Microsoft Windows Save Encryption Keys?
What does all this mean? The point is that if you have a modern computer that supports TPM and you are using Windows 10 and connect with a Microsoft account to sign in, your computer is automatically protected with encryption of the hard disk for safety.
But according to the newspaper The Intercept, a copy of the encryption key storage locker uploaded to Cloud OneDrive and this is done without the user's knowledge or even the option to not upload the key.
Undeniably hard disk encryption is a good security measure, but there are issues associated with an encryption key and then upload to Cloud is a step in the face of undesirable situations.
For example, if the computer has a hardware failure the hard drive and all its data can not be saved, the encryption keys are stored in the hard disk can not be read reliably. In such case, the encryption key to upload the Cloud can save users from being forced to obtain a new Windows license.
Reviewed by storing a copy of the encryption key in your Microsoft account is a hacker can achieve the encryption key if they managed to hack into the account.
But actually for a normal user, the risk of hard drive failure is greater than Microsoft account hacked and used the excuse that Microsoft has decided to take steps automatically upload it.
In fact, this issue is more impressed those who have sensitive data in their PCs (business secrets, state secrets, etc.) and, for example, if a government confiscate the PC, the user certainly does not want the government to force Microsoft to disclose code hard disk encryption the user involved.
Whatever the reason, the biggest issue is that Microsoft should be more transparent in dealing with the encryption code and at least, inform the user about it or give users the option to not upload them to Microsoft account.
Posts
Post A Comment
No comments :