348 reputation
3615
bio website micksmix.wordpress.com
location
age
visits member for 5 years
seen Sep 17 at 16:57

Apr
19
awarded  Famous Question
Feb
11
awarded  Taxonomist
Feb
1
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
I'd say it's apples and oranges. If you crack/bypass the HDD password, you still have all your work ahead of you with attacking BitLocker.
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
BitLocker supports AES+256 as well, and it uses an Elephant diffuser to ensure that each sector of disk is uniquely encrypted, making attacks more difficult. The creator of BitLocker has some gory details on this: bit.ly/ggZCkH
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
BitLocker can be configured to be much less vulnerable to cold boot attacks: "Defense-in-Depth vs. BitUnlocker: How to defeat Cold DRAM attacks using BitLocker, Power Options, and Physical Security" --- bit.ly/hAMFTO
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
It isn't how many numbers between 0 and 2^16 (65535) that are divisible by 11, but how many numbers between 0 and 720,896 that are divisible by 11. That happens to be 2^16. It does reduce entropy, but not to a point that it isn't difficult to brute force attack. I do agree that with appropriate hardware (such as the tesla rig with petaflops of computing power) it is defeatable. But so is all encryption. Also, that's cost prohibitive to obtain that much computing power today.
Jan
31
answered How resistant is BitLocker against brute force attacks on the 48 character recovery key?
Jan
31
awarded  Critic
Jan
31
comment How resistant is BitLocker against brute force attacks on the 48 character recovery key?
Yes, but if you are using TPM + PIN, the "key" is a mixture of the SRK (within the TPM) and your PIN. So I disagree, we are not back to worrying about account hacking in Windows. I am worried about attacking full drive encryption using the Recovery Password, thus bypassing the TPM.
Jan
30
accepted Can't see any entries on “File Types” tab on Windows 7's Desktop Search
Jan
30
asked How resistant is BitLocker against brute force attacks on the 48 character recovery key?
Jan
27
accepted When storing a client's BitLocker recovery infromation in Active Directory, is this sent to AD in clear-text or securely?
Jan
24
comment When storing a client's BitLocker recovery infromation in Active Directory, is this sent to AD in clear-text or securely?
But it's possible for a local user to login to a system and begin the BitLocker encryption process. Does the computer object have a PKI pair with AD and the computer account as well?
Jan
24
revised When storing a client's BitLocker recovery infromation in Active Directory, is this sent to AD in clear-text or securely?
added 166 characters in body
Jan
24
asked When storing a client's BitLocker recovery infromation in Active Directory, is this sent to AD in clear-text or securely?
Dec
31
awarded  Popular Question
Aug
18
awarded  Nice Question
Jul
26
awarded  Teacher
Jul
26
answered Windows 7 password
Jul
26
answered Can't see any entries on “File Types” tab on Windows 7's Desktop Search