815
Microsoft Gave FBI Keys to Unlock Encrypted Data, Exposing Major Privacy Flaw (www.forbes.com)
submitted 6 months ago by to c/technology@lemmy.world
112 comments fedilink hide all child comments
 

cross-posted from: https://lemmy.bestiver.se/post/879557

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 6 months ago (1 child)

Grey area, user chose to store the private bitlocker key to their online Microsoft acct, it's optional. It's still a dirtbag move, but probably less illegal.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 6 months ago (1 child)

    While optional, it is also the default behavior.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 6 months ago (1 child)

    it's default in that it's the top item on the list, but I can't actually fault them much here, that dialog is crystal clear and you have to log into a Microsoft account to save it there. They don't really push you very hard to put the key into their cloud.

    I fault them more for not using zero-knowledge encryption to protect the user's key.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 6 months ago (1 child)

    the other options won't let you continue without performing the actions in a way that windows likes. So for someone trying to set up their PC, only the first option has zero cost.

    option two requires an external drive without encryption

    option 3 requires setting up a printer from that screen, so you can print the page. it won't let you continue otherwise.

    if you want to back up in some other way, you just don't (or use PDF conversion from the print dialog)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 6 months ago

    They want the key, verifiably off the box, in clear text. Any usb stick. any sd card. Not great, but not any barrier that's worse than needing to setup a microsoft account.

  • permalink
  • fedilink
  • source
  • parent