windows 10 1511, possible security issue with encryption

Topic

New Reply

have three computers.
two with bitlocker (win 10 pro 64)
one with truecrypt (win 10 home 64)

went to update win-10-home-truecrypt.
kept getting fail message, Fix The installation failed in the SAFE_OS phase with an error during BOOT operation
put that machine upgrade on hold, went to a bitlocker machine

BITLOCKER machine
did update, it started installing, then it would RESTART, and NOT ASK ME FOR BITLOCKER password ??????
there is no way it DECRYPTED the drive, so it must be STORING the password as it reboots???????
anyway, after multiple restarts without me intervening, it updated

OK< back to truecrypt machine.
since error seemed to be on restart, I DECRYPTED the machine.
the INSTALL THEN WORKED, as it would reboot, apparently to safe mode
SO, windows update, if I have OTHER ENCRYPTION on it, CAN't reboot to safe mode, (it reboots, then I ENTERED the TRUECRYPT PASSWORD, but MICROSOFT CANNOT get to SAFE MODE after my password entry?????

this is NUTS
FIRST, with BITLOCKER, the password seems to be being stored???
AND, if you have other encryption, microsoft can't get to SAFE mode after a reboot, and after you enter a password, so that you HAVE TO DECRYPT the drive????

any comments, feedback, etc, appreciated

Reply | Quote

Replies

Side comment: Truecrypt is broke.

http://windowssecrets.com/forums/showthread//171838-Warning-Vulnerabilities-in-TrueCrypt-revealed

Reply | Quote

not worried if truecrypt is broke.
it is adequate for the standard thief who breaks into my house.

cripe, even with more sophisticated stuff, the government gets hacked and hillary uses her own email server.

re: encryption, my BIGGER worry is that microsoft is STORING the bitlocker encyrption key as it does updates.

Reply | Quote

not worried if truecrypt is broke.
it is adequate for the standard thief who breaks into my house.

It’s not the encryption strength which has become broken with TrueCrypt, but its presence now makes a system vulnerable to hackers and malware:

Attackers could leverage the flaws to hijack processes and grant themselves full administrator privileges, and with such keys to a system, havoc could ensue.
Malware can be downloaded, surveillance can take place, a PC could be ruined from the root — there is no end to what a hacker could accomplish.
TrueCrypt critical flaws revealed: It’s time to jump ship

Reply | Quote

re: truecrypt – thanks for the reply and clarification.
that machine is not used much ano more, BUT after reading article, i guess it’s time to quit it and go to vera crypt

have you tried veracrypt, and is it easy to switch?
can veracrypt keep my current encryption?
I just want simple encryption, so that if someone steals the computer, they basically just get the hardware and no data.

thanks

Reply | Quote

have you tried veracrypt, and is it easy to switch?
can veracrypt keep my current encryption?

I haven’t done it, but it sounds easy:

VeraCrypt update brings TrueCrypt volume support

Reply | Quote

any way to get a microsoft response to this, about how it handles BITLOCKER, for restarts, since it is bypassing my login page on the multiple restarts?
re: Truecrypt, ALSO an issue; would probably apply to VERACRYPT also, as the restart is not going to safe mode apparently, after we enter our decryption password
(my personal machine, I am switching from truecrypt to veracrypt, but i assume issue is still present, as another thread relates same probloem with DriveCrypt)

Reply | Quote

any way to get a microsoft response to this, about how it handles BITLOCKER, for restarts, since it is bypassing my login page on the multiple restarts?
re: Truecrypt, ALSO an issue; would probably apply to VERACRYPT also, as the restart is not going to safe mode apparently, after we enter our decryption password
(my personal machine, I am switching from truecrypt to veracrypt, but i assume issue is still present, as another thread relates same probloem with DriveCrypt)

You’d have to contact Microsoft support. My guess is that the information you seek would end up being a chargeable support incident.

I think I may be confused. What did you update on the Bitlocker machine?

Joe

--Joe

Reply | Quote

…. What did you update on the Bitlocker machine?

Joe

Good point. Update or upgrade?

If upgrade, upgrade from what?

If update, kind of disturbing it effected three encrypted (whole drive volumes?) systems. What was the update?

Reply | Quote