@wdormann frustratingly this puts the volume master keys in plain text on the drive, too.
The drive is technically encrypted, it just has its key stored in clear text on the drive.
I get why, but the lack of information is infuriating.
This also happens if you don’t use Windows Update to provide updates and use 3rd party management tools instead.
In a patch cycle your entire patch group will be put into this clear text limbo period. Unlikely attack vector, but still a bit of a wonky design.
=> More informations about this toot | View the thread | More toots from SecurityWriter@infosec.exchange
=> View wdormann@infosec.exchange profile
text/geminiThis content has been proxied by September (ba2dc).