Microsoft's controversial decision to provide the FBI with BitLocker encryption keys has sparked debate. In a recent development, it has been revealed that Microsoft handed over the recovery keys to unlock encrypted data on three laptops as part of a federal investigation, as reported by Forbes. This practice raises concerns about privacy and security, especially given the default setting of BitLocker on modern Windows computers, which allows for full-disk encryption. The technology is designed to prevent unauthorized access, but it also means that Microsoft, and by extension, law enforcement, can access and decrypt data stored on these devices. The case involves individuals suspected of fraud related to the Pandemic Unemployment Assistance program in Guam, a U.S. island in the Pacific. Local news outlets have covered the investigation, highlighting the involvement of Microsoft and the FBI. A spokesperson for Microsoft confirmed that they sometimes provide recovery keys to authorities, receiving an average of 20 requests per year. However, this practice has sparked controversy, with Johns Hopkins professor and cryptography expert Matthew Green raising concerns about the potential for malicious hackers to compromise Microsoft's cloud infrastructure and access these recovery keys. Green emphasizes the long-standing nature of these concerns, stating that Microsoft's inability to secure critical customer keys is becoming an industry outlier. The incident underscores the ongoing debate surrounding data privacy and the role of technology companies in law enforcement investigations.
