Also, it's a twofer with the GreenPlasma zero-day local privilege escalation.

YellowKey reportedly works in Windows 11, Windows Server 2022 and 2025, but not in Windows 10.

  • 9tr6gyp3@lemmy.worldEnglish
    104·
    5 months ago

    Its bitlocker encrypted. You need to unlock the disk to see System Volume Information in Linux.

    • AnyOldName3@lemmy.worldEnglish
      23·
      5 months ago

      I’ll copy the bit here that I just edited into my reply after you edited the first post:

      In the face of your edit, I see that you’ve misunderstood the exploit. You need write access to the System Volume Information directory of your own USB stick, not anything on the target machine. It’s much easier to get access to things on a computer than it is to get access on one particular computer, and this exploit lets you jump from one to the other.

    • humanspiral@lemmy.caEnglish
      1·
      5 months ago

      does bitlocker encrypt whole volume, or userdata folders? It’s a performance issue to encrypt anything that doesn’t need to be.

      • 9tr6gyp3@lemmy.worldEnglish
        3·
        5 months ago

        Its whole-volume encryption, not file encryption. Most modern CPUs have built-in AES-NI instructions so its not much of a performance penalty (as long as AES is used for encryption).