On: PC market flat, as Surface becomes a top-5 computer brand in the US

[craftyguy]

BitLocker doesn't matter if the device is on, and that the owner has picked a reasonably strong passphrase (people generally fail to do so).

[tony101 → craftyguy]

Hence users who may be targeted should not leave the computer unattended AND powered-on. They need to set a TPM PIN and power down the computer when it's not being used.

BitLocker only allows you ten attempts to enter the TPM PIN, and if the bootloader is modified by an attacker, the TPM will refuse to release the key.

[p2t2p → tony101]

> TPM PIN

TIL

Also does it require it when comes from hibernation? Because by default Surface Pro powers off after certain time in connected standby, therefore if BitLocker pin is active after wake up the user is safe.

[tony101 → p2t2p]

I believe it's required after hibernation (because the device is powered off), but not after sleep.