Hacker News Reader

In Windows 10 today, enabling BitLocker backups the keys to your AAD/Microsoft Account (depending on Home or Pro). If you hook the drive to another Windows machine you should be able to decrypt it with not a lot of trouble (you might have to log into the Azure Portal to pull the keys out if you are in a corporate environment, but that's it).

View on HN

Doesn't this defeat the purpose (at least partially?)

I assume law enforcement can request those keys from Microsoft if they're backed up to the account.

I think the threat models of the overwhelming majority of individuals would prioritize scenarios that involve lost or stolen laptops/desktops over law enforcement. So Microsoft defaulting to protecting the security needs of the common man over criminals seems entirely reasonable to me. Criminals (or the security/privacy conscious) can organize their enterprises to make sure that their BitLocker keys aren’t stored where law enforcement agencies can get them. And I say that as someone who really does have concerns about the possibility that this can be abused, but I still believe it’s a reasonable default.

Reply on news.ycombinator.com