• L3ft_F13ld!@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    83
    ·
    8 天前

    Surprise, surprise.

    Forcing security measures onto someone who doesn’t understand them or know how to recover their data if something goes wrong is a bad idea.

  • Landless2029@lemmy.world
    link
    fedilink
    English
    arrow-up
    63
    arrow-down
    2
    ·
    edit-2
    8 天前

    Fix that title gore please

    Windows 11 users reportedly losing data due to Microsoft’s forcedWindows 11 users reportedly losing data due to Microsoft’s forced BitLocker encryption

    • ogeist@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      2
      ·
      8 天前

      Nailed it, that is how ransomware works.

      in Italian gangster voice “Hey Buddy, give me your information, fair price for security, eh?, What? Do you not trust me? Buddy, you may lose your information, we wouldn’t want that, right?, just make an account I’ll handle the rest”

  • Rooki@lemmy.world
    link
    fedilink
    English
    arrow-up
    36
    arrow-down
    2
    ·
    8 天前

    Yeah it can happen, when you force people without their consent encrypting their data.

      • Object@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        20
        arrow-down
        1
        ·
        8 天前

        One major difference is that it is so much easier to lock yourself out of the desktop TPM chip compared to mobile device security chips because they’re not tightly coupled.

        • acosmichippo@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          8 天前

          and phones make you use your unlock pin often, so people are forced to remember it. on the other hand windows lets you use a short pin instead of your full account password pretty much forever which results in people forgetting the password completely.

          • Rooki@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            8 天前

            That isnt even the part it is encrypted, the TPM encryption is either “Automatic” or over a password (any length) on startup so far i know it from my work with Bitlocker (tpm 2.0) on windows 10. Idk if this is different on windows 11.

      • surewhynotlem@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        ·
        8 天前

        Huh … I never noticed. Probably because my phone OS never failed to boot, requiring me to pull data off the HDD directly.

      • OfficerBribe@lemm.ee
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        8 天前

        Android I think just uses same credentials you use to unlock account, at least I am not aware of any recovery key. And you are prompted for credentials from time to time so it is harder to forget. I use fingerprint as main unlock + pattern and I have to enter pattern roughly once a week I think.

        On Windows if you set up Windows Hello (fingerprint or PIN usually), you are not reminded to enter password afterwards so eventually you can forget it. And if you do not know your password and cannot recover account, you will not be able to retrieve BitLocker recovery key. So fix to this problem could be another annoyance to users if it would be implemented as Android does it.

      • Rooki@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 天前

        The only phone manufacture that does that is Google with pixel. Any other phone is for my knowledge either “weakly” encrypted or not at all.

        Still your Mobile OS isnt just upgrading and encrypting your SD card and main drive. Thats the point.

      • Lembot_0002@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        22
        ·
        8 天前

        Most people don’t have anything of importance on their phones. And the tuning options are almost absent on phones, so it is less problematic bug-wise.

  • ober9000@lemmy.world
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    2
    ·
    8 天前

    It tech here. Yup sure does. For enterprise customers it gets saved in active directory anyway. But for home users, no way. For new devices I always create a local account and turn off bitlocker if it happens to be enabled. Most people don’t remember their email password, some don’t even remember their email address. So many times I’ve had to remove the drive of a dead PC or laptop and copy all their files off of it, because people just don’t make backups. But already happenend a few times now that a private customer got suckered into making a Microsoft account by one of those full screen pop ups. Probably set it up with an E-Mail some relative of theirs created just so they can download stuff of their Phones App store. And all their stuff just gets automatically encrypted. Bye Bye all the photos you had taken for the last 10 years. Thanks Microsoft.

    • GoodLuckToFriends@lemmy.today
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 天前

      I just got bit in the ass by bitlocker when my laptop motherboard died. I had to do the unsafe bootloader hack to get back into the drive.

    • shalafi@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 天前

      Why isn’t this a thing for me? Because I skipped MS account creation? So many Win11 issues I read about on here and I get almost none with my vanilla ISO install.

  • ArkyonVeil@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    8 天前

    I’m of the opinion that encryption based security should be compartmentalized. IE, an encrypted folder, or “safe” app. Safes in housing are already a concept that is already commonly known so it would be natural to extend a safe into the digital realm. This would also help in the idea that safes are locked with a key, so if the user loses their keys, whatever is inside the safe, might as well be lost.

    Now if EVERYTHING is a safe, (always on encryption). People will never known the difference. Its a dangerous type of security that is likely to be more a loss than a benefit.

    • ouch@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      8 天前

      You are arguing for selective encryption, but I can’t really find any technical argument in your comment.

      Whether we are speaking of encryption at transit or rest, there’s a general consensus that encrypting everything is best in every way except possibly performance for select cases.

      For example, it allows hiding (meta)data about the really important bits, and with computers it’s really difficult to tell which bits of (meta)data could be combined to abuse. Tampering is a consideration as well.

  • ssillyssadass@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    1
    ·
    edit-2
    8 天前

    I’ve decided to switch to Linux come october. I have some reasons I wanna wait as long as I can, but come october I’m leaving Windows behind.

    • Lka1988@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      1
      ·
      8 天前

      I’ve decided to switch my gaming PC to Linux…a few weeks ago.

      No ragrets. My games run faster, I no longer need extra shit to make Windows work the way I want it to work, and I can remote into it however I want without running into artificial roadblocks.

    • muusemuuse@lemm.ee
      link
      fedilink
      English
      arrow-up
      6
      ·
      8 天前

      Get started early so you have time to acclimate and address issues. You are going to hate it if you urgently need your computer for something and something unexpected happens.

    • Captain Aggravated@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      8 天前

      If you’re new to Linux, I suggest at the very least starting to learn now. If you have a spare device you can install it on, an old laptop or something, dual boot on your existing machine or use Virtualbox…Start learning now, while you still consider Windows an option.

      My own journey to the Linux platform included several instances of the following scenario:

      I need to get something done. It’s simple, in Windows 7 I know how to do it in seconds. It’s so simple that I don’t know the words for it, just the thing to click to do it. But it doesn’t work that way in Linux, even the vocabulary is different, and you need this done right now because you’re working on something and you don’t have time to stop and learn this right now.

      Boot into Windows, get your job done and turned in. Then look up how to do it in Linux later. Eventually you stop hitting that wall.

      You’ve decided you have seven months. I’d get to it.

  • Imgonnatrythis@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    9
    ·
    8 天前

    I’m in favor of a heavy handed push towards encryption, I think most people don’t realize how important this is (now more than ever), but windows should be guiding and educating on this not requiring, and it should have absolutely nothing to do with an email address or online account.

    • Korhaka@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      edit-2
      8 天前

      On a home PC, what for? The only data that really matters to be encrypted is my keepass database file. Giving the option is fine but I don’t think it should done without asking the user to choose.

      • Imgonnatrythis@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 天前

        That’s what I said.

        Im unfortunate to live in a country where the police can now quite easily enter a residents home and take their computer and use any data on it against them. Encryption can at least slow their nefarious efforts. I think most people should utilize encryption.