this post was submitted on 23 Jan 2026
1284 points (99.6% liked)
Technology
79236 readers
1702 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If you can't possess the keys, you can't give them when there's a warrant. Microsoft designed a system that could obtain and decrypt those keys on purpose.
I'm certainly not a microslop supporter, but....
They designed a system that recommended that the average user use full disk encryption as part of device setup, and then provided a way that Grandma could easily recover her family photos when she set it up with their cloud.
This was built by an engineer trying to prevent a foreseeable issue. The intent was not malicious. The intent was to get more people more secure by default, since random hacker couldn't compell ms to give them keys, while still allowing low tech literacy people to not get fucked.
It's been a while since I installed a new Windows OS, but I'm pretty sure it prompts you to allow uploading your bitlocker key. It probably defaults to yes, but I doubt you can't say no, or reset the key post onboarding if you want the privacy, and now it's on you to record your key. You do have to have some technical understanding of the process, though, which is true of just about everything.
That all said, if a company has your data, it can be demanded by the government. This is a cautionary tale about keeping your secrets secret. Don't put them in GitHub, don't put them in Chrome, don't put them online anywhere because the Internet never forgets.
They're doing this because there's demand (with actually, non malicious genuine needs), and the feature is clearly advertised AFAIK.
It's not some evil conspiracy. Microsoft does enough shitty things without us needing to blame them for their users' shitty OpSec.
Here's Microsoft's overview page of bitlocker. Show me where it clearly says they can decrypt your drive.
https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf