Really makes you think
think about killing yourself dumb pol meme spammer faggot
>implying intel management engine doesn't know when you are encrypting things
>>60355865
what
Or you could just have encryption enabled by default... ransomware can't encrypt your files if they're already encrypted...
>>60356191
I hope you don't actually believe this
>>60356338
Not him but I'm new, could you explain this?
>>60356579
Enc(Enc(Data, Key1), Key2) you have key1
>>60355812
No it really doesn't make you think. If you the AES-NI accelerator is only used for local file encryption you're a fucking retard.
>>60356596
So basically you only have the key for one level of encryption so it's useless because it's still scrambled?
>>60356579
Encryption is literally you take a byte, say 0xa3 and perform a math operation based off a key on that byte
It ends up becoming 0x4f
The attacker encrypts it with a key you don't know
It becomes 0x77
You can't decrypt from that stage, since you don't know what the key was, regardless of knowing the key from 0xa3 to 0x4f
>>60356579
The ransomware doesn't care what your data is. To it, everything is just a stream of bits. It takes those bits and changes them in a way that only it can reverse. Whatever the data was, whether or not it was already encrypted, it will be encrypted again. Depending on implementation details (of both the malware and the filesystem), you will be left either with a file you can decrypt using your key into another encrypted file that only the malware can decrypt to a usable format or with a file that only the malware can decrypt into a file that your key can decrypt into a usable file.
What MS really needs to do is simply have Windows block any file named filename.mediaextension.executableextension (ie hotnudes.jpg.exe) from ever being able to execute. That would solve a good hunk of malware issues right there.
Why is it quicker and easier more secure for random small ransomware to whole drive encryption than other software
>>60357203
it probably uses an efficient, yet slightly insecure algorithm
>>60356656
precisely, your original data would be
Dec(Dec(Enc(Enc(Data, Key1), Key2), Key2), Key1)
>>60357145
>implying retards wont click on vagina.mmp4.exe