this post was submitted on 09 Dec 2025
64 points (93.2% liked)

Linux

60132 readers
1467 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS
 

TL;DR: bitlocker does not like grub

Full story:

Months ago I installed fedora on my desktop, dual booting Windows 11.

In all this time I never had the need to boot into windows. I remembered that it worked fine after install, good, and then I forgot about that.

Today I needed a specific windows only software, so at grub I chose the microsoft bootloader and... BITLOCKER.

Huh? Bitlocker? Me? What? Searched frantically for that decryption password in my keepass, did not find. What?? How???

After a few minutes staring at that screen I thought, ok let's just wipe that shit and reclaim the space. I went back to linux, opened the partition manager, then remembered that i had something important in single copy over there. Noooooo

Went back to the boot screen to try again, still failed password.

Then I notice the error:

e_fve_pcr_mismatch

that mismatch lets me think that maybe I had something wrong in my booting.

I try to put windows first in the bios and it works! WHAT THE...?!??

So, if i put linux first, then launch windows from grub, bitlocker takes the windows partition under ransom, i can only access if windows is first. And of course in windows 11 x64 is no longer possible add linux partitions in their boot manager (previously it was possible)

Incompetence or maliciousness?

you are viewing a single comment's thread
view the rest of the comments
[–] ZkhqrD5o@lemmy.world 2 points 2 days ago (1 children)

IMO, this does nothing because it only gives Microsoft full access to your device. And if you're special enough to get the attention of someone capable and willing to physically steal your laptop, install a bootkit on it and give it back to you without you even noticing, then it's just easier to just download the decryption keys from Microsoft at this point. It could have made all of this local like storing it in the TPM, a secure area of the CPU.

Full disk encryption is cool, but not when tethered to Microsoft. With that, they brought themselves into a nasty position even if they didn't want to. Just like when Apple made themselves the sole source of installing programmes on the iPhone devices. China gladly used that and is gladly using that.

[–] data1701d@startrek.website 2 points 1 day ago

I was talking less install a bootkit and giving it back to be and more just straight-up stealing the laptop and seeing if they can get any personal info they can sell before formatting it and eBaying it.

Still, your points are totally valid.