consistent with having a financial interest)

I guess if there are always new 20 year olds just discovering something, that must mean there are also always new 15 year olds that haven't discovered it yet, and 80 year olds that have gone Dawkins and lost what they had, and the just plain ignorant or unobservant with no real excuse.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#142

Post by edoceo »

naasking wrote: post #125
Brian_K_White wrote: post #89

Earlier quoted context omitted.

But nothing has changed. It's fair to say it's silly, jeuvenile, but it's also fair to say MS deserve absolutely no normal respect you would pay a turd. Maybe the poster actually is 12 and we all have a right to be 12 for a while. There's always a new generation discovering today what we discovered 30 years ago.

Nothing has changed? Microsoft is a huge open source contributor now, produced one of the largest open source ecosystems in use (.NET) and provides free access to the biggest open source software repositories (GitHub). Sorry to say, but believing nothing with MS has changed is deranged.

I view it as new paint on same crappy house.

They had to do the open-source thing for .NET because of external pressure - not because they've changed.

They had to get GitHub because of the eyeballs. It's not some altruistic play.

In both cases some VPs spun it around, juked the stats and got their bonus.

The first E of EEE feels so good makes you forget the inevitable outcome. Like heroin.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#143

Post by MrDarcy »

cortesoft wrote: post #124
etchalon wrote: post #114

Earlier quoted context omitted.

Someone who doesn't have better options?

If you have those sorts of skills with a computer, you will have other options

Then you pay him since you see the value he’s creating so clearly.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#144

Post by squigz »

0x3f wrote: post #131
cortesoft wrote: post #124

Earlier quoted context omitted.

If you have those sorts of skills with a computer, you will have other options

Really depends on your background doesn't it? You could have convictions, be sanctioned, have visa problems, or all kinds of things that are not easily solvable.

To say nothing of mental health issues.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#145

Post by josefx »

naasking wrote: post #125
Brian_K_White wrote: post #89

Earlier quoted context omitted.

But nothing has changed. It's fair to say it's silly, jeuvenile, but it's also fair to say MS deserve absolutely no normal respect you would pay a turd. Maybe the poster actually is 12 and we all have a right to be 12 for a while. There's always a new generation discovering today what we discovered 30 years ago.

Nothing has changed? Microsoft is a huge open source contributor now, produced one of the largest open source ecosystems in use (.NET) and provides free access to the biggest open source software repositories (GitHub). Sorry to say, but believing nothing with MS has changed is deranged.

> produced one of the largest open source ecosystems in use (.NET)

Are they going to ship an official cross platform UI library any time the next century? Decades after the Java lawsuit they still ship only a crippled copy of their scrapped Microsoft JVM for other platforms.

> Microsoft is a huge open source contributor now

Aren't almost all of their contributions for integration with their proprietary technology?

> Sorry to say, but believing nothing with MS has changed is deranged.

Yes, they got worse. They maintained Windows XP for ages and you could actually feel the improvements they shipped. Windows 11 meanwhile makes me wait for them to add a robotic arm with a knife as hardware requirement, to improve the backstabbing experience.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#146

Post by [deleted] »

mr_mitm wrote: post #54
krisbolton wrote: post #30

Earlier quoted context omitted.

I read it as the author is / was going through the vulnerability disclosure process with Microsoft and they're annoyed for unclear reasons and decided to publicly disclose, rather than being an insider.

How would that leave them homeless?

[deleted]

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#147

Post by qingcharles »

0x3f wrote: post #131
cortesoft wrote: post #124

Earlier quoted context omitted.

If you have those sorts of skills with a computer, you will have other options

Really depends on your background doesn't it? You could have convictions, be sanctioned, have visa problems, or all kinds of things that are not easily solvable.

Indeed, and this guy's personality seems a little "difficult" which might make the interview process short. I've known people with insane skills who have such weird personalities that they never get hired. Doing remote bug bounty stuff is a blessing for them.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#148

Post by [deleted] »

embedding-shape wrote: post #18

Seems this traces back almost a week, from Nightmare-Eclipse who is the researcher who found this: Tuesday, 12 May 2026 - "Here are the links, yes, two vulnerabilities this time [YellowKey] [GreenPlasma] [...] Next patch tuesday will have a big surprise for you Microsoft" Wednesday, 13 May 2026 - "I can't wait when I will be allowed to disclose the full story, I think people will find my crashout very reasonable and…

[deleted]

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#149

Post by GolfPopper »

cortesoft wrote: post #124
etchalon wrote: post #114

Earlier quoted context omitted.

Someone who doesn't have better options?

If you have those sorts of skills with a computer, you will have other options

Good with computers and good with people/job search/finances are not the same thing, and are often inversely correlated.

Re: Security researcher says Microsoft built a Bitlocker backdoor, releases exploit

#150

Post by qingcharles »

layer8 wrote: post #88

Better writeup: https://infosec.exchange/@wdormann/116565129854382214 The published exploit doesn’t affect Bitlocker with a PIN, without which Bitlocker isn’t secure anyway. The original author claims they have an exploit that also works with a PIN, but hasn’t provided any proof of that.

And there is a level above PIN with Bitlocker too, you can have a USB stick with a key on it which you use only during boot. I would imagine that is secure from this attack as the data isn't even stored on the device (I hope).
Post reply on HN