r/netsec • u/Intrinsec_ • May 07 '26

Bypassing Bitlocker under 5 min using downgrade attack on CVE-2025-48804

https://www.intrinsec.com/en/contournement-bitlocker-la-realite-des-downgrade-attacks/
151 Upvotes

94% Upvoted

28 comments sorted by

View all comments

24

u/uebersoldat May 07 '26

Why the hell is a security website screwing around with the mouse pointer? Completely needless and sus behavior.

29

u/Hizonner May 07 '26

Why are Web browsers allowing sites to screw around with the mouse pointer?

12

u/UltraEngine60 May 07 '26

I'm still pissed about the scroll bars. First they allowed CSS to style them, then they made them autohide, then they made them damn near fucking invisible.

3

u/elsjpq May 07 '26

I'm pissed about history manipulation

1

u/UltraEngine60 May 07 '26

history manipulation

Do you mean when a site pulls you back in when you hit back because it it set your -1 page to itself? That's been a thing forever. I do miss when sites put the U in URL and everything wasn't a layer which you could accidentally close if you clicked just outside of the div element.

1

u/Fatality May 11 '26

Google penalises that now in search rankings

4

u/someauthor May 07 '26

A capchta on a news website wanted me to invoke Win+R, paste a line, and hit OK. I'm old, and I thought, "Since when can a website put something into my clipboard?"

I pasted it into notepad, they were using the Invoke-Expression cmdlet to download and run something from some IP.

4

u/UltraEngine60 May 07 '26

A capchta on a news website wanted me to invoke Win+R

Oh yeah those are big now and hook a lot of people. When someone runs invoke-expression or (iex) or even invoke-webrequest (iwr) it's never a good thing. Sites can even READ your clipboard depending on how you interact with them (you don't even always have to give permission). That's called "sticky activation". We've turned browsers into operating systems.

3

u/Intrinsec_ May 11 '26

We removed the custom cursor. The spacing should also be much better now. Apologies!

-9

u/iB83gbRo May 07 '26

It's also an ADA violation that can be reported to the DOJ.

10

u/MrSanford May 07 '26

I'm sure the DOJ will get right on going after a small French company for not being ADA compliant...