NASA posted Security leak Vista News Discuss NASA posted Security leak in the Windows Vista forums; Computer security specialists at NASA have warned their employees of a loophole in the encryption feature BitLocker, only present in Enterprise and Ultimate editions of Microsoft's Windows Vista operating ...

[Snuffy]

Computer security specialists at NASA have warned their employees of a loophole in the encryption feature BitLocker, only present in Enterprise and Ultimate editions of Microsoft's Windows Vista operating system. According to a document posted on NASA's Web site, BitLocker’s encryption can be bypassed if a user leaves their computers in "sleep" mode. Only if the computer is shut down or set to “hibernate”, users are required to insert a USB authentication key into their PCs or laptops to in order to boot up.

"An administrator can reduce the risk of circumvention of BitLocker (through theft of a "sleeping" rather than "hibernating" machine) by reducing the duration before the machine goes into hibernation," said NASA’s security specialists, Aaron Powell and Christopher Vincent.

http://www.neowin.net/index.php?act=view&id=37989

[felix8406]

Good input. I wonder if MS is ware of this? If not, they better come up with a solution, fast.