GDPR was never intended to be "good for startups". Just like pro-climate policies are never intended to be good for the economy.
GDPR was intended to be good for peoples privacy. Pro-climate policies are meant to be good for the climate.
Somethings gotta give. People are generally more important than startups. Climate is generally more important than economy. Because without people, there are no startups. And without climate, there is no economy, people, or startups.
1 Resecurity's wordpress site has directory listing turned on. Most content on the website seems to have been uploaded in february.
2 The services that does the press releases looks suspicious.
3 The second service also looks suspicious
4 Golden Bridge Silver and Gold Award winners... Anyone heard of this? Seems they sell thophies
For businesses, security is mostly about having someone to blame. If Microsoft did not leverage the hardware encryption capabilities in the drives they would end up being responsible for the performance not being as good.
In the world of proprietary black boxes, security is evaluated by the claims of the product sheet.
Microsoft is trusting SSD manufacturers to do the right thing, just as businesses are trusting Microsoft BitLocker to do the right thing.
Personally I trust Microsoft to make decisions that are good for their stock holders. That means having just enough security to avoid ending up with the blame in cases like this.
Samsung's lawyers are probably brain storming ways to get back at those pesky security researchers who made them look bad.
GDPR was intended to be good for peoples privacy. Pro-climate policies are meant to be good for the climate.
Somethings gotta give. People are generally more important than startups. Climate is generally more important than economy. Because without people, there are no startups. And without climate, there is no economy, people, or startups.