Remix.run Logo
aiscoming an hour ago

this exploit works only if you dont use a PIN/password for your Bitlocker and the volume automatically unlocks

so it gives you access to an encrypted volume which automatically unlocks anyway

the only difference is that it immediately gives you root access to the volume instead of having to go through the Windows login procedure - this might be a stolen laptop you dont have an account on

ndiddy an hour ago | parent [-]

The author claims the exploit also works with TPM+PIN, he just hasn't released the PoC:

> Second thing is, No, TPM+PIN does not help, the issue is still exploitable regardless, I asked myself this question, can it still work in a TPM+PIN environment ? Yes it does, I'm just not publishing the PoC, I think what's out there is already bad enough.

https://deadeclipse666.blogspot.com/2026/05/were-doing-silen...

aiscoming an hour ago | parent [-]

they might mean "after you enter the bitlocker PIN you get root access without having a login password on the system" - still just a privilege escalation bug

iscoelho 20 minutes ago | parent [-]

That’s quite a stretch, to say the least.

aiscoming a minute ago | parent [-]

claiming to have a 10 times more impressive PoC but not releasing it "out of goodness of heart" is also quite a stretch