3 ms·
> This authentication exploit bypasses the login screen despite BitLocker, so it's technically a BitLocker bypass No. No, it is not. Let me give a similar exam
by Jon_Lowtek 6y ago
> This authentication exploit bypasses the login screen despite BitLocker, so it's technically a BitLocker bypass
No. No, it is not. Let me give a similar example: lets say the drive requires a PIN and i ask the user to enter the PIN, then i still get to the starting conditions of this article.
Technically i could argue it now includes a social engineering variant of a bitlocker bypass, but it should be very obvious there is no actual bypass, only an "assume it is open" precondition. The article has an "assume the device is configured in a way that i can walk right past bitlocker to the lockscreen" and then calls it "Bypassing BitLocker in 6 easy steps". No, just no. Not technically, not theoretically, just no.
Not to be unfair to the author, the lockscreen bypass is clever and teaches a lot about defensive coding. It is a good finding. But the article gets dragged down by the sensationalist title, because the content is not what it says it is.
- deleted 6y ago[deleted]
- bboygravity 6y agoThanks for just saving me a few hours of trying to decrypt an old hard drive with a corrupted Bitlocker that doesn't take the password anymore. The title indeed reads like it can break/bypass Bitlocker encryption, but it actually doesn't do that at all. As far as I know Bitlocker encryption can still not be cracked/hacked/decrypted/bypassed without the proper credentials (password/PIN/USB key/48-digit recovery key).