Microsoft seeking fix after vulnerability found in Windows 10 security feature

windows 10 feature update turns off bitlocker creating exploit mail
Anton Watman/Shutterstock
One of Windows’ most important security features is BitLocker support, which has provided full-disk encryption since Windows Vista first rolled out. Coupled with a compatible Trusted Platform Module, which is now required for new Windows 10 machines, BitLocker theoretically provides solid protection for a Windows machine that’s lost or stolen.

However, any security feature is only as good as the entire system that surrounds it, and any weak link can present a vulnerability that renders it less than secure. For Windows 10, the weak link involves the fact that the operating system turns off Bitlocker during Feature Updates, aka upgrades, creating a potential exploit, as the official Win-Fu blog reports.

According to Windows trainer and MVP Sami Laiho, the vulnerability occurs due to the ability to hit SHIFT+F10 during the reimaging process performed during a Feature Update and access the command prompt. This result in access by the non-admin account that’s in use during the update to the root SYSTEM folder and to all of the contents of the non-BitLocker-protected hard drive.

The following video provides an overview of the process:

According to The Register, security experts further maintain that anyone with physical access to the machine could exploit the bug to access the BitLocker encryption keys. Fortunately, Microsoft is working on fixing the bug, which affects all relevant versions of Windows 10 including the production versions 1511 (November Update) and 1607 (Anniversary Update), as well as newer Windows Insider builds.

The bug does require physical access to the Windows 10 machine, but once that’s accomplished, for example via theft or by an internal employee, then the bug allows admin access to the system once an upgrade is kicked off. Until Microsoft issues a fix, Laiho recommends disallowing unattended upgrades and using the Long-term Servicing Branch version of Windows 10. That’s not much help to nonenterprise Windows 10 users, however, and so maintaining physical control over a Windows 10 machine becomes that much more important.

Emerging Tech

Awesome Tech You Can’t Buy Yet: Insect drones and kinetic sculpture robots

Check out our roundup of the best new crowdfunding projects and product announcements that hit the web this week. You may not be able to buy this stuff yet, but it's fun to gawk!
Cars

2020 Land Rover Discovery Sport uses cameras to spot off-road obstacles

The 2020 Land Rover Discovery Sport gets a host of new tech features, including a camera system that shows what's underneath the car. It also gets a mild-hybrid powertrain to improve gas mileage.
Cars

GM thinks up new electronic brain for its cars, allowing over-the-air updates

General Motors is launching a new electrical architecture to support more tech features in its cars. The system debuts on the 2020 Cadillac CT5, and will roll out to most other GM models by 2023.
Computing

Whether you want to edit, sign, or append, PDFs, these are the best PDF editors

While there are plenty of PDF editor options online, finding a solution with the tools you need can be tough. Here are the best PDF editors for your editing needs, no matter your budget or operating system.
News

Kwikset’s second-generation deadbolts get smarter and safer

Kwikset introduced the second generation of its Signature Series Deadbolt with Home Connect locks, which feature a more compact design and an improved chipset that offers over-the-air security updates.
Computing

The best software for filing your taxes — because you can never be too early

The best tax software offers a variety of services for saving money, completing your taxes at top speed, or getting advice for more complex tax scenarios that you haven't had to deal with before.
Emerging Tech

How Super Mario, Magic: The Gathering, and PowerPoint are low-key supercomputers

What if the creators of Super Mario World, PowerPoint, and even Magic: The Gathering had accidentally created tools hiding a general-purpose computer in plain sight? Turns out they have.
Computing

Through the wire, to the limit, to the wall: The 5 best ethernet cables

While our world may be transitioning to wireless connectivity, Ethernet connections are still faster and less prone to lag times than traditional Wi-Fi networks. Here are five of the best Ethernet cables you can buy.
Computing

Your amazing PC rig needs an amazing computer case. These are the very best

There's an incredible variety of PC cases on the market, but a few stand above the rest. Any of our five best computer cases will make your desktop look and work great, no matter what your budget is.
Computing

Yes, Google tracks and collects your online purchases through Gmail. But why?

Google has been tracking your purchase history and while the company says that the tracking is part of an effort to help you keep track of your purchases, there are indications that there might be other, less clear motives for doing so.
Computing

HP slashes $200 off Spectre x360 laptops in Memorial Day deal

HP's Spectre x360 laptops are among the best premium convertible notebooks on the market today, and now you can save $200 on these laptops thanks to HP's Memorial Day sale. The 15-inch model also supports discrete graphics.
Product Review

The first AMD-powered Chromebook will make you wish you had Intel inside

The HP Chromebook 14 is a budget Chrome OS laptop that cuts its price in part by choosing AMD over Intel and by using plastic instead of metal. The results are mixed.
Computing

Windows 10 notifications driving you crazy? Here's how to get them under control

Are the notifications on Windows 10 annoying you? Here's our guide on how to turn off notifications in Windows, and how to manage alerts so that the important stuff still gets through.
Deals

Walmart Memorial Day sale: 4K TVs, laptops, and Apple iPads get price cuts

The Walmart Memorial Day sale has begun. With some pretty nice savings on Apple iPads, Samsung and Vizio 4K TVs, laptops, and Google Home devices, now is a great time to snag some electronics for cheap.