Windows Update triggers BitLocker recovery on business PCs | Hacker News Reader

Windows Update triggers BitLocker recovery on business PCs

windowslatest.com

37 pointsjinxmeta9 comments

"However, the BitLocker key is always synced to the Microsoft account (MSA)."

Welp, that's true ONLY for the primary drive the OS is installed on. If other drives are encrypted and the key is lost, well...

https://www.reddit.com/r/pcmasterrace/comments/1o9i0or/bitlo...

Windows user experience is becoming terrible: new problems like this are popping up every week.

Yesterday I updated the BIOS because a large Lenovo pop-up kept asking me to do so. When I restarted, it told me that PIN login isn't available and I could only log in with password. I tried changing the PIN, but the problem persists, and for some reason the option to completely disable PIN login is greyed out.

Now I can only log in with password, and since 2FA is enabled I need to input a code that I get by email each time I log in. This happens not only when I start the computer, but also when I lock the screen.

I bought this computer brand new 3 months ago...

You need to access your emails, before logging into your computer? What kind of circular dependency is that?

Yes, it's for 2FA. Fortunately I can do it on the phone.

So your computer is an extension of your phone. I wouldn't like that, I think it should be the other way around.

I would be scared for the day I loose my phone password, or my phone.

I once set up a Windows 11 VM. Everything was great. The first time it installed a feature update, it hit this BitLocker key input prompt on the reboot. Ugh. I was able to get the key but as soon as I was back into Windows, I disabled BitLocker on that VM and every other Windows machine I use. The risk of my machine being stolen and them finding some unencrypted private data is far easier to accept than the risk of me being suddenly and completely locked out of my computer, and I care more about the latter. Security isn't just about keeping bad guys out--it's also about making sure you can get in when you need it. Otherwise the only security you need is storing your data in /dev/null.

Same update that broke input in WinRE and the task manager. Are they coding updates with `copilot --dangerously-skip-permissions && git add -am 'Security and stability updates' && git push -f`?

>Microsoft CEO Satya Nadella on Tuesday said that as much as 30% of the company's code is now written by artificial intelligence.

Well, apparently they do that.

If only those QA folks had not been part of layoffs.

Reply on news.ycombinator.com