Timeline for Do a TPM's benefits outweigh the risks?
Current License: CC BY-SA 4.0
17 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Aug 19 at 9:37 | history | suggested | AJM | CC BY-SA 4.0 |
Edited in links to the WIkipedia article and to a specific section of it that was cited.
|
| Aug 15 at 10:27 | comment | added | AJM | Regarding my last comment, you might argue that this is Bitlocker's fault for not using the "encrypted communication features". I argue that the TPM should have forced all communications in and out of it to be encrypted, and that this is a problem with the TPM standard. | |
| Aug 15 at 10:26 | review | Suggested edits | |||
| S Aug 19 at 9:37 | |||||
| Aug 15 at 10:13 | comment | added | AJM | Take a look at web.archive.org/web/20240331131103/https://dolosgroup.io/blog/… . In particular: BitLocker does not utilize any encrypted communication features of the TPM 2.0 standard, which means any data coming out of the TPM is coming out in plaintext, including the decryption key for Windows. ... Getting around the TPM in this manner is akin to ignoring Fort Knox and focusing on the not-so-armored car coming out of it. | |
| Mar 3, 2021 at 16:14 | answer | added | usr-local-ΕΨΗΕΛΩΝ | timeline score: 5 | |
| Mar 2, 2021 at 14:01 | answer | added | usr-local-ΕΨΗΕΛΩΝ | timeline score: 2 | |
| Mar 2, 2021 at 13:49 | history | edited | Gillian | CC BY-SA 4.0 |
edited title
|
| Feb 1, 2019 at 7:15 | comment | added | Overmind | Bitlocker is junk, proven several times: engadget.com/2018/11/06/… ; but looks like some people prefer to add "-" to an answer rather than examining the situation as a whole. | |
| Jun 19, 2018 at 12:53 | review | Close votes | |||
| Jun 25, 2018 at 3:01 | |||||
| Jun 15, 2018 at 20:33 | history | tweeted | twitter.com/StackSecurity/status/1007722678806044672 | ||
| Jun 15, 2018 at 19:13 | history | edited | forest | CC BY-SA 4.0 |
make title sound less opinion-based and therefore more on-topic
|
| Jun 15, 2018 at 19:11 | comment | added | JMK | This isn't an answer, but definitely something to be aware off. I recently went through a bit of a nightmare with this. When I got my Dell XPS (about 18 months ago), I naturally enabled BitLocker which uses the TPM. This was fine, until about a week ago, I was prompted to update the BIOS, which I just did. From that point on, my Hard Drive was encrypted, and I never noted down the recovery key! I lost everything on there (happily, I had pretty much everything backed up), but still, be warned. You need to turn it off when updating your BIOS! And some might argue, that would defeat the point? | |
| Jun 15, 2018 at 18:35 | vote | accept | Gillian | ||
| Jun 15, 2018 at 13:36 | comment | added | forest | @Gillian It seems likely the TrueCrypt authors didn't understand what a TPM is for. It is not redundant and fundamentally cannot be made redundant in software. It is something that can only work in hardware. That is likely why VeraCrypt decided to add support recently to their beta builds, since they seem to have a better understanding of security. | |
| Jun 15, 2018 at 12:52 | answer | added | forest | timeline score: 35 | |
| Jun 15, 2018 at 12:49 | answer | added | Overmind | timeline score: -6 | |
| Jun 15, 2018 at 11:40 | history | asked | Gillian | CC BY-SA 4.0 |