4 ms·
It's made quite a bit more difficult with FDE dependent on TPM and Secure Boot (like Bitlocker). Can't mount the drive from another machine or the same machine
by q3k 5y ago
It's made quite a bit more difficult with FDE dependent on TPM and Secure Boot (like Bitlocker). Can't mount the drive from another machine or the same machine with another OS running to modify the password file, can't run a bootkit like KonBoot to disable password checks.
- AnIdiotOnTheNet 5y ago> It's made quite a bit more difficult with FDE... FDE is orthogonal to user accounts, but yes it would prevent the trivial local access methods of taking over the admin account. Not that, you know, anything the user cares about requires an admin account to get at anyway, as ransomware has consistently proven.
- MAGZine 5y agoWhat a ridiculous argument. User files are important, but locking down admin access has solved a whole host of virus/security issues that were present in, say, windows xp. at the end of the day, users are responsible for the software they run on their machine. but viruses/worms that run amok are largely over thanks to restraining userland permissions.