Forgot your password?
typodupeerror

Comment Re:This may be a boon for people locked out. (Score 1) 69

It presents you multiple dialogue boxes when doing so and explains the importance of your key.

If you turn on Bitlocker manually, sure. Not if Device Encryption turns on automatically.

https://support.microsoft.com/...

it wouldn't work since apparently the OP's sister doesn't know her Microsoft password (in which case she can't provision the laptop in the first place).

Obviously she knew it at one time. The computer doesn't stop working when device encryption turns on. For the average user, the first time they realize it's even on is when it fails to unlock automatically due to an update / corruption and asks for the recovery key. This could be years later.

Comment Re:So not a big deal (Score 1) 139

I think you're missing the purpose of this. Should every country take action now? Yes. Should the average citizen be worried? No. Emergencies like this are more about the governments taking the correct actions, not causing a panic. This means, for example, tracking who is coming into the country from people who have been in contact with the infected.

Comment Re:Most requested feature...that you removed (Score 1) 89

until you deliberately removed it for no good reason.

They were doing a ground-up rewrite of the shell to eliminate technical debt and use newer graphical APIs that can handle things better like display scaling and acceleration.

That's fine. The problem is that the new standard is to introduce something new that's only half-finished while removing the old and then slowly over years add missing features back. It's the same problem with Classic vs "New" Outlook. For some reason, the Control Panel is still here after 10+ years of trying to get the Settings app to be feature complete so I don't know why they thought they had to fully remove the old start menu / explorer.

Comment Re: Surprised that automatic unlock is a risk? (Score 1) 69

The TPM is supposed to rely on a hardware signature match before unlocking. Booting from alternate media would fail that test and the TPM won't hand over the keys. And in fact, YellowKey does require you to boot from the internal drive into the recovery environment. Apparently the recovery environment unlocks the drive and relocks it.

Looking further, it uses some kind of pending file change tool in the System Volume Information folder to put a file on (I think) the mounted recovery system while the drive is unlocked so that it doesn't break the signature. Apparently Windows shipped the PE with an option to read an .ini file and just not re-lock the drive if an option is set.

This wouldn't be possible if you were modifying a binary because it wouldn't match the signing keys. But since they included an option to trivially set an .ini file, you are good. I'm betting you could manually create the file in the recovery environment too. The theatrics of the PoC with the flash drive seem to be more to obfuscate things.

Comment Re: This may be a boon for people locked out. (Score 1) 69

Microsoft does store the key to your Microsoft account for non-managed computers. What it doesn't do is tell you the email address you used to create that account on the recovery screen.

At least for Macs, most Mac users have an iPhone that is signed into the same iCloud account and is also a trusted device that can be used to reset the password for that account.

Comment Re:This may be a boon for people locked out. (Score 1) 69

At no point does it either enable itself - there's no mechanism for it to do so

You buy a computer with Windows 10/11 Home.

You sign in with a Microsoft account.

Microsoft backs up your encryption key and starts encrypting the drive. Yes, they call it "device encryption" and not Bitlocker, but that's only semantics because they had already branded Bitlocker as a Pro feature.

Comment Re:What does the science say? (Score 1) 85

drone application (spot application) Ag-Chem companies have been doing the last several years

Even that is probably more than needed. Ground-based drones could just trim back anything that isn't your preferred crop to near the ground. Leaving a short trimmed layer of weeds would probably help with soil erosion problems.

Comment Re:Ideologically fueled insanity. (Score 1) 287

requirements that electric companies *must* buy all electricity solar/wind farms produce

National infrastructure is a natural monopoly and should never be in the control of any corporation. I get your point about the free market, but why are we still leaving it in the hands of whichever company got there first? The grid should be just a transit network and the "buying." There is no "market" because it isn't economically feasible to build multiple sets of infrastructure.

We don't have state/federal highways that are run by private companies. Actually, that's not true. The Chicago Skyway is a "toll bridge" that is still considered as part of the federal Interstate highway system. There are a handful of others.

Slashdot Top Deals

Mausoleum: The final and funniest folly of the rich. -- Ambrose Bierce

Working...