Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

neowin.net

Post reply on HN
Print view View original

251–260 of 288 posts

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#251

Post by RGamma »

_fat_santa wrote: post #129
t_mann wrote: post #77

Windows 11 looks like the perfect reason to give UNIX-based systems another try. Literally the only thing that's kept me hooked to Windows are the Office apps. They're baked into so many of my workflows, from creating simple graphics to doing my personal finances, and of course plenty of legacy documents that I'd like to continue being able to use. They're really Windows-native I've found, even the official versions…

I run Linux on my work machine and my office is full Windows/MacOS shop.I've so far been able to get away with using either office web apps for things like Teams, Outlook, Excel and Word and I also have a Window 11 VM that has all the desktop versions of the same apps. I would say that 99.9% of the time I can get away with using the web app versions, even for things like Teams meetings it works really well. Once in a…

What VM setup do you use? Does it play well with W11's TPM requirements? Does GPU acceleration work?

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#252

Post by AnthonyMouse »

BobaFloutist wrote: post #249
AnthonyMouse wrote: post #219

Earlier quoted context omitted.

It doesn't really matter how many distros there are. If you're a new user, just use Debian Stable or Ubuntu LTS.

It does if every comment saying "Just use" has a different arcane incantation after it, and three comments under it saying why that specific version sucks and you should actually use something else.

They don't though. The recommendations for new users are nearly universally to use Debian or one of its most popular derivatives like Ubuntu or Mint, which are all very similar to one another and share the large majority of their code.

It's like saying Windows has too many versions because there is Home/Pro/Education/Enterprise and then 23H2 vs. 24H2 etc. There is barely any difference between them.

The distro wars are a bunch of programmers arguing about which one has the best toys for power users. Any of them will run a web browser and the boring popular Debian Stable or LTS derivatives are the ones least likely to deliver unscheduled maintenance as a result of an update.

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#253

Post by beart »

jenscow wrote: post #108
beart wrote: post #43

Earlier quoted context omitted.

In my experience, it is not about functionality. It is about polish, integrations, and troubleshooting. If you assume all your devices and software will work on Linux mint out of the box, great. But they won't. Then you end up spending hours trying to get the 5th mouse button to do what it does automatically in Windows. Sure there's a fancy utility on Linux that supports programming that mouse, good luck getting your…

"mother" has no need for a 5 button programmable mouse, nor does she have a need for applications beyond the web browser. No troubleshooting required.

Right, it's better to dictate how things should be when the user doesn't care and doesn't have the background. Which is probably why most people in the category are using iPhones and Chromebooks, not Linux mint.

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#254

Post by kbolino »

wnevets wrote: post #116

has anyone ever explained why TPM 2.0 is so much better than TPM 1.2 on Windows 11? What can't Microsoft do securely with 1.2 that it can with 2.0? I'm not asking what 2.0 does better than 1.2, I am asking why is it a must have.

TPM 1.2 is only guaranteed to support SHA-1. That was a baffling inadequacy when it came out in 2011, proven so just a few years later when SHA-1 was publicly broken in 2017. This makes TPM 1.2 useless for its intended purpose.

TPM 2.0 is guaranteed to support SHA-256.

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#255

Post by Paianni »

baq wrote: post #196
Karellen wrote: post #157

Earlier quoted context omitted.

It's probably worth trying LibreOffice again if your last install was a couple of years ago. They take document compatibility bugs pretty seriously and fix a bunch with every release. That's probably the easiest step to take next, before looking at virtualization or a full Linux install with Wine.

Calc is... bad. It's slow and I've run into bugs in formulas; would rather use google sheets, which are a different kind of bad, but better than calc. No issues with writer, haven't used anything else.

You would probably like Gnumeric, though that project is very Unix-specific.

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#256

Post by alemanek »

airstrike wrote: post #128
t_mann wrote: post #77

Windows 11 looks like the perfect reason to give UNIX-based systems another try. Literally the only thing that's kept me hooked to Windows are the Office apps. They're baked into so many of my workflows, from creating simple graphics to doing my personal finances, and of course plenty of legacy documents that I'd like to continue being able to use. They're really Windows-native I've found, even the official versions…

I'm working on a cross-platform native-first, offline-first replacement for Excel and PowerPoint, so hopefully it can help you and others make the switch. I, too, spent far too long trapped in Windows because I couldn't get away from MS Office

That sounds cool. Do you have a product page or GitHub? I would love to follow along or contribute if you are building in public

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#257

Post by gruez »

deno wrote: post #164
gruez wrote: post #154

Earlier quoted context omitted.

>And Win11 requires specifically TPM 2.0 (usually fTPM) not just any TPM. There are TPM 2.0 dTPMs. If the conspiracy is that they want to push people towards "hardware attestation", then they're doing a pretty bad job. >You’re also entirely missing the point. Yes, you can bypass TPM based DRM to extract the unencrypted video (or just analog hole it) that’s why the game is to lock down the OS so you just can’t play it…

Intel SGX was never pushed on anyone and it's also Intel only Skylake to Ice lake and requires vendors to provide consistent firmware updates to stay secure. You can’t run the entire OS in SGX enclave because it can’t do I/O on its own. > There are TPM 2.0 dTPMs. If the conspiracy is that they want to push people towards "hardware attestation", then they're doing a pretty bad job. No "normies" are doing TPM bypasses.…

>Intel SGX was never pushed on anyone

Considering that's the only way to play most DRM protected 4K videos, it's probably more of a "push" than requiring TPM. It didn't even have the fig leaf of being usable for FDE or webauthn.

>No "normies" are doing TPM bypasses. That’s the point. Majority will eventually be on unbypassable TPM.

If the bar is "normies", then you don't even need TPM. You can just slap denuvo or whatever and call it a day.

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#258

Post by heroprotagonist »

colejohnson66 wrote: post #76
heroprotagonist wrote: post #41

[flagged]

What kind of conspiracy theory is this? A TPM stores keys and releases them upon attestation. How does that allow offloaded processing?

It's the basis of the root of trust.

Describe to me, how would you perform secure processing of encrypted workloads without it, and know it was secure? That the workload was not in a VM and the hardware was not issuing deliberately weak keys that could be exploited to expose the workload?

Re: Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs

#260

Post by heroprotagonist »

reginald78 wrote: post #195
heroprotagonist wrote: post #41

[flagged]

The TPM push predates the AI craze and I don't see this as a particularly strong compliment so this doesn't really follow to me. But the general idea isn't that crazy honestly. They already use your upload bandwidth via a bittorrent-like system to distribute Windows updates to other users so there is precedent to use client resources to lower their own operating costs. I think an AI botnet is probably a poor fit for…

I think I triggered some people by saying "AI" here, and you're right. This can definitely be used at a much wider scope. It's not specific to AI.

The "AI" comes in where the cost of processing all of the data is high, and Microsoft start pushing everyone to include NPU in their next "AI-enabled Windows PCs". On-device processing with a lot of benefits to the users.. but even more if the results of all of that processing can be sent back to the cloud and not take up space on Microsoft analytics processing farms.

Post reply on HN