Microsoft seeking fix after vulnerability found in Windows 10 security feature

windows 10 feature update turns off bitlocker creating exploit mail
Anton Watman/Shutterstock
One of Windows’ most important security features is BitLocker support, which has provided full-disk encryption since Windows Vista first rolled out. Coupled with a compatible Trusted Platform Module, which is now required for new Windows 10 machines, BitLocker theoretically provides solid protection for a Windows machine that’s lost or stolen.

However, any security feature is only as good as the entire system that surrounds it, and any weak link can present a vulnerability that renders it less than secure. For Windows 10, the weak link involves the fact that the operating system turns off Bitlocker during Feature Updates, aka upgrades, creating a potential exploit, as the official Win-Fu blog reports.

According to Windows trainer and MVP Sami Laiho, the vulnerability occurs due to the ability to hit SHIFT+F10 during the reimaging process performed during a Feature Update and access the command prompt. This result in access by the non-admin account that’s in use during the update to the root SYSTEM folder and to all of the contents of the non-BitLocker-protected hard drive.

The following video provides an overview of the process:

According to The Register, security experts further maintain that anyone with physical access to the machine could exploit the bug to access the BitLocker encryption keys. Fortunately, Microsoft is working on fixing the bug, which affects all relevant versions of Windows 10 including the production versions 1511 (November Update) and 1607 (Anniversary Update), as well as newer Windows Insider builds.

The bug does require physical access to the Windows 10 machine, but once that’s accomplished, for example via theft or by an internal employee, then the bug allows admin access to the system once an upgrade is kicked off. Until Microsoft issues a fix, Laiho recommends disallowing unattended upgrades and using the Long-term Servicing Branch version of Windows 10. That’s not much help to nonenterprise Windows 10 users, however, and so maintaining physical control over a Windows 10 machine becomes that much more important.

Cars

Mercedes wants to turn your car into a comfortable shopping mall on wheels

Mercedes-Benz designed its MBUX infotainment system with e-commerce in mind. Motorists can upgrade compatible cars via an over-the-air software updating system, but the brand wants to take this technology to the next level.
Computing

Dodge the cryptojackers with the best torrent clients available today

Looking for the best torrent clients to help you share all of that wonderful legal content you own? Here's a list of our favorite torrent clients, all packed with great features while dodging malware and adverts.
Gaming

How do Nintendo Switch, Xbox One X compare to each other? We find out

The Nintendo Switch is innovative enough to stand apart from traditional consoles, but could it become your primary gaming system? How does the Switch stack up against the Xbox One?
Product Review

The Punkt is no dumb phone -- it’s much smarter than you think

Punkt’s second phone, the MP-02, doesn’t follow the generally accepted update cycle, adding only three main new features, one of which is a 4G LTE connection. It’s a fascinating little phone, and you’re going to love it.
Computing

Edit, sign, append, and save with six of the best PDF editors

Though there are plenty of PDF editors to be had online, finding a solution with the tools you need can be tough. Here are the best PDF editors for your editing needs, no matter your budget or operating system.
Computing

Old Nvidia graphics cards to get ray tracing support in upcoming driver

Nvidia's RTX ray tracing technology will no longer be limited to RTX graphics cards. An upcoming driver update will add support for low-end ray tracing to GTX 10-series and 16-series graphics cards.
Computing

Apple iMac gets more powerful with new Intel CPUs, Radeon Pro graphics

Apple on Tuesday, March 19 refreshed its iMac lineup with new models featuring slightly more powerful Intel processors and new AMD graphics cards. The new 27-inch 5K model comes with options for Intel's six-core or eight-core ninth-gen…
Cars

Nvidia’s new simulator brings virtual learning to autonomous vehicle developers

Nvidia introduced a simulator for testing autonomous vehicle technologies. Drive Constellation is a cloud-based platform technology vendors can use to validate systems efficiently, safely, and much faster than with vehicles on real roads.
Photography

Paper designs digitize in real time using an Illustrator-connected paper tablet

Love graphic design, but prefer the feel of real paper? The new Moleskine Paper Tablet - Creative Cloud Connected syncs with Adobe Illustrator in real time, turning paper sketches into digital drawings.
Computing

Make the most of your toner with our five favorite color laser printers

Color laser printers have improved dramatically over the years, and today's models offer both blazing print speeds and great image quality. Here are our favorite color laser printers, from massive all-in-ones to smaller budget options.
Computing

Firefox 66 is here and it will soon block irritating autoplay videos

Do web advertisements have you frustrated? Mozilla is here to help. The latest version of the browser will soon block autoplaying videos by default and will also help make web page scrolling smoother.
Computing

USB4 will be the fastest and most uniform USB standard yet

USB4 is on the horizon and alongside a massive boost in speed it's also unifying with the Thunderbolt 3 standard to help finally create a singular wired connection protocol that all devices can enjoy.
Computing

The U.S. government plans to drop $500M on a ridiculously powerful supercomputer

The U.S. Department of Energy has announced plans to build a $500 million exascale supercomputer by 2021. The project, known as the Aurora supercomputer, is expected to boost research efforts in fields such as public health.
Buying Guides

Apple has powered up its iMac lineup, but which one should you opt for?

With new processors and graphics cards for both the 4K and 5K models, the iMac feels like a good option for creatives again. But which should you buy? Here's our guide to choosing the right Apple all-in-one for your needs.