[Zealotry]

Before I begin I'd like to say that this is a pretty HQ post, the only thing stopping me from taking the 'pretty' out of that and just calling it 'HQ' is your grammar, but that's okay.

Now that I've said that I can start:

Though I agree with you that Microsoft should integrate the encryption and decryption of files on computer lock/user log-out, it would drastically decrease the performance speed of windows. In addition, the encryption of passwords only isn't actually that bad, though it is possible to break through, It takes more time than a hacker usually has. This is due to the fact that to break into a logged-out or locked computer you need to have full access to that computer, that usually means either sending it some sort of malware or physically using the computer. The problem with both of these would be: When a computer is locked/logged-off it won't execute commands sent from said malware, thus, it wouldn't be practical to attempt to break through remotely with just malware. Secondly, Physically accessing the computer could be risky and would take a while to break through the password (even if you could some how brute force it). This problem of time and accessibility puts a serious problem in front of the hacker(s). Microsoft assumes that no hacker would have the time, or patience, to attempt breaking into a locked/logged-off computer, so they don't encrypt the files. Instead of encryption on log-off/lock Microsoft should incorporate encryption on creation and decryption on use. This would make stealing files/information much more difficult because each one would be encrypted and the hacker would need to decrypt them on activation. However, this would cause a MUCH bigger performance speed problem. In conclusion, to make a total file encryption/decryption system on log-off/lock would be largely inefficient. In fact, to make a total file encryption/decryption system would be largely inefficient in general.

I hope this answered your question.


-Daniel

English is not Eternity's primary language, so I say his grammar is fine.

What I don't understand is why they don't offer a TrueCrypt type option (without, of course, the anti forensics functions). Daniel is right, though, it would take far too long for a hacker to break in to just an everyday computer.