← Back to context

Comment by mcmcmc

1 day ago

AI enshittification is irrelevant here. Why is someone pointing out that sensible secure defaults are a good thing suddenly defending the entire company?

Uploading your encryption keys up to someone else's machine is not a sensible default

  • It generally is, because in the vast majority of cases users will not keep a local copy and will lose their data.

    Most (though not all) users are looking for encryption to protect their data from a thief who steals their laptop and who could extract their passwords, banking info, etc. Not from the government using a warrant in a criminal investigation.

    If you're one of the subset of people worried about the government, you're generally not using default options.

    • For laptops sure, but then those are not reasons for it to be default on desktops too. Are most Windows users on laptops? I highly doubt that. So it is not a sensible default.

      1 reply →

    • > It generally is, because in the vast majority of cases users will not keep a local copy and will lose their data.

      What's the equivalent of thinking users are this stupid?

      I seem to recall that the banks repeatedly tell me not to share my PIN number with anyone, including (and especially) bank staff.

      I'm told not to share images of my house keys on the internet, let alone handing them to the government or whathaveyou.

      Yet for some unknown reason everyone should send their disk encryption keys to one of the largest companies in the world (largely outside of legal jurisdiction), because they themselves can't be trusted.

      Bear in mind that with a(ny) TPM chip, you don't need to remember anything.

      Come off it mate. You're having a laugh aren't you?

      10 replies →