I know people have mixed opinions on Braxman but I don’t see any huge leaps in logic here tbh… Thoughts?

  • GolfNovemberUniform@lemmy.ml
    link
    fedilink
    arrow-up
    17
    ·
    5 months ago

    3 letter agencies, governments in general and data hungry companies will continue searching for a way to bypass encryption. And just a reminder: direct access to the system (remote or physical) bypasses all kinds of encryption unless it’s protected separately. Backdoors and kernel level anti-cheats ftw

      • dwindling7373@feddit.it
        link
        fedilink
        English
        arrow-up
        3
        ·
        5 months ago

        Not really? If disks are encrypted good luck getting anything out of it. A remote access to a running machine? It’s all laid there.

          • GolfNovemberUniform@lemmy.ml
            link
            fedilink
            arrow-up
            2
            ·
            5 months ago

            I didn’t mean that. I meant if the hacker has access to the administrator (or just user in case with E2EE messengers) account, they can see and download anything, no matter how encrypted it is. The chips can do stuff as well but idk any proof of that tbh

            • jet@hackertalks.com
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              5 months ago

              Sure, side channel leakage if you can run locally.

              Honestly, most machines have enough cores, that you could pin a process to a specific core giving it independent cache, and work around a lot of these side channel attacks. So you’re encrypted end to end messenger would get an exclusive core. Kind of like how we do VM pinning nowadays

      • PM_Your_Nudes_Please@lemmy.world
        link
        fedilink
        arrow-up
        3
        ·
        edit-2
        5 months ago

        Eh, kind of. Remote Desktop with an admin account would be more useful than physical access to a locked computer. Because if Bitlocker is enabled, then all that matters is that you can sign into the computer. Use strong passwords, don’t open RDP to the WAN, lock your workstations when walking away, etc…

        Even cloning the drive to crack later (historically, this was a popular choice if you had physical access) is pretty useless if you don’t have a user’s password.

  • Snot Flickerman@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    1
    ·
    5 months ago

    Death of encryption?

    They are rolling out forced turned-on-by-default BitLocker hard drive encryption for everyone using Windows 11. Including all those people who dont understand how it works and won’t save their backup keys.

    Microsoft is dumb but pretending they are trying to kill encryption is also dumb.

    • Misk@lemmy.worldOP
      link
      fedilink
      arrow-up
      1
      ·
      5 months ago

      I suppose I meant to say “end to end encryption”. It’s no secret that it’s been under attack from the top down for a long time but from my understanding the legislation keeps getting shot down. This seems like a perfect workaround unless I’m missing something.

  • TheAnonymouseJoker@lemmy.ml
    link
    fedilink
    arrow-up
    5
    arrow-down
    7
    ·
    edit-2
    5 months ago

    Does Braxman have the guts to call out the source of the problem — Western/NATO establishment — itself? Microsoft is a mere tentacle of the hydra that is NSA, which is a mini hydra of CIA. CIA in itself is a tentacle of NATO.

    If he does not, he is just another component in aiding west, in trying to pretend that Microsoft is some isolated problem. Big Tech companies are not isolated enemies, even though western privacy community loves to group think as separate brand fandom camps.

    The day people are ready to go to the lengths I go in criticism and honest dialogue, that day is when privacy community might start to see its golden days. Until then, it is just all this breadcrumbs and scraps thrown to the dogs regularly, achieving nothing more than feelgood placebo effect. Too many people here love to suck the cock of Apple/Google/Brave/GrapheneOS and all these anti-privacy cultist monoliths.

      • TheAnonymouseJoker@lemmy.ml
        link
        fedilink
        arrow-up
        1
        arrow-down
        6
        ·
        edit-2
        5 months ago

        That project belongs rightfully alongside those other brand cults. Also you are definitely acting in weird manner lately with many Lemmy users, and you even stalked me when I told you to stop trolling.

        You are definitely not the authority to judge me on honesty. I think that is reserved for people with experience with anonymity and activist level privacy.

        Also just letting you know as mod, I have received some reports on you, but let it slide to give you a chance. You are not making much out of that chance. If you have nothing constructive to say, stay silent.

        • krolden@lemmy.ml
          link
          fedilink
          arrow-up
          5
          ·
          edit-2
          5 months ago

          Sometimes I think you’re strcat because you behave the same in a lot of ways but seem to have the complete opposite opinions

          • TheAnonymouseJoker@lemmy.ml
            link
            fedilink
            arrow-up
            2
            ·
            5 months ago

            Hahaha. Good observation for sure, but I am not his alter ego. There are massive differences, and it is only unnecessary behaviour that I talk against like this. I modulate my responses according to who is talking what. Sometimes I end up looking spicy due to that. We’ve had our little moments too, and you can probably now understand why.

          • TheAnonymouseJoker@lemmy.ml
            shield
            link
            fedilink
            arrow-up
            1
            arrow-down
            2
            ·
            edit-2
            5 months ago

            Well, you managed to bait me, troll me, and personally stalk my 4 month and 10 month old posts, all because I told you as a mod to stop trolling people based on reports I received. You even openly said you will create alts to evade bans if you received any. It is certain that you are an asshole of colossal proportions.

            You are getting an immediate ban, because you are gaslighting others and me into creating nonsense beliefs about me, even though you are the one behaving badly with everyone. I do get it now why mods quickly get tired of trolls who go this far, and end up creating stereotypes of people who catch their attention in negative manner.