4 ms·

"Security patches are not available for AME, as this subsystem has been disabled. In order to secure the system properly, we revoke administrator privileges fro

"Security patches are not available for AME, as this subsystem has been disabled. In order to secure the system properly, we revoke administrator privileges from all normal users, and activate the hidden administrator account. This will mediate approximately 75% of the critical attack surface, while locking down the system from most foreseeable major future threats." https://docs.ameliorated.io/common-questions/the-case-for-our-method.html#windows-update-and-security-concerns https://docs.ameliorated.io/common-questions/the-case-for-ou...

eviks 4y ago
Since you can do the same thing on a normal system, by what % is AME less safe vs a patched Windows?
- Kwpolska 4y ago
  If you install AME on your Windows copy today? Probably not much. A year from now if you don’t update? However many critical vulnerabilities are found in a year in Windows.
- riedel 4y ago
  If you for example consider a typical company security policy this is 100% less secure considering any vulnerabilities in windows itself minus the the attack surface of the different telemetry systems that have been disabled. If you care not to report your usage to Microsoft or any agency that Microsoft would need to release data to this is 100% 'secure'. Security has become the main argument for unwanted ongoing spying and patronising by OS vendors. Look at Google play services and/or safety net. It is like trust us or we render your system unusable it insecure. This amounts to blackmailing IMHO and regulators need to step in.
  - Dalewyn 4y ago
    Blackmailing is screaming "yOuR sYsTeM iS nOt SeCuRe!1!!@1!1!#11$%$!" to anyone who shirks updates of any kind. As if the sky is falling if they so much as miss a single update. To anyone who engages in that blackmail, and honestly gaslighting: Kindly fuck off. That argument has never been correct nor valuable information.
    - deleted 4y ago
      [deleted]

eviks 4y ago

Since you can do the same thing on a normal system, by what % is AME less safe vs a patched Windows?

Kwpolska 4y ago
If you install AME on your Windows copy today? Probably not much. A year from now if you don’t update? However many critical vulnerabilities are found in a year in Windows.
riedel 4y ago
If you for example consider a typical company security policy this is 100% less secure considering any vulnerabilities in windows itself minus the the attack surface of the different telemetry systems that have been disabled. If you care not to report your usage to Microsoft or any agency that Microsoft would need to release data to this is 100% 'secure'. Security has become the main argument for unwanted ongoing spying and patronising by OS vendors. Look at Google play services and/or safety net. It is like trust us or we render your system unusable it insecure. This amounts to blackmailing IMHO and regulators need to step in.
- Dalewyn 4y ago
  Blackmailing is screaming "yOuR sYsTeM iS nOt SeCuRe!1!!@1!1!#11$%$!" to anyone who shirks updates of any kind. As if the sky is falling if they so much as miss a single update. To anyone who engages in that blackmail, and honestly gaslighting: Kindly fuck off. That argument has never been correct nor valuable information.
  - deleted 4y ago
    [deleted]