logoalt Hacker News

aiscomingtoday at 4:20 AM1 replyview on HN

this exploit works only if you dont use a PIN/password for your Bitlocker and the volume automatically unlocks

so it gives you access to an encrypted volume which automatically unlocks anyway

the only difference is that it immediately gives you root access to the volume instead of having to go through the Windows login procedure - this might be a stolen laptop you dont have an account on


Replies

ndiddytoday at 4:38 AM

The author claims the exploit also works with TPM+PIN, he just hasn't released the PoC:

> Second thing is, No, TPM+PIN does not help, the issue is still exploitable regardless, I asked myself this question, can it still work in a TPM+PIN environment ? Yes it does, I'm just not publishing the PoC, I think what's out there is already bad enough.

https://deadeclipse666.blogspot.com/2026/05/were-doing-silen...

show 1 reply