Re:BitLocker uploads device encryption keys to SkyDrive
by matthewdgreen on Sunday November 02, 2014 @01:36PM
(#8547507)
> If they know your password no amount of device encryption will protect you, that is why he is ignoring them.
I can set a 128-bit equivalent password on my computer. I don't know how to ensure that Microsoft's cloud provides equivalent security, given the existence of password recovery mechanisms (SMS, email, security questions and social engineering of MS customer service reps).
But I'm not that familiar with Microsoft's cloud operations. If there is a way, let me know.
Re:BitLocker uploads device encryption keys to SkyDrive
by mcintyre1994 on Sunday November 02, 2014 @02:02PM
(#8547612)
I think I have some bad news - this page looks like it's still in date.. http://windows.microsoft.com/en-GB/windows-live/microsoft-ac...
No, what people are saying is the average user doesn't store a lot of data on their phone except what they have backed up through a cloud service.
The average user has a ton of data that isn't on the cloud on their local machine, losing all of that because they forgot their password isn't something that the user expects so adding encryption with no backdoor hurts the average user more than it helps.
Bitlocker doesn't back up the keys anymore than you ask it to and it easily enabled if you care about the NSA being able to get ahold of them.
> Much more limited against someone who can get your computer/tablet/phone and guess a password or some security questions. Don't jump straight to the NSA when your threat model is adequately met by someone who knows that your password is 'Kitty123'.
If they know your password no amount of device encryption will protect you, that is why he is ignoring them.