Microsoft’s Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi::The point of Microsoft’s Bitlocker security feature is to protect personal data stored locally on devices and particularly when those devices are lost or otherwise physically compromised. With Bi
It should be noted that this attack was demonstrated on a nearly 10 year old laptop that has the TPM traces exposed on the motherboard.
Most TPMs nowadays are built into the CPU which does not leave them vulnerable to this type of attack.
Its definitely sort or misleading but MS needs to really have its feet held to the fire when it comes to these things. It sort of pushes the narrative in the correct direction which is towards privacy AND security, not a half-ass balance where one or the other or both is compromised or is an illusion altogether
The Outlook stuff has demonstrated how fundamentally irresponsible and unserious they are about their obligation to secure and regulate their own systems, they need all the bad press they can get so they are compelled to do betwr
Fake news. Nobody is getting a raspberry pi for $10 lol
I get your joke, but it’s even cheaper than a “Raspberry Pi”. Pi Pico, one RP2040 chip, that’s basically RPi’s new version of a Teensy. I just installed one in my GameCube to defeat its “BIOS” and boot from micro SD card :P
I just installed one in my GameCube to defeat its “BIOS” and boot from micro SD card :P
Coolest thing I heard all day. Didn’t know that was a thing.
With shipping it’s more than ten but on it’s own it’s 6,10 for the H model
Yet another example of “hardware access is root access”
Pis are 10$ again? That’s the real story.
deleted by creator
deleted by creator
Correct. However, if you have a way to run a PowerShell command as an administrator, you can run a single cmdlet to get access to the bitlocker recovery key.
The concept and implementation of TPM use has been a joke since inception.
veracrypt or luks; bitlocker is a total joke.
Yet we still can’t crack Denuvo…
Hey - hey member that time when Truecrypt was like, “Peace, we out. Use bitlocker. lol”
When’s the new Truecrypt coming out? Yeah yeah Veracrypt, I know. It’s cool, its just not. I dunno.
Requires physical access. A non-story outside of cybersec academia/research
