evacideDo not store your Bitlocker encryption keys on Microsoft's servers if your threat model includes governments or law enforcement. As this article points out, this is the result of a design choice Microsoft made. It didn't have to be this way.
*sigh*Ber nard@evacide
(If your threat model includes governments, law enforcement or any half-competent attacker)
... you must also add a PIN to your Bitlocker config. Extracting the bitlocker encryption key at boot can be achieved with a 300$ logic analyzer.
Robin Bradshaw@brnrd @evacide I have been lazy and haven't tested it yet but I have bought a £70 Sipeed SLogic16U3 which i believe is fast enough to sniff the TPM so the cost is even lower now https://wiki.sipeed.com/hardware/en/logic_analyzer/slogic16u3/Introduction.html