• 0 Posts
  • 455 Comments
Joined 2 years ago
cake
Cake day: August 12th, 2024

help-circle

  • That is not the point of TPM only unlock. Tell me, can you access the files on a windows system that automatically unlocks bitlocker and then boots to the windows login screen? What can you read without a user password? If you try to boot a different OS and read the data from there, the bitlocker encrypted drive will not be automatically unlocked.

    Bitlocker TPM only mode is ment to protect against a stolen hard drive and attacks in which the whole laptop is accessed by attackers (like someone breaking into your hotel room while you are at breakfast). Now bitlocker is broken in TPM only mode and many vulnerabilities exist, but conceptually its purpose is not only to protect against a stolen hard drive.


  • To expand: both bitlocker and LUKS (what OP probably uses on Linux) can unlock without userinput from TPM or require a user password or use the TPM and a password. Its just the defaults are different. In all cases, the TPM/passwords are used to decrypt the Volume Master Key that is used to de/encrypt the actual disk. If you change your password you don’t have to reencrypt 2TB of hard drive and wait 20+h.

    With TPM only unlock, secure boot/verified boot is used to ensure the hard disk is accessed using the correct operating system and no meaningful changes have been made to the system since the last boot. With bitlocker, several vulnerabilities in bitlocker allow full decryption in TPM only mode because windows is fundamentally broken. So you should always use pin+TPM unlock.

    PS. about the encrypted user data: that is not part of bitlocker. It encrypts the whole drive and that’s it. DPAPI is a windows component that encrypts some user data with the user password. For example chrome cookies are saved in DPAPI so even an administrator can not read your cookies while you are not logged in to the system (if you log in they can read everything)













  • instead to be chill and touch grass from time to time

    Sounds like you (and me) believe that humans are good creatures and will do moral things just because they are moral. Evil comes after from external influences.

    What if a study proved, without a shadow of a doubt, that humans have objective morality in the form of a soul. And that this soul is objectively evil and all humans only do good things because we fear repercussions?

    I would not believe it.


  • groet@feddit.orgtoSelfhosted@lemmy.worldImmich vs Ente ?
    link
    fedilink
    English
    arrow-up
    3
    ·
    15 days ago

    My experience with ente was that it is horribly slow. It also lacks any feature to upload a large number of photos at once. I just never bothered uploading my 10k pictures I have taken over the last 15 years because it would have had to transfer them to a phone and then have the app open for a few weeks. No rclone or any other reasonable way to upload from a computer other than browser (which just doesn’t work for more than a few images)