Hacker News new | ask | show | jobs
by Genbox 698 days ago
Pretty interesting solution. At least it removes many of the errors stemming from reading keys over the phone, etc., but it also proclaims to remove the risk of distributing BitLocker keys - but that's precisely what they did - just in barcode form.

The obfuscation might prevent the intern from figuring out what is going on, but there are plenty of barcode-scanning apps for phones that show you the data stored in a barcode.

1 comments

They didn't distribute the bar codes, they had peoples bring their laptops to IT where the IT staff used the scanner to scan the code from the screen of a machine they themselves controlled.
You're right that the article later on describes it like that but then the concerns about distributing the key or dictating it over the phone don't make sense.
The concern was that they would stuff it up and have troubles trying to dictate 48 keys.

Not that someone was going to listen in and steal it