> Modern SSD controllers encrypt all data by default. Contrary story from 2018/9: > The security researchers explain that they were able to modify the firmwar

> Modern SSD controllers encrypt all data by default. Contrary story from 2018/9: > The security researchers explain that they were able to modify the firmware of the drives in a required way, because they could use a debugging interface to bypass the password validation routine in SSD drives. It does require physical access to a (internal or external) SSD. But the researchers were able to decrypt hardware-encrypted data without a password. The researchers write that they will not release any details in the form of a proof of concept (PoC) for exploit. * https://borncity.com/win/2018/11/06/ssd-vulnerability-breaks-bitlocker-encryption/ https://borncity.com/win/2018/11/06/ssd-vulnerability-breaks... > Microsoft is aware of reports of vulnerabilities in the hardware encryption of certain self-encrypting drives (SEDs). Customers concerned about this issue should consider using the software only encryption provided by BitLocker Drive Encryption™. On Windows computers with self-encrypting drives, BitLocker Drive Encryption™ manages encryption and will use hardware encryption by default. Administrators who want to force software encryption on computers with self-encrypting drives can accomplish this by deploying a Group Policy to override the default behavior. Windows will consult Group Policy to enforce software encryption only at the time of enabling BitLocker. * https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV180028 https://msrc.microsoft.com/update-guide/en-us/vulnerability/... > Although Windows ships with its own full volume encryption tool called BitLocker, SSDs that claimed to offer their own hardware-based encryption were trusted by the tool and left alone. > Now though, after a recent update to Windows 10, Microsoft will assume that connected SSDs don't actually encrypt anything. * https://www.techradar.com/news/microsoft-will-now-encrypt-new-ssds-with-bitlocker https://www.techradar.com/news/microsoft-will-now-encrypt-ne...