this post was submitted on 04 May 2025
1177 points (96.9% liked)

linuxmemes

24808 readers
3376 users here now

Hint: :q!

Sister communities:

Community rules (click to expand)

1. Follow the site-wide rules

2. Be civil
  • Understand the difference between a joke and an insult.
  • Do not harrass or attack users for any reason. This includes using blanket terms, like "every user of thing".
  • Don't get baited into back-and-forth insults. We are not animals.
  • Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
  • Bigotry will not be tolerated.
    • 3. Post Linux-related content
  • Including Unix and BSD.
  • Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of sudo in Windows.
  • No porn, no politics, no trolling or ragebaiting.
    • 4. No recent reposts
  • Everybody uses Arch btw, can't quit Vim, <loves/tolerates/hates> systemd, and wants to interject for a moment. You can stop now.
    • 5. πŸ‡¬πŸ‡§ Language/язык/Sprache
  • This is primarily an English-speaking community. πŸ‡¬πŸ‡§πŸ‡¦πŸ‡ΊπŸ‡ΊπŸ‡Έ
  • Comments written in other languages are allowed.
  • The substance of a post should be comprehensible for people who only speak English.
  • Titles and post bodies written in other languages will be allowed, but only as long as the above rule is observed.
    • 6. (NEW!) Regarding public figuresWe all have our opinions, and certain public figures can be divisive. Keep in mind that this is a community for memes and light-hearted fun, not for airing grievances or leveling accusations.
  • Keep discussions polite and free of disparagement.
  • We are never in possession of all of the facts. Defamatory comments will not be tolerated.
  • Discussions that get too heated will be locked and offending comments removed.
    • Β 

    Please report posts and comments that break these rules!

    Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't remove France.

    founded 2 years ago
    MODERATORS
    poopsmith@lemmy.world
    zephyr@lemmy.world
    rtxn@lemmy.world
    1177
    Microsoft secured my files! (lemmy.world)
    submitted 1 day ago by yesman@lemmy.world to c/linuxmemes@lemmy.world
    203 comments fedilink hide all child comments
     

    Back in January Microsoft encrypted all my hard drives without saying anything. I was playing around with a dual boot yesterday and somehow aggravated Secureboot. So my C: panicked and required a 40 character key to unlock.

    Your key is backed up to the Microsoft account associated with your install. Which is considerate to the hackers. (and saved me from a re-install) But if you've got an unactivated copy, local account, or don't know your M$ account credentials, your boned.

    Control Panel > System Security > Bitlocker Encryption.

    BTW, I was aware that M$ was doing this and even made fun of the effected users. Karma.

    (page 3) 50 comments
    sorted by: hot top controversial new old
    [–] phoenixz@lemmy.ca 55 points 1 day ago (4 children)

    Meanwhile in Linux with luls, which I've had since a pre-pre-pre version somewhere back in the early 2000's, I can have multiple keys, all works like sunshine, never had problems.

    On windows... So we work with highly sensitive data, and ever since I came in I thought it insane that people working remote don't have that highly sensitive data encrypted. We can't switch Linux yet, so okay, we go for BitLocker.

    Boy oh boy oh boy was that a mistake.

    50 remote users, 5 get encrypted devices with BitLocker as a trial and within a month, 3 of them already got locked up permanently because apparently it'll pwrma lock itself after x amounts of invalid passwords which is just incredibly stupid. But don't worry, there is a backup key! Yeah, that is lie 48 characters that we'd had to pass by phone and they have to type it flawlessly.

    Suffice to say, the remote users will be running Linux soon, like it or not.

    [–] lud@lemm.ee 6 points 1 day ago (1 children)

    apparently it'll pwrma lock itself after x amounts of invalid passwords which is just incredibly stupid. But don't worry, there is a backup key! Yeah, that is lie

    If you only used TPM for bitlocker with no pre-boot authentication or something similar, it's possible that you had the "MaxDevicePasswordFailedAttempts" policy configured. Apparently that is configured by default if you use the security baseline.

    IMO it makes a lot of sense to lockdown and require bitlocker recovery if there has been a few failed attempts.

    We use bitlocker on probably over 1000 devices I don't believe we had any substantial issues with it. Of course users occasionally get locked out, but that should be planned for and a process should be in place to help them.

    I suggest deploying windows hello or smart cards to reduce the dependency on passwords. Window hello for business is especially great since it's free, secure and way easier and faster for users to use, especially if your devices have fingerprint readers or face recognition. I wish Linux and MacOS had anything as useful as Windows Hello.

    [–] Lv_InSaNe_vL@lemmy.world 1 points 22 hours ago

    Yeah I'm with you. I also manage about 800 devices at my current role and I've never had any major issues with BitLocker.

    I'm tempted to think they're just lying but that's a little mean. Maybe they just didn't know? I don't know but BitLocker is not the problem here.

    [–] starman2112@sh.itjust.works 25 points 1 day ago (3 children)

    Yeah, that is lie 48 characters that we'd had to pass by phone and they have to type it flawlessly.

    Wouldn't be so bad if everyone knew their Alpha Bravo Charlies

    My one talent: alpha bravo charlie delta echo foxtrot golf hotel India Juliet kilo Lima mike November Oscar papa Quebec Romeo Sierra tango uniform Victor whiskey x-ray Yankee Zulu, typed using voice to text

    load more comments (3 replies)
    load more comments (2 replies)
    [–] Godort@lemm.ee 52 points 1 day ago* (last edited 1 day ago) (1 children)

    Not that it helps now, but you can also dump your bitlocker recovery key through powershell and save it independently.

    (Get-BitLockerVolume -MountPoint "C").KeyProtector

    [–] yesman@lemmy.world 27 points 1 day ago (2 children)

    The control panel dialogue allows you to do this as well. Control Panel > system security > Bitlocker encryption. But it also has the superior option which is to turn it off.

    I didn't loose any data BTW. I had my M$ account info, and a backup besides.

    [–] dan@upvote.au 23 points 1 day ago (13 children)

    But it also has the superior option which is to turn it off.

    Why would you not want to encrypt your files? My Linux systems are encrypted too.

    load more comments (13 replies)
    load more comments (1 replies)
    [–] randomname@sh.itjust.works 1 points 21 hours ago* (last edited 21 hours ago)

    they've been doing this for a long time. the issue you are having is the reason I keep bitlocker disabled on my desktop. on devices that can be stolen I still use it.

    [–] Mwa@lemm.ee 15 points 1 day ago (4 children)

    Why cant windows copy luks and let you choose your own password

    [–] Irelephant@lemm.ee 14 points 1 day ago (2 children)

    because people will set hunter2 and be done with it.

    [–] VitoRobles 18 points 1 day ago (1 children)

    How did you get my password?

    [–] Achsonaja@sh.itjust.works 10 points 1 day ago

    All I see is *******. What do you see?

    load more comments (1 replies)
    [–] lud@lemm.ee 3 points 1 day ago (1 children)

    You can use pins, passwords, TPM, a usb key, or multiple in combination. But generally TPM is the best option for most users

    load more comments (1 replies)
    load more comments (2 replies)
    [–] dohpaz42@lemmy.world 20 points 1 day ago (4 children)

    Thank you for the word of warning. Does this affect Windows 10 as well?

    [–] Wrufieotnak@feddit.org 5 points 1 day ago

    Might be, so better check like this user did:

    Just checked my wife's laptop. Local account, secure boot off, windows 10. It had a message telling me to setup a microsoft account to 'finish encrypting the device'. I clicked turn off, and it's currently decrypting the hard drive. Blech.

    load more comments (3 replies)
    load more comments
    view more: β€Ή prev next β€Ί