Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor

Lee Duna@lemmy.nz · 2 months

YellowKey reportedly works in Windows 11, Windows Server 2022 and 2025, but not in Windows 10.

SleeplessCityLights@programming.dev · 2 months

BitLocker is basically malware, so who fucking cares. Far more people have it accidentally on and get locked out than people that have purposefully activated it.

TheEighthDoctor@lemmy.zip · 2 months

Companies care

SleeplessCityLights@programming.dev · 2 months

When I worked at an MSP, BitLocker cost companies thousands of dollars when it did something strange. User error has very catastrophic consequences with BitLocker and nobody that actually cares about security uses BitLocker. From my professional experience it is malware. The places where I have seen it used on purpose was because of policy bullshit and everyone agreed that it was a hindrance rather than an advantage.

TheEighthDoctor@lemmy.zip · 2 months

And from my experience in banking, healthcare and others; every company uses bitlocker on workstations, I saw EncFS once in dozens of companies audited.

SleeplessCityLights@programming.dev · 2 months

Using encryption on files systems is fine, but the Microslop Bitlocker implementation is awful. In any ecosystem that is not fully regulated BitLocker is a liability. I have had colleagues that could beat it.