News for hackers. Stuff that matters.
Re:From stolen laptop to inside the company network by Sanzig on Wednesday July 28, 2021 @10:52PM (#27992286)
Totally! And for a user that knows the importance of a secure password, that's fine. But the average user in an organization picks terrible passwords. A random 5 or 6 digit PIN generated by the IT department (to avoid the user picking their daughter's birthday) used to lock a TPM is generally easy to remember and secure, especially if a lockout policy is set on the TPM.

I agree that for the user who would pick a secure passphrase, it's comparable security either way and thus really comes down to preference. I like tapping a quick PIN on the numpad rather than typing out a passphrase, but I can definitely see the advantages to the passphrase approach: you don't have to depend on a piece of hardware specific to the machine, and the attack surface for a potential backdoor is a lot smaller, especially if you're using FOSS full disk encryption software like Veracrypt.

Re:From stolen laptop to inside the company network by dkdk8283 on Wednesday July 28, 2021 @11:06PM (#27992371)
> especially if a lockout policy is set on the TPM.

what happens at lockout?

Re:From stolen laptop to inside the company network by tgsovlerkhgsel on Thursday July 29, 2021 @03:15AM (#27993750)
Recovery with the escrow key held by IT, typically.