Remember when Microsoft told you you can't have Windows 11 because of your missing/old TPM wouldn't be secure enough?
Turns out it's all security theater.
Raspberry Pi Pico cracks BitLocker in under a minute
21–24 of 24 posts
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#22TFA: > If your hardware is vulnerable, mitigation can be achieved through the use of a PIN. Or, encryption passphrase on boot. But in that case, you just need two accesses: Add h/w keylogger, read h/w keylogger. You can at least make it somewhat more difficult by using ubsguard to prevent the most obvious keylogger ingress points.
And the usbguard must be installed in the initramfs, not the main system, right? Because the fde password is provided before most of the system loads.
I'm not sure. I know I've been unable to enter my encryption pass word because I had a new keyboard
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#23Earlier quoted context omitted.
> It looks like it would affect LUKS or others just as well. Except you can use good old password protected FDE on any major desktop operating system other than Windows Home Edition. > I can hack a lot of encryptions in seconds with a simple keylogger. A thief can't use your keylogger to decrypt a stolen laptop that's properly encrypted. A rogue recycling shop can't do that either. And kids won't be able to use, uh,…
> Except you can use good old password But one could not do that and be just as vulnerable. Same as you can use a PIN on BitLocker and be safe in this case. Which answers my question that this is not something BitLocker specific, just a bit of name dropping to garner more attention. Which is fine from the original author, not so fine from the journalists that picked it up. > So yes, it's kind of a big deal. You're no…
> But one could not do that and be just as vulnerable. Same as you can use a PIN on BitLocker and be safe in this case.
Right, but BitLocker is vulnerable by default whereas LUKS is not, because BitLocker relies on a TPM without a PIN by default whereas LUKS relies on a password by default. Yeah, technically this attack ain't BitLocker-specific, but I don't know of any other FDE implementation that defaults to using a TPM without a PIN/password.
Re: Raspberry Pi Pico cracks BitLocker in under a minute
#24Some prior art: https://dolosgroup.io/blog/2021/7/9/from-stolen-laptop-to-in...