7 ms·

> As I understand it, Windows 11's CPU limits are designed for CPU's that have specific hardware mtigiation for Spectre and Meltdown "To run Windows 11, CPUs n

> As I understand it, Windows 11's CPU limits are designed for CPU's that have specific hardware mtigiation for Spectre and Meltdown "To run Windows 11, CPUs need to have the hardware virtualisation features to enable virtual secure mode for Virtualisation-Based Security and the Hypervisor-Protected Code Integrity that underlies a range of protections that Microsoft has been building since Windows 8, like Application Guard, Control Flow Guard, Credential Guard, Device Guard and System Guard. Now they'll be on by default for all PCs, not just specially selected devices." https://www.techrepublic.com/article/windows-11-understanding-the-system-requirements-and-the-security-benefits/ https://www.techrepublic.com/article/windows-11-understandin...

Lammy 5y ago
Sounds like they want to turn my PC into something locked down like an iPhone and not risk me being able to “break in” to it via any of those class of vulnerabilities.
- shaicoleman 5y ago
  As far as I can see, these are all legitimate security features that will help protect the users (e.g. from ransomware attacks) I don't see anything in Windows 11 that makes it more of a walled garden compared to Windows 10. All the security measures can be bypassed by a technical user if need be, e.g. running unsigned drivers [1], or installing on a machine without a TPM [2], or setting up an offline account on the Home edition. Satya Nadella sees Windows 11 being an open ecosystem as a selling point compared to alternatives [3] Along the launch of Windows, the Microsoft Store is more open now than before [4] For comparison, the current Linux boot security is very poor compared to other OSs, because it lacks similar features [5] I think Windows 11 is a step in the right direction, and I'm saying that as a happy Linux user. 1. https://gearupwindows.com/how-to-disable-driver-signature-enforcement-on-windows-11-10/ https://gearupwindows.com/how-to-disable-driver-signature-en... 2. https://www.howto-connect.com/install-windows-11-without-tpm-and-secure-boot/ https://www.howto-connect.com/install-windows-11-without-tpm... 3. https://www.windowscentral.com/satya-nadella-wants-windows-11-be-center-open-tech-ecosystem https://www.windowscentral.com/satya-nadella-wants-windows-1... 4. https://blogs.windows.com/windowsdeveloper/2021/09/28/microsoft-store-more-apps-more-open/ https://blogs.windows.com/windowsdeveloper/2021/09/28/micros... 5. https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html https://0pointer.net/blog/authenticated-boot-and-disk-encryp...
  - lostmsu 5y ago
    Re: [4] will they re-allow crypto miners in the store? How about Torrent clients?
    - shaicoleman 5y ago
      Yes, these types of apps are currently available on the store, e.g. https://www.microsoft.com/en-us/p/wineth/9nkqnwq2l9lw https://www.microsoft.com/en-us/p/wineth/9nkqnwq2l9lw https://www.microsoft.com/en-us/p/torrex-lite-torrent-downloader/9wzdncrfjb3d https://www.microsoft.com/en-us/p/torrex-lite-torrent-downlo...
      - optimiz3 5y ago
        That first app violates Microsoft's ban on mining cryptocurrency on device: https://docs.microsoft.com/en-us/windows/uwp/publish/store-policies#102-security https://docs.microsoft.com/en-us/windows/uwp/publish/store-p... "Apps that enable the mining of crypto-currency on device are not allowed."

Lammy 5y ago

Sounds like they want to turn my PC into something locked down like an iPhone and not risk me being able to “break in” to it via any of those class of vulnerabilities.

shaicoleman 5y ago
As far as I can see, these are all legitimate security features that will help protect the users (e.g. from ransomware attacks) I don't see anything in Windows 11 that makes it more of a walled garden compared to Windows 10. All the security measures can be bypassed by a technical user if need be, e.g. running unsigned drivers [1], or installing on a machine without a TPM [2], or setting up an offline account on the Home edition. Satya Nadella sees Windows 11 being an open ecosystem as a selling point compared to alternatives [3] Along the launch of Windows, the Microsoft Store is more open now than before [4] For comparison, the current Linux boot security is very poor compared to other OSs, because it lacks similar features [5] I think Windows 11 is a step in the right direction, and I'm saying that as a happy Linux user. 1. https://gearupwindows.com/how-to-disable-driver-signature-enforcement-on-windows-11-10/ https://gearupwindows.com/how-to-disable-driver-signature-en... 2. https://www.howto-connect.com/install-windows-11-without-tpm-and-secure-boot/ https://www.howto-connect.com/install-windows-11-without-tpm... 3. https://www.windowscentral.com/satya-nadella-wants-windows-11-be-center-open-tech-ecosystem https://www.windowscentral.com/satya-nadella-wants-windows-1... 4. https://blogs.windows.com/windowsdeveloper/2021/09/28/microsoft-store-more-apps-more-open/ https://blogs.windows.com/windowsdeveloper/2021/09/28/micros... 5. https://0pointer.net/blog/authenticated-boot-and-disk-encryption-on-linux.html https://0pointer.net/blog/authenticated-boot-and-disk-encryp...
- lostmsu 5y ago
  Re: [4] will they re-allow crypto miners in the store? How about Torrent clients?
  - shaicoleman 5y ago
    Yes, these types of apps are currently available on the store, e.g. https://www.microsoft.com/en-us/p/wineth/9nkqnwq2l9lw https://www.microsoft.com/en-us/p/wineth/9nkqnwq2l9lw https://www.microsoft.com/en-us/p/torrex-lite-torrent-downloader/9wzdncrfjb3d https://www.microsoft.com/en-us/p/torrex-lite-torrent-downlo...
    - optimiz3 5y ago
      That first app violates Microsoft's ban on mining cryptocurrency on device: https://docs.microsoft.com/en-us/windows/uwp/publish/store-policies#102-security https://docs.microsoft.com/en-us/windows/uwp/publish/store-p... "Apps that enable the mining of crypto-currency on device are not allowed."