DPAPI security flaw in Windows 10

Re:DPAPI security flaw in Windows 10 by 13of40 on Tuesday June 18, 2019 @03:07AM (#20210363)

"The problem for a user is that after the system is shut down, anyone who has physical access to the PC..."

This is what bitlocker is for, isn't it?

[ Parent | on HN ]

Re:DPAPI security flaw in Windows 10 by caf on Tuesday June 18, 2019 @03:35AM (#20210472)

If you have to rely on bitlocker anyway, then what problem is DPAPI solving?

[ Parent | on HN ]

Re:DPAPI security flaw in Windows 10 by la_barba on Tuesday June 18, 2019 @04:23PM (#20217992)

It was created as a system level vault to store private keys, passwords and the like without requiring a library. But that was 20 odd years ago, so who knows what problem its solving now. Full-disk encryption was probably considered computationally expensive back then too..

[ Parent | on HN ]