News for hackers. Stuff that matters.

A comment on DPAPI security flaw in Windows 10. Parent comment

Re:DPAPI security flaw in Windows 10 by lostmsu on Tuesday June 18, 2019 @03:49AM (#20210518)
To read the credential file from other user's profile.

As somebody shown below, that could be done by anyone with physical access, but only if full-disk encryption is off.

[ Parent | on HN ]
Re:DPAPI security flaw in Windows 10 by shawnz on Tuesday June 18, 2019 @04:26AM (#20210678)
Right, but without this feature, you could NOT perform that attack even with physical access and no FDE.

Now that this feature exists, DPAPI is essentially bypassed and must be supplanted with FDE.

[ Parent | on HN ]
Re:DPAPI security flaw in Windows 10 by kabwj on Tuesday June 18, 2019 @04:03AM (#20210585)
I’d argue FDE is off for 99.9% of users of windows
[ Parent | on HN ]
Re:DPAPI security flaw in Windows 10 by anieberry on Tuesday June 18, 2019 @05:05AM (#20210814)
Not anymore, most store bought laptops will have bitlocker enabled and all enterprise laptops will probably be using bitlocker too.
[ Parent | on HN ]
Re:DPAPI security flaw in Windows 10 by tracker1 on Tuesday June 18, 2019 @01:44PM (#20215920)
Bitlocker isn't even an option for Home versions of Windows... Which most store-bought laptops use.
[ Parent | on HN ]