Yes! This happened to me when I turned off the ‘safe boot’ on a laptop via BIOS. It locked me out but I had never agreed to install Bitlocker in the first place, let alone know what key I was supposed to have. It was a total loss & I had to wipe the drive.
MS is hot trash.
The decryption key is saved in the Microsoft account, the error message explains that
I also almost got a panic attack when my Lenovo updated the bios and i was locked out
Yeah it can happen, when you force people without their consent encrypting their data.
Forcing people is one thing, not telling them its a thing is completely different. Most Windows users dont even know their Windows has bitlocker enabled and those keys are out of their sight
Isn’t that what Iphone and Android already do?
The only phone manufacture that does that is Google with pixel. Any other phone is for my knowledge either “weakly” encrypted or not at all.
Still your Mobile OS isnt just upgrading and encrypting your SD card and main drive. Thats the point.
All devices launching with Android 10 and higher are required to use file-based encryption.
To use the AOSP implementation of FBE securely, a device needs to meet the following dependencies:
- Kernel Support for Ext4 encryption or F2FS encryption.
-
Keymaster Support with HAL version 1.0 or higher. There is no support for Keymaster 0.3 as that does not provide the necessary capabilities or assure sufficient protection for encryption keys. -
Keymaster/Keystore and Gatekeeper must be implemented in a Trusted Execution Environment (TEE) to provide protection for the DE keys so that an unauthorized OS (custom OS flashed onto the device) cannot simply request the DE keys. - Hardware Root of Trust and Verified Boot bound to the Keymaster initialization is required to ensure that DE keys are not accessible by an unauthorized operating system.
https://source.android.com/docs/security/features/encryption/file-based?hl=en
Android I think just uses same credentials you use to unlock account, at least I am not aware of any recovery key. And you are prompted for credentials from time to time so it is harder to forget. I use fingerprint as main unlock + pattern and I have to enter pattern roughly once a week I think.
On Windows if you set up Windows Hello (fingerprint or PIN usually), you are not reminded to enter password afterwards so eventually you can forget it. And if you do not know your password and cannot recover account, you will not be able to retrieve BitLocker recovery key. So fix to this problem could be another annoyance to users if it would be implemented as Android does it.
Huh … I never noticed. Probably because my phone OS never failed to boot, requiring me to pull data off the HDD directly.
Samsung is notorious for this.
One major difference is that it is so much easier to lock yourself out of the desktop TPM chip compared to mobile device security chips because they’re not tightly coupled.
and phones make you use your unlock pin often, so people are forced to remember it. on the other hand windows lets you use a short pin instead of your full account password pretty much forever which results in people forgetting the password completely.
That isnt even the part it is encrypted, the TPM encryption is either “Automatic” or over a password (any length) on startup so far i know it from my work with Bitlocker (tpm 2.0) on windows 10. Idk if this is different on windows 11.
Different threat model and usage scenario. See the spilled milk comment.
deleted by creator
Yeah, nothing important. Just your banking apps, personal documents, photos, government apps, emails, all the services linked to your phone via mobile number, personal chats, work chats, 2fa codes, some other not important stuff. But at least it doesn’t have your games. Unless you play games on your phone, then you are fucked.
For many, a mobile device is their sole computer, and things of importance to them are stored on it.
Le banking app.
But THAT is recoverable EASILY, not like lost forever if you dont recover data from that phones storage.
Something like OTP are rather more important.
Well, I wasn’t talking about recovery, but need for encryption.
I guess thats true.
No you’re right, nobody has precious photos or videos on their phone 🙄
deleted by creator
I backup my precious dick pics at several offsite locations by sending them to as many people as possible as often as possible.
8-
This is a post about people who don’t understand encryption.
You’re assuming they actually understand proper data protection procedures. You have a very misplaced amount of faith in the knowledge of the average person. Plenty of people just expect stuff to work and are horrified when they realize they’re not.
I saw that all the time when I worked in mobile phone sales/support.
Surprise, surprise.
Forcing security measures onto someone who doesn’t understand them or know how to recover their data if something goes wrong is a bad idea.
How are these people losing access to their MS accounts on their computers?
All the time, then people get ran around in circles, are given a too technical explanation and give up more often than not.
The encryption is not inherently a bad thing, but forcing people into account creation is where the trouble starts. With piss-poor customer support as the cherry on top, this should never be allowed.
I’d say it’s a bad thing because it’s the wrong threat model as a default.
More home users are in scenarios like “I spilled a can of Diet Sprite into my laptop, can someone yank the SSD and recover my cat pictures” than “Someone stole my laptop and has physical access to state secrets that Hegseth has yet to blurt on Twitch chat”. Encryption makes the first scenario a lot harder to easily recover from, and people with explicit high security needs should opt into it or have organization-managed configs.
I agree, the encryption should be deliberate choice. And we’ve said nothing yet about the impact on performance.
You used to almost be forced to make a recovery CD or USB when encrypting a drive, now people don’t even know how ‘important’ the MS account actually is.
“Someone stole my laptop and has physical access to state secrets that Hegseth has yet to blurt on Twitch chat”.
Thanks for making laugh. It’s been a while.
Windows is ransomware now
Nailed it, that is how ransomware works.
in Italian gangster voice “Hey Buddy, give me your information, fair price for security, eh?, What? Do you not trust me? Buddy, you may lose your information, we wouldn’t want that, right?, just make an account I’ll handle the rest”
Fix that title gore please
Windows 11 users reportedly losing data due to Microsoft’s forcedWindows 11 users reportedly losing data due to Microsoft’s forced BitLocker encryptionTagging OP @moe90@feddit.nl until they quit being a lazy bitch and actually fix their title.
I mean, it’s kind of not incorrect:
Windows 11 users reportedly losing data due to Microsoft’s forced Windows 11
I had a stroke reading the thread title.
The lost data is appearing inThe lost data is appearing in this thread.
@moe90@feddit.nl clearly doesn’t give a shit. They’re a serial poster.
lol @moe90@feddit.nl posted and logged off, they have a life! (I gotchu moe)
Mod coulda fixed fix huh or maybe that’s dangerous
It has too much data
new form of encryption just dropped
deleted by creator
Must have been a massive monitor.
ShitLocker
I’m in favor of a heavy handed push towards encryption, I think most people don’t realize how important this is (now more than ever), but windows should be guiding and educating on this not requiring, and it should have absolutely nothing to do with an email address or online account.
On a home PC, what for? The only data that really matters to be encrypted is my keepass database file. Giving the option is fine but I don’t think it should done without asking the user to choose.
That’s what I said.
Im unfortunate to live in a country where the police can now quite easily enter a residents home and take their computer and use any data on it against them. Encryption can at least slow their nefarious efforts. I think most people should utilize encryption.
I live in one where refusing to decrypt it for them results in a 2 year prison sentence.
And yes, if you forget you will still be charged.
All of the data I actually care about is stored on a NAS and backed up in triplicate. The only data actually on my PC are program files.
I didn’t expect Windows to become THAT shit. Well it’s good for Linux I guess.
It tech here. Yup sure does. For enterprise customers it gets saved in active directory anyway. But for home users, no way. For new devices I always create a local account and turn off bitlocker if it happens to be enabled. Most people don’t remember their email password, some don’t even remember their email address. So many times I’ve had to remove the drive of a dead PC or laptop and copy all their files off of it, because people just don’t make backups. But already happenend a few times now that a private customer got suckered into making a Microsoft account by one of those full screen pop ups. Probably set it up with an E-Mail some relative of theirs created just so they can download stuff of their Phones App store. And all their stuff just gets automatically encrypted. Bye Bye all the photos you had taken for the last 10 years. Thanks Microsoft.
Why isn’t this a thing for me? Because I skipped MS account creation? So many Win11 issues I read about on here and I get almost none with my vanilla ISO install.
HEY, moe90!
FIX YOUR FUCKING TITLE
don’t you mean, “FIX YOUR FUCKING TITLEFIX YOUR TITLE FUCKING lazy ass”
😂😂
Dude has a stutter be cool
Something broke.
I blame bitlocker.
