this post was submitted on 13 May 2026
706 points (99.4% liked)

Technology

84731 readers
4976 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
706
Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor (www.tomshardware.com)
submitted 4 days ago by throws_lemy@lemmy.nz to c/technology@lemmy.world
159 comments fedilink hide all child comments
 

YellowKey reportedly works in Windows 11, Windows Server 2022 and 2025, but not in Windows 10.

you are viewing a single comment's thread
view the rest of the comments
[–] 9tr6gyp3@lemmy.world 33 points 4 days ago* (last edited 4 days ago) (14 children)

The process is dead simple: grab any USB stick, get write access to the "System Volume Information," and copy into it the "FsTx" folder and its contents. Shift+click Restart to get Windows to the recovery environment, but then switch to holding down the Control key and don't let go. The machine will reboot, and without asking any questions or showing any menus, will drop you in an elevated command line with full access to the formerly Bitlocked drive, without asking for any keys.

~~Its dead simple to get write access to System Volume Information~~

~~Not even local admins have access to it. A local admin would have to take ownership of that folder (not recommended), but if a local admin is doing that for this exploit, they can just turn off Bitlocker rather than go through this nonsense.~~

I misunderstood the exploit. See replies.

[–] MonkderVierte@lemmy.zip 3 points 4 days ago (6 children)

Your strike-through didn't work somehow.

[–] 9tr6gyp3@lemmy.world 4 points 4 days ago (5 children)

I know! I cant figure it out 😂

[–] eronth@lemmy.world 10 points 4 days ago (1 children)

It's the spaces, I think

[–] 9tr6gyp3@lemmy.world 3 points 4 days ago (1 children)

I tried without spaces too unfortunately

[–] Speculater@lemmy.world 2 points 4 days ago (1 children)

I think it's three tildas.

[–] 9tr6gyp3@lemmy.world 6 points 4 days ago (1 children)

Its two. It didn't like the exclamation mark. I removed it and it started working.

[–] Speculater@lemmy.world 2 points 4 days ago

Oh nice work!

load more comments (3 replies)
load more comments (3 replies)
load more comments (10 replies)