Windows BitLocker 0-Day Vulnerability Enables Access to Encrypted Drives (cybersecuritynews.com)
from cm0002@lemy.lol to cybersecurity@infosec.pub on 16 May 05:47
https://lemy.lol/post/65638071

#cybersecurity

threaded - newest

pulsewidth@lemmy.world on 16 May 07:20 next collapse

I mean… with the amount of times Microsoft has just decided to BitLocker user drives without approval and then accidentally locked people out of it with bad updates, they should be offering bugs like this to the public via tools as a means to access their old Bitlocker-trapped files.

Good reminder that if you do ever have important files encrypted and lose access to them - put the files (or drive) aside if financially viable, it will likely become accessible in the near to mid-term future via incompetence/bugs/advances.

atro_city@fedia.io on 16 May 10:52 next collapse

Somebody was recently making fun of Linux vulnerabilities being found. As if Winblows is even remotely better.

atkdef@lemmy.dbzer0.com on 16 May 13:34 next collapse

github.com/Nightmare-Eclipse/YellowKey

Now why would I say this is a backdoor ? The component that is responsible for this bug is not present anywhere (even in the internet) except inside WinRE image and what makes it raise suspicions is the fact that the exact same component is also present with the exact same name in a normal windows installation but without the functionalities that trigger the bitlocker bypass issue. Why ? I just can’t come up with an explanation beside the fact that this was intentional.

redsand@infosec.pub on 17 May 02:37 collapse

This was part of a set of 4 exploits and yellowkey and greenplasma remain unpatched

Hirom@beehaw.org on 16 May 13:43 collapse

Windows is a toy OS, good enough to play video games. But many confused people think it’s okay to use for critical or sensitive operations.