Of course, we are on what, 30 years of trying and failing to certify protection against attackers with moderate attack potential [1][2]. Page 53: “The evaluato

Of course, we are on what, 30 years of trying and failing to certify protection against attackers with moderate attack potential [1][2]. Page 53: “The evaluator will conduct penetration testing, based on the identified potential vulnerabilities, to determine that the OS is resistant to attacks performed by an attacker possessing Basic attack potential.” Maybe at some point we will start believing what they achieve in their certifications rather than what their marketing spews. [1] https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/windows-platform-common-criteria https://learn.microsoft.com/en-us/windows/security/security-... [2] https://www.commoncriteriaportal.org/files/ppfiles/PP_OS_V4.2.1.pdf https://www.commoncriteriaportal.org/files/ppfiles/PP_OS_V4....