I was wondering when a reporter would uncover this.

[artofalexcanemed@mastodon.social]

@GossiTheDog The latest situation has become crystal clear. Avoid the main-stream Social Media, avoid the big centralized software companies. Stick around with Fediverse, stick around with Open-Source Softwares. Or, you can get in trouble. ⚠️💯🔥

[xz@ieji.de]

@Brokar @GossiTheDog Brax is a grifter selling insecure hardware and software https://grapheneos.social/@GrapheneOS/114825638504244405

[matthewchat@mstdn.social]

@GossiTheDog Good day @protonprivacy where do you store your data for ProtonPass?

[amazing_helenab@mastodon.social]

@GossiTheDog weak to a cyberattack?

[matthewchat@mstdn.social]

@GossiTheDog @protonprivacy Oh - "limited resources so no longer posting on Mastodon".

[netscapenavigator@social.vivaldi.net]

@GossiTheDog

I feel vindicated — thank you!

I remember telling everyone this many years ago, and people acted like it was no big deal. So many had the mindset that if you had nothing to hide, you had nothing to fear, and therefore nothing to worry about. The prevailing attitude was essentially: “Trust Microsoft.”

Today, we know the government cannot always be trusted. You can follow every law, pay your taxes, and mind your own business — and the government (ICE, for example) may still kick in your door. Furthermore, we also know that large corporations like Microsoft will willfully hand over your data without so much as a warrant. Lastly, we also know that Microsoft Cloud, along with Amazon and Google, can go offline or be hacked.

I think about how many people blissfully chose to ignore all of this… this whole time… and how those of us who pointed out the obvious were labeled as crazy.

#BitLocker #Privacy #Security #Windows #Microsoft

[rubinjoni@mastodon.social]

@GossiTheDog *mild shock*

[cyphercryptic_reboot@defcon.social]

@GossiTheDog that's one reason why I had a local offline account before upgrading to Win 11 and enabling BitLocker. I then set BitLocker to not trust any TPM chip, even the one in my PC, and force the passcode being needed by default. My recovery media is on an encrypted drive as well, stored off prim.

[mpotter@social.coop]

@GossiTheDog Time to watch that Bill Gates pie-in-the-face video on repeat again.

[amlor@fux.am]

@GossiTheDog @zzt Don't worry, soon copilot will upload EVERYTHING to the cloud anyway, so law enforcement won't need those keys!

[xfox360@wien.rocks]

@shelldozer @GossiTheDog Wouldn't it be crazy if someone generated a million keys for LE to try?

[bytex64@awesome.garden]

@gwire @GossiTheDog I believe you only get the GUI on Professional, but you can set up bitlocker manually with local protectors on Home using the command-line. At least in Windows 10.

[muzicofiel@mastodon.nl]

@bert_hubert @barbarakathmann Zelfs je bitlocker key is niet veilig in #amerika #usa #microsoft willing to engance in support #fascism

[preston@tiggi.es]

@GossiTheDog No, I don't consider BitLocker to be super secure at all, frankly. 🐻 😅

[groxx@hachyderm.io]

@GossiTheDog SO many parts of bitlocker setup just screamed "dark pattern" and "we can access your data, but lol no we won't help you recover it", last time I tried to set it up. and then they locked a ton of the actually-decent stuff away from Home users, because consumers don't deserve safety.

Microsoft is a vile company.

[vol4life8657@tweesecake.social]

@serrebi @GossiTheDog If the FBI has a warrent and they sapena a company for access to data, microsoft feels it's obligated.

[groxx@hachyderm.io]

@gsprs @GossiTheDog they also work on ALL hardware, not just ones that Microsoft feels like supporting / have specific TPM features.

[movie2468@mastodon.social]

@GossiTheDog

From my knowledge, the following is true: sign in with MS account will store encryption key. It can be deleted. But is anything cloud really deleted?

Setting up computer as a local machine, from what I know, does not sync encryption keys. They change things frequently and I don’t trust MS, so still use caution.

Setting up a machine on Active Directory in an enterprise setting allows bit locker keys to be written to Active Directory, but I don’t believe it is enabled OOB.

[carpetbomberz@mastodon.online]

@GossiTheDog Time to get a Yubikey and see if they can get around that as a last line of defense. That's if you have admin and can install it yourself. No Yubikey? Good Luck with trying to enter that stupid bit -ocker recovery code. Ask me how I know. I FAFO'D

[x41h@infosec.exchange]

@groxx @GossiTheDog what?? Apple does the same thing which is why nobody should be using cloud accounts on their devices.