Back in January Microsoft encrypted all my hard drives without saying anything. I was playing around with a dual boot yesterday and somehow aggravated Secureboot. So my C: panicked and required a 40 character key to unlock.
Your key is backed up to the Microsoft account associated with your install. Which is considerate to the hackers. (and saved me from a re-install) But if you’ve got an unactivated copy, local account, or don’t know your M$ account credentials, your boned.
Control Panel > System Security > Bitlocker Encryption.
BTW, I was aware that M$ was doing this and even made fun of the effected users. Karma.
Bit late to this thread but I know a few commands that might help if you’re stuck:
manage-bde -off C:(or any other drive) This decrypts the volume and turns off bitlockermanage-bde -lock/unlockmanage-bde -protectors -get C:(or any other drive) This displays your 48-digit key. I suggest you store it somewhere, just to be safe.Get-BitlockerVolumereveals which of your partitions are encrypted with Bitlocker.Disclaimer: I am not a terminal nerd, I just had similar problems years ago and went down the rabbit hole, used these commands and turned off bitlocker permanently. I don’t use windows anymore, but when I did, it didn’t cause any problems with bitlocker after this. If you’re concerned about your un-encrypted hard drives, consider using Veracrypt (carefully!) or similar open source encryption software.
Windows is the virus.
Fuck Microsoft.
I remember back in highschool a buddy encrypted his harddrive, didn’t backup his key. He Lost ALOT when I upgraded his comp
But how is that relevant to your ‘Fuck Microsoft’ if he knowingly encrypted his device, which is how you make it sound?
I’ve enabled FDE on one of my Linux devices, I’ve already had to mount the filesystem in a rescue environment once because a failed update caused the system to be unable to boot. I would also have been hosed if I had lost the encryption key. Ok not really, because that’s what backups are for, but you hopefully get the point.
From what I gather though other memes, It looks like Windows 11 is enabling Bitlocker by default.
I know, and the ‘fuck Microsoft’ is completely warranted for that. But shouting that and then coming up with a story where somebody enabled it themselves and subsequently lost their key, that doesn’t make a lot of sense. Unless it was to illustrate the dangers of FDE, but in that case the point could have been made a bit clearer.
That’s not a Microsoft issue. Loose your key and the door will stay close whatever it is.
I mean you can write your Bitlocker key down and store it safely or put it somewhere else safe… Lol
The main problem here is Bitlocker is being turned on by default on fresh 24H2 installs, most people that don’t know how to bypass the online account requirement are making burner Microsoft accounts (Boomers), therefore do not know the credentials in 3-4 years when their computer needs a repair.
Alright, lol, I’ll be the guy
Hey OP, ever heard of Linux?
I just leave secure boot/bitlocker off when it comes to my home system. It wasnt something I “needed” when I was dual booting windows 10 and it’s not something I’m gonna enable now that I’m using 11.
It’s not ”leaving bitlocker off”, though. It’s ”be aware about it and turn bitlocker off manually” since it’s enabled by default in the latest updates.
That’s false. My Windows partition didn’t magically enable bitlocker and I’m on 24h2. LTSC build and local account tho.
They can’t do that legally without notifying our asking in eu
I tried having it on my new laptop for a bit. It took like a week for Windows to kill the secure boot key for my Linux partition. Even after I disabled secure boot I couldn’t get it to boot up so I had to reinstall. Just left it turned off afterwards.
Its just not worth the trouble for a home pc imo
I’ve been preaching about this for a while. Many modern systems are getting bitlocker turned on by default.
If your system gets messed up, or simply won’t start because of some security vendors bad update, goodbye data. You need the recovery key, and if you don’t have it, you’ll never see your bits the the correct order again.
They also do spyware. They just renamed it “AI.”
and also Recall
Rectal is what it’s called I believe?
Microsoft Rectal
Recall Rec all Record all, their not even being subtle about it anymore
My god it’s all true 🤯
Can you remind me what that “recall” is?
It logs literally everything you do with screenshots, then sends it to M$ despite their assurances that it would be local only.
Super invasive!
Thanks, it was hard to recall
I’m not aware of them uploading the screenshotted data, not for now anyways.
The data is indexed and parsed somehow. The last report on it that I saw had a picture of a semi-famous person be properly indexed under the person’s name, despite it being a picture that was taken by the person talking about recall, which means the image was not public. Whatever recall was doing, it analyzed the picture, and that’s probably not a local process.
It takes a screenshot every five seconds and runs an LLM over it to extract text. Then there’s a UI where you can query it for what you did in the past.
It came under fire when they wanted to introduce it last year, because it stored all that data on your disk in unencrypted form. Meaning if anyone manages to run malicious code on your system, they don’t need to do the collecting themselves anymore, but can rather just send off any screenshotted passwords or whatever other secret things you might’ve been doing on your PC at any point in time. In particular, Microsoft had claimed that the data would be encrypted and it wasn’t. Didn’t even need special permissions to access it.
No idea, if they fixed the encryption now, or if this is just a case of the shitstorm having died down, so they roll it out now. But yeah, even with encryption, the implications aren’t great. If your parents or boss or law enforcement want to know what you were doing on your PC, they now have an exact history. And Microsoft could still change their mind and decide to upload all your data at any point in the future.
Doesn’t that take a ton of CPU/Memory?
Yeah, good question. I imagine the screenshotting itself is largely negligible, although obviously not free either. I don’t know when the LLM gets to do its job. Theoretically, it could be delayed until some point where there’s not much going on on your PC.
At some point, Microsoft wanted to roll out these AI features only on PCs which have an NPU, which is basically an additional CPU with a different architecture optimized for pattern recognition and such. I don’t know, if they still hold onto that requirement, but it would mean that it wouldn’t hog your CPU at least.
They have been somewhat desperate to roll out Recall, because it was the only semi-useful out of a handful of features that they came up with to somehow integrate AI into Windows. So, that’s why I’m never quite sure, what requirements they’re still holding onto.
https://en.wikipedia.org/wiki/Microsoft_Recall
Basically takes screenshots and stores them, then scans them and makes the text searchable. There’s been a bit of controversy over it lately and how it deals with PII/PHI.
Open your mind!
Did they change it from “telemetry” to AI now?
Unless the “telemetry” has been removed, shouldnt there be “added extra” instead of “renamed”?
Telemetry is exclusively for internal data collection and the inevitable sale of it. Recall is also for data collection but provides a user interface to access a slice of that data under the guise of the whole thing being a “feature”.
Telemetry isnt always collected to be sold. Open source projects often collect crash data to improve the software
Sure, but we’re talking about Microsoft here. When was the last time they actually improved any of their software?
They added windows explorer tabs a couple years ago. Does that count?
I think they renamed everything to copilot
Office365 is now Copilot 365
This happened to me once and I had to redo my coursework over the weekend…now I use Fedora :D
They desperately wanted to eliminate personal computers and replace them with dumb terminals running over the net.
When the public rejected this idea
THIS is their response. They are still insisting on total control of our computers.
They desperately wanted to eliminate personal computers and replace them with dumb terminals running over the net.
I don’t know about that.
Dumb terminal concept was more what Chromebook was doing.
Microsoft is doing something even stupider.
MS execs blathered about “the age of software running locally being over” long before Chromebooks.
I think they want you to only use Windows and pay for cloud storage.
By enforcing BitLocker and Secure Boot, they are trying to eliminate dual-booting (you don’t need to dual-boot Windows/Linux anyway, as you can just use WSL2 /s).
By enforcing disk encryption, in general, they try to force the use of cloud storage, by making data recovery nearly impossible. Most people are probably too lazy to buy external storage, and manually copy their files over.
This guarantees 2 money streams. One from Windows’s tracking/advertising and the other from OneDrive subscriptions.
It does not guarantee any revenue stream. It is just incompetence
Data recovery isn’t impossible. You can easily back up the recovery key. This is just typical Microsoft shit design.
My parents wouldn’t even notice that their computer decided to encrypt their files. And they will blame the service guy for not being able to recover their photos, in case of hardware failure.
deleted by creator
you don’t need to dual-boot Windows / Linux anyway
Exactly, as I can just wipe the disc and install OpenBSD.
Dumb terminal concept was more what Chromebook was doing.
I mean, for a lot of people they’re fine especially if they’re priced appropriately. Especially with a lot more software as a service out there. My problem is that all of them have a built in drop dead date on when they’re going to stop getting updates and there’s not really a great option for the devices post ChromeOS.
ChromeOS certainly can be a good system. I still have my old CR-48 from when I got selected to test the OS and even when it was in its infancy, it was solid. I used it for a lot of my college career because it was better than my Asus eeePC which had Ubuntu on it.
I had an Intel Chromebox that I ran galliumOS on. The problem is locked bootloaders which should be illegal
I have never bought a device I could not own completely and flash the rom with what I want. Except once I had iPhone 3 but it was easily jail broken, but I still feel dirty. How can someone think they own and control something I bought? There is something fundamentally wrong with that and I agree it should be illegal
Agreed. It’s unacceptable that things have gotten this.had. we need to fight back
If my Chromebook could run Linux or even pure Android, I’d probably use it way more often. But it being a locked down distro with android bolted on is useless to me.
- I can’t really do anything major on it that I can on a cheap laptop
- I can’t really use it for the same games or programs on Android, as the form factor really gets in the way, even in tablet mode.
It feels like the worst of both worlds. It’s fine for people who use a laptop/OS as a bootloader to a web browser, its not fine for weirdos like me.
You could always put Linux on it. I believe there is a way to do that for most ChromeBooks nowadays.
I tried, doesn’t work. There’s no documentation for my laptop or its board codename. I briefly got it to consider an Arch Linux ARM ISO but it just looped an error code on boot until you turned it off.
Funny thing is that a cheap netbook has stats that would be fine for anything we did in the 90’s maybe even some games too
The Chromebook I have, is overall fine. It runs ChromeOS pretty well, and most web pages don’t make me beg for more RAM or CPU. ChromeOS does a fine job, to the point I wonder if I ran Arch or something on it, it’s a crapshoot.
I think most laptops these days, even the cheap ones, are probably fine when you run a light OS on em. I’ve used computers that were 10 years old and ran most things decently well.
I’ve got an entry level desktop from 2009 I’m gonna throw arch on and run some stuff
Just wait until you learn about Intel’s Management Engine…
Not to mention DRM. They want to own your computer and prevent any kind of modification so that movie producers give them money.
Movie producers?
Yeah, shit like HDCP is pushed by the film and TV industry.
Not really. Your problem in us is the lobbying lawyers. It’s a political systematic problem. The demonic corp entities that crave endless growth will never not do anything that could potentially suck any data from or control a customer. The ones that get “money” for things like this are your law makers. The Republican authoritarian faschists are the winners, along with billionaires that can afford to buy laws. No movie producer. No one in any business except exploitation on the mass scale can profit from these moves. In some countries it is illegal. In the us it is business
No idea how you say all that but can’t put together which industry specifically benefits from HDCP.
So not movie producers. You just mentioned them as another category being fucked? Because that’s what they are
The film industry benefits from HDCP and all DRM, they aren’t being fucked. I’ve looked back over the conversation, I think you have it flipped in your head.
Good thing PCs aren’t locked into Windows.
yet
Good luck locking loose mainboards sold for the DIY market, which don’t come with anything installed by default, to a given OS, the only way that could maybe work is forcing the OS in ROM.
Another way would be to discontinue the socketed desktop form factors and replace them all with mini PCs that are as locked down as the current Macs.
Thinking for two seconds:
MS pays Google to start enforcing some device verification thing so you can only view a good chunk of the Internet if you pass verification? (Assumes Google goes even harder making the web Chrome-focused)
Ooh Cloudflare could be invited to the party here too. Constant CAPTCHAs if you’re not on an MS AUTHENTI-PC! device. (Think Private Access Token)
…fill in the gaps friends 😉 you know MS has already debated all your “suggestions” anyway
Google already does precisely that with their “open source” mobile OS. People underestimate how easily these guys can ruin stuff
:( tell me more?
First off, Google has made agressive deals with phone manufacturers to ship spyware with their phones by default, and some of the stuff can only get taken out by rooting/jailbreaking the phone. By doing so, they acquired nearly 100% of the app store market share, and then used it to make “useful features” such as integrity checks that are tied to the Play Services app (which is an always on spyware background app).
The end result is, even if you manage to root your phone and install a custom ROM (which is not always available to every model), a bunch of apps will refuse to work properly because you fail the Google Play fingerprinting steps and are assumed to be a security vulnerability. If I’m not mistaken there’s also some shady stuff with certificates, too
So you’re suggesting MS will somehow block non-Windows OSes from installing, even on hardware like loose mainboards for building your own PC with, or even on barebones mini PC kits or certain laptop SKUs, which don’t ship with an OS installed to begin with and expect the user to install it themselves? I mean, unless something extreme happens like changing the entire PC platform to be like the current Macs, that won’t be feasible.
Also, doing that would kill the Steam Deck which I doubt Valve would take sitting down.
No. You know nobody can do that. It’s illegal almost everywhere to even try. But in usa maybe happening soon. They can still import parts for years until they ban that too
SecureBoot pretty much does this. There is nothing preventing motherboard manufacturers from blocking adding non-MS keys if they wanted to.
No just some laws
Except AFAIK loose mainboards aimed at the DIY market, as well as barebones kits, don’t ship with SecureBoot turned on by default and an off switch for that is mandatory to the PC spec.
Ah no
so you can only view a good chunk of the Internet if you pass verification
/
Constant CAPTCHAs
Get Google & Cloudflare to make the internet suck if you didn’t pay Microsoft[‘s vendors] “enough” for hardware
Just sounds great doesn’t it?!
This is already part of the trusted computing spec its called “remote attestation” I would actually expect it more targeted at multimedia who are hot to keep you from copying their stuff and banks.
This has been happening to people randomly for years. Ysed to get calls about it all the time, and that was pre-covid
🤔 shit… you right
Could you elaborate?
If you encrypted your disk/partition, the lock is stored in the luks header. But if that one is broken, you cant decrypt anything even if you remember your key and all data is lost.
Thanks!
As I understand it this shouldn’t concern me if my backups are full disk images via Clonezilla, as those should already include the LUKS header, correct?Correct.
Thanks!
Always have backups! Doesnt matter what OS you use, stuff will break eventually.
I prefer bootable full system images to my NAS for easy restores, and online file backups, both running daily.
3-2-1 rule : 3 backups 2 different types of storage 1 copy off-site
Yup, I treat the ‘3’ as 3 copies of data, so the first copy is just my working system, and the other 2 are various backups.
Just checked my wife’s laptop. Local account, secure boot off, windows 10. It had a message telling me to setup a microsoft account to ‘finish encrypting the device’. I clicked turn off, and it’s currently decrypting the hard drive. Blech.
I need to check my girl’s laptop.
Good now we know that
Which version of Win 10 are you using? My girl’s Win 10 Pro laptop is still unencrypted.
It’s not which version, it’s where you are. They follow some laws here some there and now that the US is fascist they roll out features like this on these easy targets first
Oh, ok. I am in EU.
They cannot push this to eu, mine is also not encrypted
Windows 10 Home
Shit they do this on windows 10 too? I should check my girl laptop too.
