Earlier quoted context omitted.
Where did you get that they are stored in plaintext?
The title of the article: "Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops"
Doesn’t say they were stored in plaintext.
Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
621–630 of 694 posts
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#622Earlier quoted context omitted.
What laptops would you recommend? I didn’t realise framework laptops struggled with Linux?
I bought and returned an AMD Framework. I knew what I was getting into, but the build quality + firmware quality were lacking, sleep was bad and I'm not new to fixing Linux sleep issues. Take a look at the Linux related support threads on their forum. I've been using AMD EliteBooks, the firmware has Linux happy paths, the hardware is supported by the kernel and Modern Standby actually works well. Getting one with a Q…
We have Elitebooks at work and can confirm that the 8x0 series, at least until G8, has superb Linux support out of the box (and I run Arch, by the way). IME it's actually better than Windows, since both my AMD and Intel models have had things not working on Windows (the AMD still often hangs during sleep).
> Getting one with a QHD to UHD screen is mandatory
But I have to ask: are those screens actually any good? Ours have FHD panels, and I have not seen a single one with a decent screen.
There are roughly two categories: either the el-cheapo screens, with washed-out colors (6 bpp panels on a 1500 EUR laptop!) and dimmer than the moonlight through closed shades, but they have usable angles; or the "sure view" version with very bright backlight, usable outside (not in direct sunlight, of course) with, on paper, ok colors (specs say 100% sRGB) but laughably bad viewing angles (with the sureview off, of course) and, in practice, questionable color fidelity.
These are also fairly expensive, around 1500 EUR, and the components are of questionable quality. The SSDs in particular are dog-slow (but they're very easy to replace).
I have two 5-year-old 840 G8s (one Intel, one AMD), and they have both held up fine, but I usually don't abuse my laptops (my 2013 MBP still looks brand new aside from some scratches). However, looking around at my colleagues' laptops, they tend to fall apart, and I can count on one hand the ones still in good shape. The usual suspects seem to be the barrel power connector and the keyboard. Newer models only have USB-C AFAIK (mine have both, but came with a USB-C power adapter in the box). But they tend to look pretty bad in general, with very misaligned panels and fragile USB ports.
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#623Earlier quoted context omitted.
Sadly VeraCrypt is not optimized for SSDs and has a massive performance impact compared to Bitlocker for full disk encryption because the SSD doesn't know what space is used/free with VeraCrypt.
i want to see some real world numbers about that "massive" impact of trim, which is repeated regularly. first of all trim only affects write speed (somewhat), which is not really all that important for non-server use. it also has some impact on wear which is probably more interesting than its performance impact.
The performance loss can be substantial on modern NVMe drives, up to 20 times slower. But I was wrong about the reason for the performance loss, it's not TRIM but how VeraCrypt handles I/O operations. You can see some numbers real numbers in this Github issue: https://github.com/veracrypt/VeraCrypt/issues/136
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#624This is not a big deal and in fact it's been a thing for over a decade. If you're resourceful enough, you can do it yourself.
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#625Earlier quoted context omitted.
In the startup world, BYOD is/was exceedingly common. All but two jobs of my career were happy to allow me to use my own Linux laptop and eschew whatever they were otherwise going to give me. Obviously enterprises aren’t commonly BYOD shops, but SMBs and startups certainly can be. … whether the people who would do such BYOD things are at all likely to be Windows users who care about this Bitlocker issue, is a differe…
I’ve been diving down the BYOD rabbit hole recently. At enterprise scale it’s not “hook in with your vpn, job done”, it’s got to be managed . Remote wipe on exit, prove the security settings, disk encryption, EDR. What this means for the user is your personal device is rather invasively managed. If you want Linux, your distro choice may be heavily restricted. What you can do with that personal device might be restric…
Any good reading tips on doing managed Linux devices in a startup/SMB?
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#626Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#627Earlier quoted context omitted.
That's not the point. Microsoft shouldn't be silently taking your encryption key in the first place. The law doesn't compel them to do that.
It's not silent. It tells you when you set up BitLocker and it also allows you to recover the drive.
Doesn't sound like it tells you now that it's default, but I'll see what it says next time. If they make the key-sharing clear and make it easy to disable, then it's fine.
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#628Earlier quoted context omitted.
Is your last name Segurakreischer? Have them try - leave the Windows computer online and accessible, give your parents a linux box and have them use it exclusively unless they absolutely 100% need to get back on the Windows machine for some reason, and talk with you about it. Set up a NAS with an external HD and a shared folder on both the windows and linux box, so if they actually do need to go back to Windows, they…
Or just let them use whatever they want…
I mentioned this in my reply, but I am the one that’s expected to fix the computers when they break.
If I am going to be playing free IT duty, I do not think it is unreasonable for me to have a say in what the computer runs.
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#629[dead]
Re: Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
#630Earlier quoted context omitted.
From the linked Apple page... "For additional privacy and security, 15 data categories — including Health and passwords in iCloud Keychain — are end-to-end encrypted. Apple doesn't have the encryption keys for these categories, and we can't help you recover this data if you lose access to your account. The table below includes a list of data categories that are always protected by end-to-end encryption." The FileVaul…
> Apple does not have access to them Unless they are given a warrant, then they magically have access to your encrypted data. https://www.businessinsider.com/apple-fbi-icloud-investigati... If they can get access to your icloud, they can get access to your laptop if you store your decryption key in your keychain.
The apple support link above has a table showing what apple has access to depending on if the user has Advanced Data Protection on or not.
The link you posted shows that the FBI got access to icloud and found screenshots saved there -- not the device; if the guy would have had ADP on all the FBI would get is mail, contacts, calendar data saved to icloud as Apple wouldn't have the key for the rest of it.