5 ms·

>"Would you like to store a backup for your drive encryption password on Microsoft OneDrive? If you choose not to do so, and you forget your password, all of yo

by mejari 11y ago

>"Would you like to store a backup for your drive encryption password on Microsoft OneDrive? If you choose not to do so, and you forget your password, all of your data will be lost. [Yes/No]" You know when most people care about whether or not they can recover their data? It's not when someone asks them a Yes/No question, it's when they can't recover their data. And responding with "Well, remember 2 years ago when you clicked 'No'?" Doesn't really help.

JoshTriplett 11y ago
Which is a great reason why we should be seeking better authentication systems than memorizing random passwords. Or providing people with another means of backup; for instance, provide options to both "back up via print" and "back up to USB device", in both cases providing something you could then store in a secure location.
- jeeva 11y ago
  Which the Bitlocker stuff already does, when you run it manually. I suspect not with devices that come pre-encrypted - Surfaces, etc. I was going to say that the most likely thing folk have done is try to back up their key on the drive they encrypt - but last time I tried that due to not being on a network, I think the Bitlocker wizard refused to let me.
simoncion 11y ago
Then, don't make it a [Yes/No] question, make it an [Okay] with a barely noticeable "Change Advanced Settings" link; much like the dialog that the TFA complains about.
- MBCook 11y ago
  Why show the non-prompt? The users who don't want it can turn it off later, as is the case now.
  - simoncion 11y ago
    I want to encrypt my drive, but ensure that the encryption keys never leave systems that I physically control. I sure as hell don't want to encrypt my drive a second time because the default setting (that I could only change later, when I'm actually using the computer) for the drive encryption software was to upload the drive crypto key to The Cloud. Or am I misunderstanding your question?
  - TillE 11y ago
    "Later", as in after the key is sent to Microsoft? Not very useful.
PhantomGremlin 11y ago
Would you like to store a backup You're quite right in your response to the GP. It's dangerous to ask Joe Sixpack a question like this and accept a simple y/n answer. When people are installing software they are rushing thru w/o thinking. What the software could do is put something like this on the screen: DO NOT STORE A BACKUP OF MY PASSWORD and force the user to opt-out by literally typing all those characters exactly like that: DO NOT STORE A BACKUP OF MY PASSWORD At least that way it isn't an unthinking, rote response. Maybe also force them to type I UNDERSTAND ALL MY DATA WILL BE LOST Anyway, that would probably only help about half of them. The other half won't care until, as you point out, they can't access their data.

by mejari 11y ago

JoshTriplett 11y ago

Which is a great reason why we should be seeking better authentication systems than memorizing random passwords. Or providing people with another means of backup; for instance, provide options to both "back up via print" and "back up to USB device", in both cases providing something you could then store in a secure location.

jeeva 11y ago
Which the Bitlocker stuff already does, when you run it manually. I suspect not with devices that come pre-encrypted - Surfaces, etc. I was going to say that the most likely thing folk have done is try to back up their key on the drive they encrypt - but last time I tried that due to not being on a network, I think the Bitlocker wizard refused to let me.

simoncion 11y ago

Then, don't make it a [Yes/No] question, make it an [Okay] with a barely noticeable "Change Advanced Settings" link; much like the dialog that the TFA complains about.

MBCook 11y ago
Why show the non-prompt? The users who don't want it can turn it off later, as is the case now.
- simoncion 11y ago
  I want to encrypt my drive, but ensure that the encryption keys never leave systems that I physically control. I sure as hell don't want to encrypt my drive a second time because the default setting (that I could only change later, when I'm actually using the computer) for the drive encryption software was to upload the drive crypto key to The Cloud. Or am I misunderstanding your question?
- TillE 11y ago
  "Later", as in after the key is sent to Microsoft? Not very useful.

PhantomGremlin 11y ago

Would you like to store a backup You're quite right in your response to the GP. It's dangerous to ask Joe Sixpack a question like this and accept a simple y/n answer. When people are installing software they are rushing thru w/o thinking. What the software could do is put something like this on the screen: DO NOT STORE A BACKUP OF MY PASSWORD and force the user to opt-out by literally typing all those characters exactly like that: DO NOT STORE A BACKUP OF MY PASSWORD At least that way it isn't an unthinking, rote response. Maybe also force them to type I UNDERSTAND ALL MY DATA WILL BE LOST Anyway, that would probably only help about half of them. The other half won't care until, as you point out, they can't access their data.