Results 1 to 9 of 9
  1. #1
    Star Lounger
    Join Date
    Mar 2011
    Posts
    60
    Thanks
    0
    Thanked 0 Times in 0 Posts

    windows 10 1511, possible security issue with encryption

    have three computers.
    two with bitlocker (win 10 pro 64)
    one with truecrypt (win 10 home 64)

    went to update win-10-home-truecrypt.
    kept getting fail message, Fix The installation failed in the SAFE_OS phase with an error during BOOT operation
    put that machine upgrade on hold, went to a bitlocker machine

    BITLOCKER machine
    did update, it started installing, then it would RESTART, and NOT ASK ME FOR BITLOCKER password ??????
    there is no way it DECRYPTED the drive, so it must be STORING the password as it reboots???????
    anyway, after multiple restarts without me intervening, it updated

    OK< back to truecrypt machine.
    since error seemed to be on restart, I DECRYPTED the machine.
    the INSTALL THEN WORKED, as it would reboot, apparently to safe mode
    SO, windows update, if I have OTHER ENCRYPTION on it, CAN't reboot to safe mode, (it reboots, then I ENTERED the TRUECRYPT PASSWORD, but MICROSOFT CANNOT get to SAFE MODE after my password entry?????

    this is NUTS
    FIRST, with BITLOCKER, the password seems to be being stored???
    AND, if you have other encryption, microsoft can't get to SAFE mode after a reboot, and after you enter a password, so that you HAVE TO DECRYPT the drive????

    any comments, feedback, etc, appreciated

  2. #2
    5 Star Lounger
    Join Date
    Oct 2013
    Location
    Phoenix, AZ
    Posts
    926
    Thanks
    554
    Thanked 137 Times in 128 Posts
    Side comment: Truecrypt is broke.

    http://windowssecrets.com/forums/sho...Crypt-revealed

  3. #3
    Star Lounger
    Join Date
    Mar 2011
    Posts
    60
    Thanks
    0
    Thanked 0 Times in 0 Posts
    not worried if truecrypt is broke.
    it is adequate for the standard thief who breaks into my house.

    cripe, even with more sophisticated stuff, the government gets hacked and hillary uses her own email server.

    re: encryption, my BIGGER worry is that microsoft is STORING the bitlocker encyrption key as it does updates.

  4. #4
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,746
    Thanks
    171
    Thanked 649 Times in 572 Posts
    Quote Originally Posted by aoz View Post
    not worried if truecrypt is broke.
    it is adequate for the standard thief who breaks into my house.
    It's not the encryption strength which has become broken with TrueCrypt, but its presence now makes a system vulnerable to hackers and malware:

    Attackers could leverage the flaws to hijack processes and grant themselves full administrator privileges, and with such keys to a system, havoc could ensue.
    Malware can be downloaded, surveillance can take place, a PC could be ruined from the root -- there is no end to what a hacker could accomplish.

    TrueCrypt critical flaws revealed: It's time to jump ship

  5. #5
    Star Lounger
    Join Date
    Mar 2011
    Posts
    60
    Thanks
    0
    Thanked 0 Times in 0 Posts
    re: truecrypt - thanks for the reply and clarification.
    that machine is not used much ano more, BUT after reading article, i guess it's time to quit it and go to vera crypt

    have you tried veracrypt, and is it easy to switch?
    can veracrypt keep my current encryption?
    I just want simple encryption, so that if someone steals the computer, they basically just get the hardware and no data.

    thanks

  6. #6
    Super Moderator
    Join Date
    Jun 2011
    Location
    New England
    Posts
    4,746
    Thanks
    171
    Thanked 649 Times in 572 Posts
    Quote Originally Posted by aoz View Post
    have you tried veracrypt, and is it easy to switch?
    can veracrypt keep my current encryption?
    I haven't done it, but it sounds easy:

    VeraCrypt update brings TrueCrypt volume support

  7. #7
    Star Lounger
    Join Date
    Mar 2011
    Posts
    60
    Thanks
    0
    Thanked 0 Times in 0 Posts
    any way to get a microsoft response to this, about how it handles BITLOCKER, for restarts, since it is bypassing my login page on the multiple restarts?
    re: Truecrypt, ALSO an issue; would probably apply to VERACRYPT also, as the restart is not going to safe mode apparently, after we enter our decryption password
    (my personal machine, I am switching from truecrypt to veracrypt, but i assume issue is still present, as another thread relates same probloem with DriveCrypt)

  8. #8
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,577
    Thanks
    5
    Thanked 1,057 Times in 926 Posts
    Quote Originally Posted by aoz View Post
    any way to get a microsoft response to this, about how it handles BITLOCKER, for restarts, since it is bypassing my login page on the multiple restarts?
    re: Truecrypt, ALSO an issue; would probably apply to VERACRYPT also, as the restart is not going to safe mode apparently, after we enter our decryption password
    (my personal machine, I am switching from truecrypt to veracrypt, but i assume issue is still present, as another thread relates same probloem with DriveCrypt)
    You'd have to contact Microsoft support. My guess is that the information you seek would end up being a chargeable support incident.

    I think I may be confused. What did you update on the Bitlocker machine?

    Joe

  9. The Following User Says Thank You to JoeP517 For This Useful Post:

    Fascist Nation (2015-11-30)

  10. #9
    5 Star Lounger
    Join Date
    Oct 2013
    Location
    Phoenix, AZ
    Posts
    926
    Thanks
    554
    Thanked 137 Times in 128 Posts
    Quote Originally Posted by JoeP517 View Post
    .... What did you update on the Bitlocker machine?

    Joe
    Good point. Update or upgrade?

    If upgrade, upgrade from what?

    If update, kind of disturbing it effected three encrypted (whole drive volumes?) systems. What was the update?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •