Universal Blue•2y ago

@antheas I just saw a video somone bypassing tpm. Because they had tpm autounlock bitlocker and they

@antheas I just saw a video somone bypassing tpm.
Because they had tpm autounlock bitlocker and they could read the ram . . .

but my CPU has fTPM, so it's encrypted

© 2026 Hedgehog Software, LLC

More

Communities Docs About Terms Privacy

Pez

P

Pez•6/30/24, 12:37 AM

your options are:

accept you are being tracked
make yourself stand out by acting more paranoid

Kid

KKid @antheas I just saw a video somone bypassing tpm. Because they had tpm autounloc...

antheas

A

antheas•6/30/24, 12:37 AM

the problem is that the TPM needs to only unlock your drive only when that will lead to your lockscreen

antheas

A

antheas•6/30/24, 12:37 AM

if the TPM unlocks your drive in any other case, then the attacker can just do that

antheas

A

antheas•6/30/24, 12:38 AM

if you bind your TPM to the secure boot PCR, it will unlock your drive provided the initial boot was with a kernel that was signed with the same keys

antheas

Aantheas if you bind your TPM to the secure boot PCR, it will unlock your drive provided ...

Kid

K

KidOP•6/30/24, 12:39 AM

I also have secure boot, but this still doesn't protect against theft and search warrant

Pez

P

Pez•6/30/24, 12:39 AM

nothing does

antheas

A

antheas•6/30/24, 12:39 AM

theft it does

antheas

A

antheas•6/30/24, 12:39 AM

most likely

j0rge

J

j0rge•6/30/24, 12:39 AM

where's that hammer xkcd

Pez

P

Pez•6/30/24, 12:39 AM

yeah random dumb thieves maybe

antheas

A

antheas•6/30/24, 12:39 AM

petty theft is easy to guard against

Pez

P

Pez•6/30/24, 12:40 AM

but for the things you would actually be paranoid about protecting your data from like this it's a fool's errand

antheas

A

antheas•6/30/24, 12:40 AM

just use luks so you can wipe your drive when you sell your pc and not worry about it

Pez

P

Pez•6/30/24, 12:40 AM

just having a password is gonna stop the average crackhead from making off with your stuff

antheas

A

antheas•6/30/24, 12:40 AM

the rest is eh

Kid

KKid I also have secure boot, but this still doesn't protect against theft and search...

halva

H

halva•6/30/24, 12:40 AM

sorry but literally nothing will protect you from being beaten with a 5 dollar monkey wrench

antheas

A

antheas•6/30/24, 12:40 AM

also i knwo unless my drive ends up in NSA's hands nobody is unlocking it

antheas

A

antheas•6/30/24, 12:41 AM

without the monkey wrench

Kid

K

KidOP•6/30/24, 12:41 AM

If I set tpm to autounlock...
someone could just steal my PC, my browser is logged in into everything .... and pics of my ID, my entire teenage time is on my drive

halva

Hhalva sorry but literally nothing will protect you from being beaten with a 5 dollar m...

Kid

K

KidOP•6/30/24, 12:41 AM

xD

halva

Hhalva sorry but literally nothing will protect you from being beaten with a 5 dollar m...

Pez

P

Pez•6/30/24, 12:41 AM

except the fact you cheaped out on a damn wrench and the wrench broke

antheas

A

antheas•6/30/24, 12:41 AM

join the club, apart from the last part

antheas

A

antheas•6/30/24, 12:41 AM

win 11 is going to make hw encryption auto turn on

Pez

P

Pez•6/30/24, 12:41 AM

no lifetime warranty on $5 monkey wrench either

antheas

A

antheas•6/30/24, 12:41 AM

next year

Pez

P

Pez•6/30/24, 12:41 AM

it becomes a $10 and a $15 monkey wrench very quickly...

Kid

K

KidOP•6/30/24, 12:42 AM

Still need to encrupt my win11

Kid

KKid ty, thb.. I don't know what these are 😅

VagrantWinds

V

VagrantWinds•6/30/24, 12:42 AM

dedicated physical hardware keys that can be written to and reset but not extracted from

Kid

K

KidOP•6/30/24, 12:43 AM

I've set GNOME disks to auto unlock my other 2 drives on login...
so if someone decrypts my boot drive, the other 2 are also open

gnome disks stores them in plain text lmao

Kid

KKid Still need to encrupt my win11

antheas

A

antheas•6/30/24, 12:44 AM

if you use secure boot, just turn on bitlocker

antheas

Aantheas if you use secure boot, just turn on bitlocker

Kid

K

KidOP•6/30/24, 12:44 AM

I will!
But I'd prefer to type a passphrase

Pez

P

Pez•6/30/24, 12:44 AM

just remember this is all to stop one crackhead

Kid

KKid I will! But I'd prefer to type a passphrase

antheas

A

antheas•6/30/24, 12:44 AM

bitlocker supports passphrases

Pez

P

Pez•6/30/24, 12:44 AM

it doesn't make it safe to take your data through an airport

antheas

Aantheas bitlocker supports passphrases

Kid

K

KidOP•6/30/24, 12:45 AM

gr8 thx.

antheas

A

antheas•6/30/24, 12:45 AM

unsure if windows gated that feature

Johnny Appleseed

J

Johnny Appleseed•6/30/24, 12:45 AM

I tried the TPM just thing and it got my configuration from having to enter my password once to twice so success ig

antheas

A

antheas•6/30/24, 12:45 AM

it also does pin + tpm

Pez

PPez it doesn't make it safe to take your data through an airport

Kid

K

KidOP•6/30/24, 12:45 AM

...

antheas

Aantheas it also does pin + tpm

Kid

K

KidOP•6/30/24, 12:45 AM

perfect

antheas

A

antheas•6/30/24, 12:45 AM

maybe its pro only tho check it out

Kid

Pez

P

Pez•6/30/24, 12:45 AM

traveling international? buy a new device.

antheas

A

antheas•6/30/24, 12:45 AM

but bitlocker is not easy to bypass

Johnny Appleseed

J

Johnny Appleseed•6/30/24, 12:45 AM

For me the only reason I really care about encryption is if I have to RMA a drive my data isn't on it in plain form

Pez

P

Pez•6/30/24, 12:45 AM

domestic travel is probably ok in most places

Johnny Appleseed

J

Johnny Appleseed•6/30/24, 12:46 AM

If someone cares enough to physically steal my entire hardware I got other problems

Pez

PPez it doesn't make it safe to take your data through an airport

Kid

K

KidOP•6/30/24, 12:46 AM

a 16 character password with upper, lower, numbers and special characters takes a lifetime to bruteforce

Pez

P

Pez•6/30/24, 12:46 AM

like they need to do that

Pez

P

Pez•6/30/24, 12:46 AM

they have problem solving money

Pez

PPez except the fact you cheaped out on a damn wrench and the wrench broke

halva

H

halva•6/30/24, 12:46 AM

use it on a cryptobro with all of their life savings in coins, call that high ROI