3 ms·
From the article, I'm under the impression Windows 11 is horribly insecure now. Which security issues are worse? A built-in cloud command logger is quite bad
by jlokier 5y ago
From the article, I'm under the impression Windows 11 is horribly insecure now.
Which security issues are worse?
A built-in cloud command logger is quite bad if you don't know it's there, and is a security risk even if you know.
Some people occasionally enter things like private URLs, tokens, UUIDs, pathnames and query value onto the command line. Which is fine if they're the sort of thing that's ok in your local, private command history. Not so much if it's sent upstream.
- chakalakasp 5y agoThe Windows 7 issues are worse. Far worse. But you do you, man
- NullPrefix 5y agoCare to elaborate? Without additional arguments it sounds like pure FUD to get more people on to the win11 spyware wagon
- chakalakasp 5y agoI mean, there is an entire field of study in cybersecurity. You're asking me why using an EOL OS that is 7 years out of patch compliance is worse than using Windows 10 and being in patch compliance. That's something you can easily Google and get 15 second answer from an authoritative source. But like I said, you do you. You'll figure it out eventually, probably at great cost.
- yabones 5y agoIt entirely depends on your threat model but if yours is similar to most people, holes that let anybody on your network hijack your system via `tcp.sys` RCE's might be a showstopper...
- SteveNuts 5y agoWhat about HIPAA issues like 'notepad.exe john_doe_health_info.txt'
- selfhoster11 5y agoYou're likely to have even worse HIPAA issues if someone manages to get full access on your user account.
- geofft 5y agoWould you prefer an OS that lets Microsoft spy on you, or an OS that lets the entire world spy on you? Obviously the correct answer is "neither," but if you're deciding between Windows 7 or 11, that isn't an option you seem to be considering. Random people on the internet in countries with lower costs of living than yours will happily install malware on your computer to drain your bank account or cryptolocker you for a couple thousand bucks. Microsoft makes way more money than that (as does every single Microsoft engineer) and doesn't care about attacking you, at least not in that way. (Also keep in mind that Microsoft surely has a bug tracker with a pile of WONTFIX'd security vulnerabilities in Windows 7 that they just didn't get around to fixing before EOL, and almost certainly that bug tracker is less locked down internally than raw telemetry data, so if you assume Microsoft or its engineers do care about attacking you, that's probably easier on Windows 7.)
- NullPrefix 5y agoI assume this is pure speculation, but one could also speculate that win10 or 11 also has a bugtracker full of security issues marked as wontfix or someLaterSprint