5 ms·

Atlas: A Windows modification to optimize performance, privacy and usability

45 points by TaurenHunter 2y ago

gigel82 2y ago
I wanted this to be good, but upon close inspection of the "source code" you can find various executables, archives as well as a lot of scripts that download files from various urls at runtime, not to mention the atlas themes, background, oem/bios settings, etc. which don't appear to be optional. I don't think they would intentionally compromise your machine, but at least they're very susceptible to supplychain attacks. That said, there is a lot of good stuff in the scripts and registry tweaks that I wish could be made available independently.
dangsux 2y ago
[dead]
- OsrsNeedsf2P 2y ago
  No forced updates? Count me in
  - dangsux 2y ago
    [dead]
vsskanth 2y ago
One would think this is the entire point of Windows Pro and Enterprise, but apparently not.
- CamperBob2 2y ago
  LTSC is the new Enterprise. No, you can't have it.
  - minkles 2y ago
    Yes you can. Massgrave :)
ementally 2y ago
https://www.vice.com/en/article/m7bv4b/windows-for-gamers-rolls-dice-with-your-security-atlasos https://www.vice.com/en/article/m7bv4b/windows-for-gamers-ro... >An operating system marketed to gamers disables a host of Windows security features enticing users with promises of a smooth gaming experience which they may not realize is opening them up to potential attack.
- minkles 2y ago
  Most of the virtualization based security measures it disables are, well, described here nicely: https://xkcd.com/1200/ https://xkcd.com/1200/
  - acdha 2y ago
    You might want to read the article more carefully. Disabling Defender is a real risk, and the virtualization-based security is used by things like Credential Guard precisely to _prevent_ the problem in that xkcd cartoon. It’s not perfect but when you have a billion PC users each risk mitigation can be preventing a lot of people from having a very bad day.
    - minkles 2y ago
      I think you miss the point. Literally all the documents and information I need to protect are not protected by credential guard or virtualisation based security.
      - acdha 2y ago
        You probably do care about your saved credentials and application secrets, CNG keys, and passkeys, though, and VBS can protect those. I appreciate the humor in xkcd but a cartoon over a decade old is not an accurate depiction of the current state of the art, and while Microsoft may not have gotten as far as Apple has (backwards compatibility for the enterprise is a tar pit) it’s not like the security engineers didn’t laugh bitterly at that when it came out and decide to do better.
    - 2y ago
hypeatei 2y ago
It appears to boil down to powershell scripts and "playbooks" that disable services, and one that installs LibreWolf? Much more simple project here that "debloats" Windows 11: https://github.com/Raphire/Win11Debloat https://github.com/Raphire/Win11Debloat Atlas seems to be doing quite a bit like downloading archives, unzipping them, and installing executables.
- TheRoque 2y ago
  How can you reassure me that those scripts and mods don't contain some malware injection or something else ?
  - jkman 2y ago
    How can you reassure me that a random project by the name of AtlasOS doesn't contain some malware or something else?
    - TheRoque 2y ago
      Exactly, that's the same question. At least the parent I replied too is a bunch of open source scripts that anyone can monitor. But I'm not sure I'd install a closed source OS
cedws 2y ago
I've been through a Windows tweaking phase, trust me, it's a waste of time. All these Windows "distros" do is make weird placebo registry edits that are guaranteed to result in system instability. The best way to use Windows is just not to fuck with it. Default install, don't log in during setup, don't run any "debloat" placebo-ware and your computer will work just fine. If it gets slow or you get errors just nuke it and reinstall.
- exe34 2y ago
  > nuke it and reinstall ah that brings back memories! I think the last time I even thought about that kind of thing was before installing nixos around 2016. it's such a weird concept now!
- BLKNSLVR 2y ago
  Been through the options ranging from "run as default" to "tweak to within an inch of its life" which results in having done lots of nuke and reinstalls. The answer I've settled on, which has kept me slightly more happy and stable for a number of years, is Linux (primarily Pop_OS).
jfdjkfdhjds 2y ago
lol at everyone hereabout "disabling defender". the copy on the site opens with "F... windows". the target demographic is running pirated games and keygens. they already disable defender.
benterix 2y ago
A good summary for why I flagged the submission on this open, free, and otherwise useful project: > I wanted this to be good, but upon close inspection of the "source code" you can find various executables, archives as well as a lot of scripts that download files from various urls at runtime, not to mention the atlas themes, background, oem/bios settings, etc. which don't appear to be optional. I don't think they would intentionally compromise your machine, but at least they're very susceptible to supplychain attacks. That said, there is a lot of good stuff in the scripts and registry tweaks that I wish could be made available independently. So Atlas guys, if you hear that, please split it into safe and potentially problematic parts so that the user can have a choice.

45 points by TaurenHunter 2y ago

I wanted this to be good, but upon close inspection of the "source code" you can find various executables, archives as well as a lot of scripts that download files from various urls at runtime, not to mention the atlas themes, background, oem/bios settings, etc. which don't appear to be optional. I don't think they would intentionally compromise your machine, but at least they're very susceptible to supplychain attacks. That said, there is a lot of good stuff in the scripts and registry tweaks that I wish could be made available independently.

dangsux 2y ago

[dead]

OsrsNeedsf2P 2y ago
No forced updates? Count me in
- dangsux 2y ago
  [dead]

vsskanth 2y ago

One would think this is the entire point of Windows Pro and Enterprise, but apparently not.

CamperBob2 2y ago
LTSC is the new Enterprise. No, you can't have it.
- minkles 2y ago
  Yes you can. Massgrave :)

ementally 2y ago

https://www.vice.com/en/article/m7bv4b/windows-for-gamers-rolls-dice-with-your-security-atlasos https://www.vice.com/en/article/m7bv4b/windows-for-gamers-ro... >An operating system marketed to gamers disables a host of Windows security features enticing users with promises of a smooth gaming experience which they may not realize is opening them up to potential attack.

minkles 2y ago
Most of the virtualization based security measures it disables are, well, described here nicely: https://xkcd.com/1200/ https://xkcd.com/1200/
- acdha 2y ago
  You might want to read the article more carefully. Disabling Defender is a real risk, and the virtualization-based security is used by things like Credential Guard precisely to _prevent_ the problem in that xkcd cartoon. It’s not perfect but when you have a billion PC users each risk mitigation can be preventing a lot of people from having a very bad day.
  - minkles 2y ago
    I think you miss the point. Literally all the documents and information I need to protect are not protected by credential guard or virtualisation based security.
    - acdha 2y ago
      You probably do care about your saved credentials and application secrets, CNG keys, and passkeys, though, and VBS can protect those. I appreciate the humor in xkcd but a cartoon over a decade old is not an accurate depiction of the current state of the art, and while Microsoft may not have gotten as far as Apple has (backwards compatibility for the enterprise is a tar pit) it’s not like the security engineers didn’t laugh bitterly at that when it came out and decide to do better.
  - 2y ago

hypeatei 2y ago

It appears to boil down to powershell scripts and "playbooks" that disable services, and one that installs LibreWolf? Much more simple project here that "debloats" Windows 11: https://github.com/Raphire/Win11Debloat https://github.com/Raphire/Win11Debloat Atlas seems to be doing quite a bit like downloading archives, unzipping them, and installing executables.

TheRoque 2y ago
How can you reassure me that those scripts and mods don't contain some malware injection or something else ?
- jkman 2y ago
  How can you reassure me that a random project by the name of AtlasOS doesn't contain some malware or something else?
  - TheRoque 2y ago
    Exactly, that's the same question. At least the parent I replied too is a bunch of open source scripts that anyone can monitor. But I'm not sure I'd install a closed source OS

cedws 2y ago

I've been through a Windows tweaking phase, trust me, it's a waste of time. All these Windows "distros" do is make weird placebo registry edits that are guaranteed to result in system instability. The best way to use Windows is just not to fuck with it. Default install, don't log in during setup, don't run any "debloat" placebo-ware and your computer will work just fine. If it gets slow or you get errors just nuke it and reinstall.

exe34 2y ago
> nuke it and reinstall ah that brings back memories! I think the last time I even thought about that kind of thing was before installing nixos around 2016. it's such a weird concept now!
BLKNSLVR 2y ago
Been through the options ranging from "run as default" to "tweak to within an inch of its life" which results in having done lots of nuke and reinstalls. The answer I've settled on, which has kept me slightly more happy and stable for a number of years, is Linux (primarily Pop_OS).

jfdjkfdhjds 2y ago

lol at everyone hereabout "disabling defender". the copy on the site opens with "F... windows". the target demographic is running pirated games and keygens. they already disable defender.

benterix 2y ago

A good summary for why I flagged the submission on this open, free, and otherwise useful project: > I wanted this to be good, but upon close inspection of the "source code" you can find various executables, archives as well as a lot of scripts that download files from various urls at runtime, not to mention the atlas themes, background, oem/bios settings, etc. which don't appear to be optional. I don't think they would intentionally compromise your machine, but at least they're very susceptible to supplychain attacks. That said, there is a lot of good stuff in the scripts and registry tweaks that I wish could be made available independently. So Atlas guys, if you hear that, please split it into safe and potentially problematic parts so that the user can have a choice.