4 ms·
Secure from PII telemetry phoning home: perhaps, likely better than stock Win10 or even LTSB/LTSC in that regard Secure in literally any other way: outside the
by aspenmayer 5y ago
Secure from PII telemetry phoning home: perhaps, likely better than stock Win10 or even LTSB/LTSC in that regard
Secure in literally any other way: outside the scope of the project
- throwmeariver1 5y agoTelemetry is a non issue if your network has a good nat in front… software updates on the other hand…
- alar44 5y ago>"has a good NAT" What is a good NAT as opposed to a bad one? "Dude the DHCP on this network is AWESOME" lol
- throwmeariver1 5y agothe configuration? what the fuck is this comment.
- alar44 5y agoWhat configuration is there? You're either NATing or you're not. There's no "good". It's on or off. What situations have you been in where you weren't NATing between LAN and WAN?
- throwmeariver1 5y agoOh my that's so cute... not everything runs on a home router. lmao
- alar44 5y agoI'm not talking about home routers. I'm taking about NAT, which I can tell you don't understand. Toodles.
- Forbo 5y agoDoes VPN subnet translation count as NAT? Because I've definitely seen some footguns come from that.... I've also seen instances where poorly configured NATs ended up allowing victims to be used as proxies. So I'd say there are definite security questions to take into account.
- clucas 5y agoDo you understand why people might get confused? They don't qualify what they mean by "more secure," and it seems reasonable to criticize the project if their idiosyncratic definition of "secure" actually excludes one of the biggest advances in consumer software security in the last 20 years...
- aspenmayer 5y agoI’m not a dev on the project, fwiw. In any case, if you wanted security in the way you describe, how would you justify running Windows 10 at all? The onus isn’t on this project to secure Windows when they had no part in making it insecure to begin with. If Windows were open source, these measures wouldn’t be necessary, and wouldn’t result in less security. This is the current best effort that the devs can do to accomplish their goals. It’s fair to criticize the goal or the results, but issues you’re describing are present in stock Windows 10 to begin with. I’m sure that some kind of auto build script could be created, so that whenever new Windows Updates are released, a new build is created.
- hedora 5y agoThe biggest advance I can think of is using security as an excuse to gather and monetize data. Different people have different attacker models. I can imagine something like this would be perfect for keeping a mostly airgapped machine to access archives of documents created by Windows. (Or to use legitimately licensed, pre-everything as a service software in perpetuity)