Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft no longer signs Windows drivers for Process Hacker

borncity.com

Post reply on HN
Print view View original

321–330 of 543 posts

Re: Microsoft no longer signs Windows drivers for Process Hacker

#321

Post by blibble »

IvanAchlaqullah wrote: post #319
zbrozek wrote: post #296

Earlier quoted context omitted.

Google provides attestation and it's a constant cat-and-mouse game that the rooters are usually losing. Websites can't tell, but lots of companies don't provide equivalent functionality via website. I know I can't upload check images for remote deposit unless I use the native banking app.

It's called SafetyNet [1] What irked me is sometime app developers are abusing it without asking themself "Does this app really need to check for rooted phones at all?" I'm okay if banks apps are using that. But why does fast foods apps need to use that? Most people that I know are paying with cash when they order foods online (and you can't hack paper money with rooted android phones). [1] https://developer.android.…

probably becomes a tick on an auditor's checklist

like having to rotate your password every 3 weeks and requiring 4 special characters/...

Re: Microsoft no longer signs Windows drivers for Process Hacker

#322

Post by jeroenhd »

ls65536 wrote: post #187
jeroenhd wrote: post #170

Earlier quoted context omitted.

Microsoft is doing its absolute best to move everyone to the Windows store by packaging the new apps everyone should be making into weird formats such as appx and msix which can't or previously couldn't be easily installed without command line funkiness. Luckily, Microsofts own incompetence is preventing this plan from working. There's another part to the exclusion of old hardware, which is that modern chips are a lo…

> modern chips are a lot more reselient against crashes according to the telemetry Microsoft collects Sort of a side point, but this got me wondering...Is there something inherently less stable about these older chips, or maybe is their stability somehow a function of their lifetime that would really matter here? My own anecdata (which is from a far smaller dataset than what I imagine Microsoft would have access to)…

Those are all valid questions and I think they do make Microsoft's defence a lot less credible. I believe there are some improvements, like speeding up certain commonly used instructions, the hardware SPECTRE etc. defences and better security features, but I don't think those will impact stability that much.

Whether it's because only newer chips without wear and tear come out on top in these statistics or because there's something in the hardware itself, the perception that Windows 11 is more stable is something Microsoft can market. Dropping chips that lack certain instructions also make their support and testing workload lighter. In the end, the quality and range of support Microsoft provide for their operating system depends on how much money they can make off their sales. If their losses from the move are lower than the cost of supporting older hardware, it's a decent business decision to do the unpopular thing and drop support. It's a private company, after all, focused on making their shareholders money.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#323

Post by [deleted] »

EvanAnderson wrote: post #318
batch12 wrote: post #233

Earlier quoted context omitted.

Did he enable a boot pin or are the drives just encrypted?

The drives are encrypted without a boot PIN. If I could exploit a vulnerability in the OS I could get the data. There will probably be a vulnerability discovered, at some point, that will allow access. I'd advised my friend's widow to hold onto the computers for the time being.

[deleted]

Re: Microsoft no longer signs Windows drivers for Process Hacker

#324

Post by RealStickman_ »

kevingadd wrote: post #218
Shorel wrote: post #212

I've had to authorize lots of Steam games this month in 'Windows Security' protected folders just so be able to save replays, or basic controls configuration. I think MS is going for the kill against Steam this time. And this is with Windows 10. Windows 11 will require MS permission, and some Steam games will simply never work there. But you will be able to purchase them again in the MS Store.

Arguably this is Valve's fault because they insist on putting a ton of stuff in secure folders (under Program Files) instead of where they belong (in the user's home/data directories) They've had a LONG time to fix this.

Isn't that just because the default library is in the steam install folder? (On windows)

Re: Microsoft no longer signs Windows drivers for Process Hacker

#325

Post by blibble »

MrStonedOne wrote: post #138

From: https://github.com/processhacker/processhacker/discussions/7... >The existing drivers are compatible with Win11 and haven't been blocked by Microsoft yet... The large majority of changes by Microsoft are limited to restricting the Windows API with signature checks that block competitors software (e.g. CreateWindowInBand, NtQuerySystemInformation, NtQueryInformationProcess to name a few) rather than directly tar…

weren't MS slapped around during the DOJ case for undocumented APIs?

and there's a mile of difference between undocumented and "can't be called by non-MS products at all"

Re: Microsoft no longer signs Windows drivers for Process Hacker

#326

Post by shukantpal »

DeathArrow wrote: post #258
watermelon0 wrote: post #78

Earlier quoted context omitted.

Or maybe this is related to the security, and Windows is the only widely used platform that didn't enforce TPM until recently? macOS is even more locked down, but they don't impede or force users to use Mac App Store.

>macOS is even more locked down, but they don't impede or force users to use Mac App Store. Until now. And because it faced competition from Windows. If they gain some market share, they will.

Wouldn't it always face competition from desktop Linux?

Re: Microsoft no longer signs Windows drivers for Process Hacker

#327

Post by abcd_f »

jeroenhd wrote: post #314
andrekandre wrote: post #183

Earlier quoted context omitted.

> modern chips are a lot more reselient against crashes sorry for a basic question, but im not sure how a chip itself is more resistant to a crash (in os? user space?)...

I don't know the cause, this is based on the numbers they reported to defend their decision to exclude older chips. I think it has something to do with the modern instruction sets being kinder to the kernel and the fact that on computers with recent processors certain processor features are enabled in the UEFI config by default more often, but I couldn't tell you which features that would be. My hunch is that I has t…

This is a grade A bullshit, with a strong smell of marketing spin to it.

If a program crashes on an older CPU, it damn sure will crash on a modern CPU just as well.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#328

Post by ryanlol »

zigzag312 wrote: post #181
ryanlol wrote: post #153

Earlier quoted context omitted.

I will personally pay you twenty thousand US dollars (in the cryptocurrency of your choice, bank transfer, western union, whatever) if you can prove beyond reasonable doubt that Microsoft has ever secretly shipped a backdoor in their OS so government agencies could spy on their users. Perhaps you will be the first person to actually prove the existence of the NSAKEY backdoor? (I doubt it.)

You might be right and there is no backdoor that was intentionally implemented. Although, numerous leaks do show that neither are always law-abiding saints, so a backdoor might not be too far fetched. From what I've heard (I may be wrong since I'm not from US), US company is not allowed to publicly disclose requests from NSA, so proving it would be very difficult.

I strongly believe that there’s just no point in backdooring Windows, this is complicated software with extremely large attack surface.

We’ve seen NSAs incredibly cool 0day exploits leak, we’ve seen some of their backdoors exposed, but so far there hasn’t been anything indicating a desire to backdoor Windows itself.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#329

Post by ryanlol »

RealStickman_ wrote: post #324
kevingadd wrote: post #218

Earlier quoted context omitted.

Arguably this is Valve's fault because they insist on putting a ton of stuff in secure folders (under Program Files) instead of where they belong (in the user's home/data directories) They've had a LONG time to fix this.

Isn't that just because the default library is in the steam install folder? (On windows)

Yeah, and Valve can’t be arsed to change it.

Re: Microsoft no longer signs Windows drivers for Process Hacker

#330

Post by [deleted] »

addicted wrote: post #205
dotancohen wrote: post #175

Earlier quoted context omitted.

Alright then, what unpopular end-user software cannot be installed and run with a mouse in e.g. Ubuntu?

I’m also struggling to understand why it would be difficult to create a mouse driven GUI for any CLI based app. In fact, there are apps that can do that automatically. Admittedly these apps tend to create not very good UIs, but the point is that it’s not hard at all.

[deleted]
Post reply on HN