3 ms·
The problem is that Microsoft gives users a false sense of security. Marketing speak for this feature is "Your device is always automatically encrypted", which
by t0mas88 12y ago
The problem is that Microsoft gives users a false sense of security. Marketing speak for this feature is "Your device is always automatically encrypted", which results in users thinking their data is safe. The content is then automatically backed up to Microsoft servers, to which users will not have much of an objection since it's encrypted anyway. But then behind their backs, Microsoft not only stores the encryption keys as a backup but also immediately shares them with the NSA that has full access to those backups.
So basically they fucked up three times: 1. Marketing encryption while it's not safe, 2. Storing accessible backups of your data on their servers and 3. Actively sharing those backups with the NSA.
Out of those, #1 would be an excusable thing that many companies do, #2 is a reason to mistrust them and #3 is a reason never to store anything with Microsoft ever again. It's just not acceptable to take my data, promise me it is encrypted, then lie about it and freely share my data with the NSA whenever they want.
- UVB-76 12y agoI think you are misunderstanding here. BitLocker is a full disk encryption system. Under the "device encryption" scheme discussed here, the recovery key is stored on Microsoft servers, but the content remains on the physical device. I assume if a user was to backup their data using one of Microsoft's other services (e.g. OneDrive), that data would be encrypted under a different regime. The BitLocker arrangement does provide users with some degree of security, in that an adversary would need access both to the physical device and the recovery keys on Microsoft servers to retrieve a user's data.
- tankenmate 12y agoPRISM (or NSL, or similar) + ANT (or 0 day hack or other) == compromised drive
- firepacket 12y agoI don't understand- how they are lying exactly? Don't they explicitly ask you if you want to backup your recovery key to the cloud? Is it really that hard to read prompts and change the default setting to manage your own key backup? If checking a single radio button is all it takes to NSA-proof your device, I'd say we are in pretty good shape. What is everyone complaining about?
- emergentcypher 12y agoYes, it is. It is well known that the battleground in all these areas is over what should be "default" settings because most people can't be bothered.