4 ms·

> I had already tried various things to my own employee laptop, but I was not local admin and the disk was fully encrypted. Hang on, if he can boot his laptop

> I had already tried various things to my own employee laptop, but I was not local admin and the disk was fully encrypted. Hang on, if he can boot his laptop does it not follow that he has the necessary information to decrypt the drive?

medlazik 8y ago
He means he can't put the disk in another machine to get the good stuff
viraptor 8y ago
Probably standard bitlocker. You get decrypted drive automatically, windows can use it, but you only get access to your files, and you can't decrypt and not boot windows. You have to hack local admin for that.
- Buge 8y ago
  Because of the TPM right? If you use bitlocker without a TPM you could boot to a live Linux USB and decrypt the bitlocker drive with dislocker.
  - medlazik 8y ago
    USB boot most probably disabled in bios
    - Buge 8y ago
      Ok, then physically remove the drive and plug it into a Linux computer.
      - medlazik 8y ago
        Right, hence why nobody uses bitlocker without a TPM ;)
        Buge 8y ago
        My personal desktop uses bitlocker without a TPM.
        ams6110 8y ago
        I have, because the laptop I was using didn't have a TPM. Also (possibly wrongly), I trust my ability to remember a good passphrase more than I trust the TPM to not have bugs.
      - deleted 8y ago
        [deleted]
  - nebulous1 8y ago
    Yeah, it appears the correct answer is TPM. Thanks.
  - fulafel 8y ago
    If you use Bitlocker, there's a high probability that the crypto is nonexistent or so flawed that it can be trivially be cracked: https://www.bleepingcomputer.com/news/security/flaws-in-popular-ssd-drives-bypass-hardware-disk-encryption/ https://www.bleepingcomputer.com/news/security/flaws-in-popu...