Microsoft secured my files!

Can you remind me what that "recall" is?

Recall Rec all Record all, their not even being subtle about it anymore

https://en.wikipedia.org/wiki/Microsoft_Recall

I have (had ;'( ) a local account, and bitlocker was activated. I only found out when my motherboard bit the dust, and that triggered the no-TPM bitlocker thingamajig. Goodbye data.

Of course it hits right as I needed the data on that laptop. Fucking murphy and his fancy legal words.

If anyone is in a situation like mine, you might find luck with a little DIY hacking: https://www.techspot.com/news/106166-old-bitlocker-vulnerability-exploited-bypass-encryption-updated-windows.html

luks-cryptsetup-backup

If you encrypted your disk/partition, the lock is stored in the luks header. But if that one is broken, you cant decrypt anything even if you remember your key and all data is lost.

Dumb terminal concept was more what Chromebook was doing.

I mean, for a lot of people they're fine especially if they're priced appropriately. Especially with a lot more software as a service out there. My problem is that all of them have a built in drop dead date on when they're going to stop getting updates and there's not really a great option for the devices post ChromeOS.

ChromeOS certainly can be a good system. I still have my old CR-48 from when I got selected to test the OS and even when it was in its infancy, it was solid. I used it for a lot of my college career because it was better than my Asus eeePC which had Ubuntu on it.

I think they want you to only use Windows and pay for cloud storage.

By enforcing BitLocker and Secure Boot, they are trying to eliminate dual-booting (you don't need to dual-boot Windows/Linux anyway, as you can just use WSL2 /s).

By enforcing disk encryption, in general, they try to force the use of cloud storage, by making data recovery nearly impossible. Most people are probably too lazy to buy external storage, and manually copy their files over.

This guarantees 2 money streams. One from Windows's tracking/advertising and the other from OneDrive subscriptions.

Movie producers?

yet

It's not which version, it's where you are. They follow some laws here some there and now that the US is fascist they roll out features like this on these easy targets first

You have a point. But Bitlocker recovery keys are all numeric. Really not all that hard to translate over the phone. Typically a secure email is what we use to deliver since 99% of employees also have email on their mobile devices.

I suggest we move all our machines over to Linux, which is the actual plan. Fuck everything about windows

Also, permanently locking a device after x failed attempts is just plain silly, security wise. You know I can take that drive out and just try to brute force it a million times per second without that silly rule being in my way, right? It's an anti security pattern similar to requiring password changes every week, it's a bad idea.

But it also has the superior option which is to turn it off.

Why would you not want to encrypt your files? My Linux systems are encrypted too.

I just checked and it is not on by default.

How did you get my password?

From what I gather though other memes, It looks like Windows 11 is enabling Bitlocker by default.

Is this person lying/incorrect? https://lemmy.world/comment/16865866

Microsoft is thriving and will continue to do so, just probably on machines running Linux.
They get paid $$ per month per employee by most businesses in the developed world.
There is a mature alternative to desktop Windows now. But there isn't for AD, Azure, Exchange, Kerberos and M365.

Maybe SteamOS Lite if the device doesn't have a proper GPU.

Why so! and what Clinton and Bush have to do with an operating system that is used globally!? I think you overestimate MS

Their good looks, obviously

That still happens without bitlocker. Computers are dropped. Facebook passwords are forgotten.

I acknowledge automatic encryption is going to make some more cases of lost data, but, with respect, I think the benefit of making fewer cases of stolen data is worth it. I agree with the other commenter that users should be made aware of it more clearly.

Also, as much as I hate the push to Microsoft accounts, I have to admit it helps mitigate this problem: if all ordinary users have an account looking after their master keys, then they can turn to that when they forget their login password etc. but the opportunistic thief on the train can't (as easily). Not every grandma has a Millennial relative at hand to boot Linux to rescue files off her HDD. And for those who don't like to trust their master keys to Microsoft/Apple/Google? There's Linux. And external backups. And saving your password somewhere safe.