41–50 of 55 posts
> create another Admin account and transform your current one to limited/ restricted/ standard user account to reduce the attack surface enormously. Don't use Admin account for your tasks! It's crazy how Windows doesn't have a sane way for users to became administrators temporarily. LAPS is a weird hack and Azure PIM doesn't work for local admin.
This suggests not to use privacy tools (most of which are FOSS and perfectly safe with proper usage), and to rely on official documentation only. I suppose there's some trouble in people for example disabling (extremely invasive) updates and forgetting about it, the average Joe that is. Some others are a compromise on privacy, I'd never accept cloud-based protection. Veracrypt is perfectly safe software, unlike the claims in this page that goes on to just mention how it breaks the boot trust chain, furthermore I'd trust it more than anything BitLocker does unless it's strictly a pre-boot authentication password with no TPM.
Windows cannot be made perfectly safe, accept and move on, this self-flagellation seeking the most hardened possible setup with things such as avoiding Firefox is a waste of time. Microsoft itself distributes what some may define malware, autorunning at startup forever on with a rundll process with Windows Update (see: logitech download assistant if you plug in one of their mice).
0. https://news.ycombinator.com/item?id=31876896
1. https://www.theregister.com/2022/06/27/7zip_compression_tool...
Earlier quoted context omitted.
It's still true today; the current version of 7zip doesn't support Control Flow Guard (validated on Win11), and there's lots of security features that come _after_ supporting that.
I'm not a Windows developer, so this might be a stupid question: is simply a case of just building 7-Zip from source and enabling the Control Flow Guard flag in Visual Studio, or does it require more work?
Earlier quoted context omitted.
> Any idea of the 'why' behind this? I'm pretty curious, too > Also what is a better alternative to 7zip is 7zip necessary nowadays? can the built in zip/unzip feature be enough?
The built in one only supports .zip format AFAIK. 7zip supports basically everything you will come across including .rar and .gz. Also it’s nice to have the Explorer shortcuts (right click, unzip here).
> avoid insecure software like 7-Zip (which e.g. lacks Anti-Exploit and MOTW support), Open/ LibreOffice, Firefox, True/Veracrypt, ... This is such bad advice that I can't take the rest of this guide seriously. Edit: The rest is even worse than I was expecting. E.g.: > execute/ open new files with one-day-delay because after one day, the malware is not 0-day anymore > use the only browser on Windows that natively sup…
>> execute/ open new files with one-day-delay because after one day, the malware is not 0-day anymore I mean this has to be a joke, right?
Earlier quoted context omitted.
>> execute/ open new files with one-day-delay because after one day, the malware is not 0-day anymore I mean this has to be a joke, right?
Why would that be a joke?
Earlier quoted context omitted.
Keep in mind that it's restricted to Pro and up. Are you a home user who wants to disable all the crapware and telemetry Microsoft infected your machine with? You've got to pay Microsoft more money to be allowed to do that!
A quick Google search will show how easy it is to enable the Local Group Policy Editor on Windows Home.
Earlier quoted context omitted.
A quick Google search will show how easy it is to enable the Local Group Policy Editor on Windows Home.
Sure it's easy to crack windows too. They still put too much behind Pro like disk encryption, something that should be default.
Earlier quoted context omitted.
I'm not a Windows developer, so this might be a stupid question: is simply a case of just building 7-Zip from source and enabling the Control Flow Guard flag in Visual Studio, or does it require more work?
previously it was a deliberate decision by the developer to turn these features off, as they hurt his benchmark scores
Earlier quoted context omitted.
previously it was a deliberate decision by the developer to turn these features off, as they hurt his benchmark scores
Can you link to a source for this?
https://landave.io/2018/01/7-zip-multiple-memory-corruptions...