Live data from Hacker News

Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

technical.ly

41–50 of 156 posts

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#42
post #28

> Microsoft has a long history of playing fast-and-loose with the truth. And that’s again the case with Windows 10 coming to its supposed “end of life” this fall. I can’t take an article seriously, whatever merits it might have, if this is the opening gambit. “End of life” is a fairly common term of art amongst software and hardware OEMs. Windows 10 is going to be end of life. No scare quotes needed.

The funniest thing about this is that any major security indicent with Windows 10 after EOL would obviously get fixed by Microsoft because it would be so existentially terrible for them to point to the fine print and ignore it. But you can't stop outrage journalism.

... Hence the scare quotes

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#43
post #23

Not a fan of windows, but i hate this FUD against TPM&Secureboot

I don't think Windows is using TPM for anything useful. As for Secure boot, its main goal seems to be preventing you from installing non Windows operating systems.

If you own the computer, you can enroll your own keys and sign any operating system you want. The UEFI vendors don't necessarily make this easy to do, nor do they support it in a consistent way, but it's there. Of course, Microsoft has no incentive to make this any easier, since their keys come preloaded on every computer.

The primary function of Secure Boot is to protect against bootkits. In a way, you're right, because for most desktop/laptop computers, a bootkit is indeed a "non-Windows operating system" that shouldn't be allowed to run. It's hard to get clear numbers on how prevalent bootkits actually are, but they're not purely theoretical. They can also be chained into compromising the UEFI and peripheral device firmware. So there's a real security threat being addressed by Secure Boot. Whether it should be required or not is really about the question of where the responsibility boundary between Microsoft and the end user lies.

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#44
post #22

Every time this happens, I wonder why people do not just drop Windows entirely.

Because the vast majority of society does not support Linux, if they even know what it is to begin with.

So few people actually use Linux and they use wildly different versions of it.

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#45

Earlier quoted context omitted.

Windows has supported hardware encryption for a very long time. I support various machines owned by my family that are hardware encrypted spanning across the last 15 years. All work on Windows 10 and are encrypted with Bitlocker (or that invisible Home edition "device encryption" version). They don't support Windows 11.

… and all those things that Windows 10 “supports“ can be much more easily bypassed without TPM and secure boot. Lots of things not to like about Win11 but force-dragging their manufacturers and customers into 2010s era security is long overdue.

> much more easily bypassed without TPM and secure boot

How does secure boot help against a browser vulnerability exploitation? Especially on Windows?

And if we're talking local attacks, there's always the $5 wrench to bypass the TPM.

> force-dragging their manufacturers and customers into 2010s era security is long overdue.

Spoken like someone who gets the newest tech toy without having to think if they can afford it. How much are your lattes?

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#46
post #18

How's Mint? I'm asking because I installed a fresh ubuntu desktop in a VM today and the spam I got on first run reminded me of ... Windows.

Mint is an absolutely outstanding piece of software. Commitment to stability and ease of use, which is what most regular users want from their OS. It moves slowly, but that's the price you pay for consistency and attention to user friendlyness.

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#47
post #32
post #28

> Microsoft has a long history of playing fast-and-loose with the truth. And that’s again the case with Windows 10 coming to its supposed “end of life” this fall. I can’t take an article seriously, whatever merits it might have, if this is the opening gambit. “End of life” is a fairly common term of art amongst software and hardware OEMs. Windows 10 is going to be end of life. No scare quotes needed.

This probably refers to the fact that Windows XP still has support contracts. Microsoft commonly calls their software EOL and then supports it for 5+ years. I don't think that's a bad thing, but they tend to use it more as a marketing term than a true hard line where security fixes stop going out.

Also, If I remember correctly, the originally announced end of life for Windows XP was extended because too many people were still running it when the date came. (I think they even extended it more than once)

Re: Microsoft's big lie: Your computer is fine, and you don't need to buy a new one

#50

We can't have it both ways. Either Windows gets serious about security and enforces hardware encryption or forever the industry will say "oh, Windows isn't secure you can't trust it."

Being serious about security means replacing the ecosystem of downloading unsigned .exe installers. Unfortunately code signing and discouraging downloads of unpopular exe files has been very hostile to independent developers. The Windows Store is focused on shovelware and revenue share rather than getting a real package manager out there.
Post reply on HN