News for hackers. Stuff that matters.

A comment on Microsoft Office Online. Parent comment

Re:Microsoft Office Online by MichaelGG on Tuesday February 25, 2014 @10:18PM (#7302655)
It is Bitlocker'd, plus EFS'd (just in case my TPM gives up the keys - it's unclear if the password is mixed in to derive key material or not). And I'm getting a new SSD with "Encrypted Drive" support, so the keys are never in-memory (although again, I don't know if the key is just sitting in an easily-accessible chip on the disk, or if my password combines for key material).

And then EFS on top of that, and each VM has its own encryption as well. So even a full compromise won't hurt the VMs I'm not using at the time.

But it doesn't help since OneNote's online slick-access-from-anywhere, doesn't do crypto AFAIK. So all my transparent crypto protect my local device, but OneLook uploads the notebooks unencrypted to SkyDrive.

[ Parent | on HN ]
Re:Microsoft Office Online by bottompair on Tuesday February 25, 2014 @10:47PM (#7302763)
Daaaaaaamn you must have some awesome secret files!
[ Parent | on HN ]
Re:Microsoft Office Online by MichaelGG on Wednesday February 26, 2014 @12:54AM (#7303193)
Not particularly. Anything really secret I probably wouldn't put on that computer. I just don't see why other people should be allowed to access my data.

The biggest win, I think is the internal "e drive" encryption, so that a RAM dump doesn't spill keys. That even somewhat mitigates Lightning DMA attacks. (Although the attacker could just hijack the OS at that point.)

[ Parent | on HN ]