this post was submitted on 11 Feb 2024

384 points (93.2% liked)

Technology

59161 readers

1967 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

384

Microsoft's Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi (www.pcgamer.com)

submitted 9 months ago by [email protected] to c/[email protected]

54 comments fedilink hide all child comments

Microsoft's Bitlocker & TPM encryption combo defeated with a $10 Raspberry Pi::The point of Microsoft's Bitlocker security feature is to protect personal data stored locally on devices and particularly when those devices are lost or otherwise physically compromised. With Bi

top 50 comments

sorted by: hot top controversial new old

[–] [email protected] 16 points 9 months ago* (last edited 9 months ago)

The concept and implementation of TPM use has been a joke since inception.

veracrypt or luks; bitlocker is a total joke.

[–] [email protected] 9 points 9 months ago

Yet we still can't crack Denuvo...

[+] [email protected] -6 points 9 months ago (2 children)

Requires physical access. A non-story outside of cybersec academia/research

[–] [email protected] 2 points 9 months ago

This is categorically false. Laptops are not a story but rather company property.

[–] [email protected] 19 points 9 months ago (1 children)

Bitlocker's threat model is physical access, though. And it's 50% of TPM's threat model too.

[–] [email protected] 0 points 8 months ago* (last edited 8 months ago)

Yeah which is why no one cares about either. The threat vector is usually not discussed and mostly ignored by non state-level actors in practice.

I do agree that it's fascinating. My master's degree thesis was on sourcing trust and eliminating various evil maid type attacks, including supply side targeted poisoned hardware aimed at state level.

[+] [email protected] 49 points 9 months ago* (last edited 1 week ago) (1 children)

[deleted]

[–] [email protected] 27 points 9 months ago* (last edited 9 months ago) (4 children)

There probably will someday be a push to prevent common normal people from having access to computer systems that offer the user root or superuser access. "ThE aVeRaGe PeRsOn DoEsNt NeEd AdMiN pErMiSsIoNs" or "think of the children". Ipads and surface pros will be allowed but something like a socket 1155 motherboard won't.

[–] [email protected] 11 points 9 months ago

We're gonna have problems getting enough software engineers in the future. How is anyone supposed to learn when everything is locked away. It's already happening in the repair industry and the trades.

[–] [email protected] 12 points 9 months ago

Someday? Canada is already trying to ban the Flipper Zero, we're living in your nightmare.

[–] [email protected] 6 points 9 months ago (1 children)

This is already happening with smart phones.

[–] [email protected] 3 points 8 months ago* (last edited 8 months ago) (1 children)

When the government starts taking away unlocked bootloader phones, I will be switching to ham radio instead of getting a locked down phone. Fuck the system.

[–] [email protected] 1 points 8 months ago

Sad thing is there is no way to securely communicate via ham radio.

But I'd be fully open to going pirate!

And with regard to unlocked bootloaders, I think it's the manufactures wanting to lock away choice and options that is the issue more than the government.

[–] [email protected] -1 points 9 months ago (1 children)

No one wants LGA1155 anymore anyway so it's Gucci, my i7-2600 was far past it's life span 5 years ago

[–] [email protected] 4 points 8 months ago (1 children)

Speak for yourself, I'll take anything that executes code and find a use for it

[–] [email protected] 0 points 8 months ago (1 children)

The IPC just isn't good enough of those chips anymore, making them really inefficient. You'd be better off buying a modern celeron

[–] [email protected] 2 points 8 months ago* (last edited 8 months ago) (1 children)

A modern celeron costs like 150 bucks after a motherboard and ram, you can buy an old pc that's bound for a landfill for like 20 bucks, and they are perfectly usable for something like a nas, a tor node, or a minecraft server

Edit: 150's a bit high prolly like 90 is possible

[–] [email protected] 2 points 8 months ago

The old wholesale of PCs for 20 buckeroos doesn't really exist here in the UK so I never considered that

[–] [email protected] 91 points 9 months ago (3 children)

Fake news. Nobody is getting a raspberry pi for $10 lol

[–] [email protected] 35 points 9 months ago (1 children)

I get your joke, but it's even cheaper than a "Raspberry Pi". Pi Pico, one RP2040 chip, that's basically RPi's new version of a Teensy. I just installed one in my GameCube to defeat its "BIOS" and boot from micro SD card :P

[–] [email protected] 17 points 9 months ago

I just installed one in my GameCube to defeat its "BIOS" and boot from micro SD card :P

Coolest thing I heard all day. Didn't know that was a thing.

[–] [email protected] 4 points 9 months ago

With shipping it's more than ten but on it's own it's 6,10 for the H model

[–] [email protected] 3 points 9 months ago (1 children)

Hey - hey member that time when Truecrypt was like, “Peace, we out. Use bitlocker. lol”

When’s the new Truecrypt coming out? Yeah yeah Veracrypt, I know. It’s cool, its just not. I dunno.

[–] [email protected] 8 points 9 months ago (1 children)

Veracrypt does fine

[–] [email protected] 1 points 8 months ago

I know, I know.

load more comments