YellowKey: A BitLocker Bypass Via the EFI Partition

A researcher published YellowKey, a technique that bypasses BitLocker by replaying filesystem transaction logs through a debug mode tied to the EFI partition's FsTx folder -- requiring physical access to the drive but no special hardware. The proof-of-concept reportedly defeats both TPM-only and TPM+PIN configurations, and the disclosure drew 87 points and 20 comments on Hacker News. Commenters split between calling it a genuine authentication bypass and a local-access bug rather than a true backdoor; no CVE has been assigned and no official Microsoft response is documented.