BitLocker or TrueCrypt can be decrypted in a matter of minute

http://www.pcmag.com/article2/0,2817,2374208,00.asp

Is it really true? If so, then why people are often seen crying here n there on forums that they forgot their passwords and can,t access there data anymore.

 

an old story, see more
http://blogs.msdn.com/b/rockyh/archive/2009/12/12/bitlocker-broken-cracked-not.aspx

 

Heard about this before... First off the story states that you have to have hibernate mode enabled for this to work. So basically if you don't have hibernate mode enabled their tool will not work in decrypting tc or bitlocker. Because basically their program does not "crack" the encryption. It simply finds the encryption key in the hiberfil.sys file and uses it. So to defend against this attack simply disable hibernate. (which I hate anyway) and delete c:\hiberfil.sys

 

Kind of an old thread but...
If you are using Truecrypt (V7.0 or higher) and full disk encryption then hiberfil.sys is encrypted. As far as I can tell, Bitlocker system encryption has always encrypted hiberfil.sys as well.
Other ways exist to access an encrypted system (cold boot, evil maid bootkit, firewire DMA, etc..) but these require a running machine and/or a reboot with the correct password.
Why do these bogus claims of broken encryption keep showing up?

 

I never use hibernate i just turn it off
PC is fast enough

 

I use Windows XP SP3 and I haven't used hibernate yet. Having your computer on hibernate is for the people who can't wait the time it takes the computer to fully load normally, my computer is fast enough .

 

The same here. I personally don't see the need for it.

 

I often need to use hibernation because I work with complex design software that takes forever to load. If I am working on batteries and running low on power I will hibernate because it takes 3 minutes to resume from hibernation. If I save then shutdown then reboot then launch cad then load project it takes about 10 min. Even if I had the fastest machine possible I expect it would take 5 min to reboot and reload everything.
If I were just browsing the web and sending email I would agree that shutdown and reboot is fine.

The initial point I was making is that it doesn't matter if you hibernate or not. If hiberfil.sys is encrypted then only the correct password will get you back into the system.

 

Because it makes good headlines. Non-techies will think "wow AES-256 has been cracked," when in fact nothing special happens in these sorts of attacks other than finding the keys in memory somewhere.