Back in January Microsoft encrypted all my hard drives without saying anything. I was playing around with a dual boot yesterday and somehow aggravated Secureboot. So my C: panicked and required a 40 character key to unlock.
Your key is backed up to the Microsoft account associated with your install. Which is considerate to the hackers. (and saved me from a re-install) But if you’ve got an unactivated copy, local account, or don’t know your M$ account credentials, your boned.
Control Panel > System Security > Bitlocker Encryption.
BTW, I was aware that M$ was doing this and even made fun of the effected users. Karma.
Bit late to this thread but I know a few commands that might help if you’re stuck:
manage-bde -off C:(or any other drive) This decrypts the volume and turns off bitlockermanage-bde -lock/unlockmanage-bde -protectors -get C:(or any other drive) This displays your 48-digit key. I suggest you store it somewhere, just to be safe.Get-BitlockerVolumereveals which of your partitions are encrypted with Bitlocker.Disclaimer: I am not a terminal nerd, I just had similar problems years ago and went down the rabbit hole, used these commands and turned off bitlocker permanently. I don’t use windows anymore, but when I did, it didn’t cause any problems with bitlocker after this. If you’re concerned about your un-encrypted hard drives, consider using Veracrypt (carefully!) or similar open source encryption software.
Alright, lol, I’ll be the guy
Hey OP, ever heard of Linux?
Windows is the virus.
I mean you can write your Bitlocker key down and store it safely or put it somewhere else safe… Lol
The main problem here is Bitlocker is being turned on by default on fresh 24H2 installs, most people that don’t know how to bypass the online account requirement are making burner Microsoft accounts (Boomers), therefore do not know the credentials in 3-4 years when their computer needs a repair.
Fuck Microsoft.
I remember back in highschool a buddy encrypted his harddrive, didn’t backup his key. He Lost ALOT when I upgraded his comp
But how is that relevant to your ‘Fuck Microsoft’ if he knowingly encrypted his device, which is how you make it sound?
I’ve enabled FDE on one of my Linux devices, I’ve already had to mount the filesystem in a rescue environment once because a failed update caused the system to be unable to boot. I would also have been hosed if I had lost the encryption key. Ok not really, because that’s what backups are for, but you hopefully get the point.
From what I gather though other memes, It looks like Windows 11 is enabling Bitlocker by default.
I know, and the ‘fuck Microsoft’ is completely warranted for that. But shouting that and then coming up with a story where somebody enabled it themselves and subsequently lost their key, that doesn’t make a lot of sense. Unless it was to illustrate the dangers of FDE, but in that case the point could have been made a bit clearer.
That’s not a Microsoft issue. Loose your key and the door will stay close whatever it is.
I’ve been preaching about this for a while. Many modern systems are getting bitlocker turned on by default.
If your system gets messed up, or simply won’t start because of some security vendors bad update, goodbye data. You need the recovery key, and if you don’t have it, you’ll never see your bits the the correct order again.
I got into coding in the last few days. I have a project. Bumping into this while I’m trying to learn this shit? Fuck me. You know, we could just stop using money
I can’t connect what you are saying into a coherent thread
No, we can’t. Otherwise how would people like Elon and Bezos know that they’re better than us?
/s
Their good looks, obviously
Hahahha
I just leave secure boot/bitlocker off when it comes to my home system. It wasnt something I “needed” when I was dual booting windows 10 and it’s not something I’m gonna enable now that I’m using 11.
It’s not ”leaving bitlocker off”, though. It’s ”be aware about it and turn bitlocker off manually” since it’s enabled by default in the latest updates.
That’s false. My Windows partition didn’t magically enable bitlocker and I’m on 24h2. LTSC build and local account tho.
They can’t do that legally without notifying our asking in eu
I tried having it on my new laptop for a bit. It took like a week for Windows to kill the secure boot key for my Linux partition. Even after I disabled secure boot I couldn’t get it to boot up so I had to reinstall. Just left it turned off afterwards.
Its just not worth the trouble for a home pc imo
This has been happening to people randomly for years. Ysed to get calls about it all the time, and that was pre-covid
All in the name of national security *wink
Always have backups! Doesnt matter what OS you use, stuff will break eventually.
I prefer bootable full system images to my NAS for easy restores, and online file backups, both running daily.
3-2-1 rule : 3 backups 2 different types of storage 1 copy off-site
Yup, I treat the ‘3’ as 3 copies of data, so the first copy is just my working system, and the other 2 are various backups.
This happened to me once and I had to redo my coursework over the weekend…now I use Fedora :D
Regarding your last sentence, something similar happened to me with OneDrive. I mocked people thinking surely they enabled something by mistake. Nope. The defaults and general behavior are just that wacky. Glad I’m off Microsoft now.
They desperately wanted to eliminate personal computers and replace them with dumb terminals running over the net.
When the public rejected this idea
THIS is their response. They are still insisting on total control of our computers.
Just wait until you learn about Intel’s Management Engine…
They desperately wanted to eliminate personal computers and replace them with dumb terminals running over the net.
I don’t know about that.
Dumb terminal concept was more what Chromebook was doing.
Microsoft is doing something even stupider.
MS execs blathered about “the age of software running locally being over” long before Chromebooks.
I think they want you to only use Windows and pay for cloud storage.
By enforcing BitLocker and Secure Boot, they are trying to eliminate dual-booting (you don’t need to dual-boot Windows/Linux anyway, as you can just use WSL2 /s).
By enforcing disk encryption, in general, they try to force the use of cloud storage, by making data recovery nearly impossible. Most people are probably too lazy to buy external storage, and manually copy their files over.
This guarantees 2 money streams. One from Windows’s tracking/advertising and the other from OneDrive subscriptions.
It does not guarantee any revenue stream. It is just incompetence
Data recovery isn’t impossible. You can easily back up the recovery key. This is just typical Microsoft shit design.
My parents wouldn’t even notice that their computer decided to encrypt their files. And they will blame the service guy for not being able to recover their photos, in case of hardware failure.
deleted by creator
you don’t need to dual-boot Windows / Linux anyway
Exactly, as I can just wipe the disc and install OpenBSD.
Dumb terminal concept was more what Chromebook was doing.
I mean, for a lot of people they’re fine especially if they’re priced appropriately. Especially with a lot more software as a service out there. My problem is that all of them have a built in drop dead date on when they’re going to stop getting updates and there’s not really a great option for the devices post ChromeOS.
ChromeOS certainly can be a good system. I still have my old CR-48 from when I got selected to test the OS and even when it was in its infancy, it was solid. I used it for a lot of my college career because it was better than my Asus eeePC which had Ubuntu on it.
I had an Intel Chromebox that I ran galliumOS on. The problem is locked bootloaders which should be illegal
I have never bought a device I could not own completely and flash the rom with what I want. Except once I had iPhone 3 but it was easily jail broken, but I still feel dirty. How can someone think they own and control something I bought? There is something fundamentally wrong with that and I agree it should be illegal
Agreed. It’s unacceptable that things have gotten this.had. we need to fight back
If my Chromebook could run Linux or even pure Android, I’d probably use it way more often. But it being a locked down distro with android bolted on is useless to me.
- I can’t really do anything major on it that I can on a cheap laptop
- I can’t really use it for the same games or programs on Android, as the form factor really gets in the way, even in tablet mode.
It feels like the worst of both worlds. It’s fine for people who use a laptop/OS as a bootloader to a web browser, its not fine for weirdos like me.
You could always put Linux on it. I believe there is a way to do that for most ChromeBooks nowadays.
I tried, doesn’t work. There’s no documentation for my laptop or its board codename. I briefly got it to consider an Arch Linux ARM ISO but it just looped an error code on boot until you turned it off.
Funny thing is that a cheap netbook has stats that would be fine for anything we did in the 90’s maybe even some games too
The Chromebook I have, is overall fine. It runs ChromeOS pretty well, and most web pages don’t make me beg for more RAM or CPU. ChromeOS does a fine job, to the point I wonder if I ran Arch or something on it, it’s a crapshoot.
I think most laptops these days, even the cheap ones, are probably fine when you run a light OS on em. I’ve used computers that were 10 years old and ran most things decently well.
I’ve got an entry level desktop from 2009 I’m gonna throw arch on and run some stuff
Not to mention DRM. They want to own your computer and prevent any kind of modification so that movie producers give them money.
Movie producers?
Yeah, shit like HDCP is pushed by the film and TV industry.
Not really. Your problem in us is the lobbying lawyers. It’s a political systematic problem. The demonic corp entities that crave endless growth will never not do anything that could potentially suck any data from or control a customer. The ones that get “money” for things like this are your law makers. The Republican authoritarian faschists are the winners, along with billionaires that can afford to buy laws. No movie producer. No one in any business except exploitation on the mass scale can profit from these moves. In some countries it is illegal. In the us it is business
No idea how you say all that but can’t put together which industry specifically benefits from HDCP.
So not movie producers. You just mentioned them as another category being fucked? Because that’s what they are
The film industry benefits from HDCP and all DRM, they aren’t being fucked. I’ve looked back over the conversation, I think you have it flipped in your head.
Good thing PCs aren’t locked into Windows.
yet
Good luck locking loose mainboards sold for the DIY market, which don’t come with anything installed by default, to a given OS, the only way that could maybe work is forcing the OS in ROM.
Another way would be to discontinue the socketed desktop form factors and replace them all with mini PCs that are as locked down as the current Macs.
Thinking for two seconds:
MS pays Google to start enforcing some device verification thing so you can only view a good chunk of the Internet if you pass verification? (Assumes Google goes even harder making the web Chrome-focused)
Ooh Cloudflare could be invited to the party here too. Constant CAPTCHAs if you’re not on an MS AUTHENTI-PC! device. (Think Private Access Token)
…fill in the gaps friends 😉 you know MS has already debated all your “suggestions” anyway
Google already does precisely that with their “open source” mobile OS. People underestimate how easily these guys can ruin stuff
:( tell me more?
First off, Google has made agressive deals with phone manufacturers to ship spyware with their phones by default, and some of the stuff can only get taken out by rooting/jailbreaking the phone. By doing so, they acquired nearly 100% of the app store market share, and then used it to make “useful features” such as integrity checks that are tied to the Play Services app (which is an always on spyware background app).
The end result is, even if you manage to root your phone and install a custom ROM (which is not always available to every model), a bunch of apps will refuse to work properly because you fail the Google Play fingerprinting steps and are assumed to be a security vulnerability. If I’m not mistaken there’s also some shady stuff with certificates, too
This is already part of the trusted computing spec its called “remote attestation” I would actually expect it more targeted at multimedia who are hot to keep you from copying their stuff and banks.
So you’re suggesting MS will somehow block non-Windows OSes from installing, even on hardware like loose mainboards for building your own PC with, or even on barebones mini PC kits or certain laptop SKUs, which don’t ship with an OS installed to begin with and expect the user to install it themselves? I mean, unless something extreme happens like changing the entire PC platform to be like the current Macs, that won’t be feasible.
Also, doing that would kill the Steam Deck which I doubt Valve would take sitting down.
No. You know nobody can do that. It’s illegal almost everywhere to even try. But in usa maybe happening soon. They can still import parts for years until they ban that too
SecureBoot pretty much does this. There is nothing preventing motherboard manufacturers from blocking adding non-MS keys if they wanted to.
No just some laws
Except AFAIK loose mainboards aimed at the DIY market, as well as barebones kits, don’t ship with SecureBoot turned on by default and an off switch for that is mandatory to the PC spec.
Ah no
so you can only view a good chunk of the Internet if you pass verification
/
Constant CAPTCHAs
Get Google & Cloudflare to make the internet suck if you didn’t pay Microsoft[‘s vendors] “enough” for hardware
Just sounds great doesn’t it?!
