Live data from Hacker News

Upcoming Windows 11 builds cannot install without internet and Microsoft Account

infosec.exchange

71–80 of 288 posts

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#71

Could you create a slipstream ISO using nlite, create a user and then it's bypassed?

The simplest way imho would be to use Windows configuration designer. It generates a file that automate windows oobe when put on a USB key connected to the pc during setup.

https://learn.microsoft.com/en-us/windows/configuration/prov...

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#72

It's such an absurd lie. If Microsoft's idea of security is to force its users to authenticate online for a local account, they should never be allowed in the software industry at all. They're needlessly and dramatically increasing the attack surface of one of the most security critical software running on user devices.

It's an argument for increased security in the same way that they consider uploading the contents of your hard drive to their servers to scan for "malware" (and other undesirable-to-them content) is. Corporate authoritarianism.

I guess Microsoft has to secure their "own" property, the devices the hostile so-called users bought and paid for!

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#73
Accorsing to the first comment under the OP the script just runs:

    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE /v BypassNRO /t REG_DWORD /d 1 /f
So presumably the removal of the script won't impact bypass methods used by the likes of Rufus and Ventoy.

Either way, I've been happily on Fedora for a while now, with very minimal "fuck I can't do that here"

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#74

Earlier quoted context omitted.

Microsoft's idea of security is moving people away from local accounts protected by passwords and to Microsoft accounts protected Windows Hello. The Windows Hello PIN is protected by the TPM. This means you can't brute force it like a password could be.

That has nothing whatsoever to do with the topic, which is forcing online authentication. You can't possibly argue that needlessly forcing online authentication makes user safe.

The topic isn't about forcing online authentication. It's about improving security from having users use a Microsoft account. The security improvement of using a Microsoft account comes from Windows Hello.

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#75
post #47

Is there a good reason (other than licensing and Linux as an alternative) I shouldn't use Windows Server 202X as a Desktop OS?

You don’t need to use the Server SKU. LTSC exists. It’s basically the Server version, but without any of the Server stuff.

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#76

It's such an absurd lie. If Microsoft's idea of security is to force its users to authenticate online for a local account, they should never be allowed in the software industry at all. They're needlessly and dramatically increasing the attack surface of one of the most security critical software running on user devices.

If windows is security critical for you, I think you've already shat the bed.

The problem is that many other people and organizations run Windows and it's absolutely security critical for them. And because we don't live in a vacuum, it's security critical for all of us.

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#77
post #54

Earlier quoted context omitted.

Well, those that are on the Windows 10 IoT LTSC builds will enjoy updates until 2032. https://learn.microsoft.com/en-us/lifecycle/products/windows...

Do you know where to buy it?

mas

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#78
post #36

A while ago, I needed to get into safe mode to rescue a laptop that wouldn't boot. Since it uses Windows 11, I originally logged in using my Microsoft Account and a Windows Hello pin. Safe mode doesn't load wifi drivers and the laptop didn't have an ethernet port, so I couldn't log in to my Microsoft Account to get into Windows safe mode. Didn't have a dongle with ethernet port at that time, so I had to backup the dr…

wait, you need internet connection to even login? this means root cannot use computer when you do not have internet connection for any reason?

> you need internet connection to even login

That's right. It sounds like a bug but this is Microsoft we're talking about here. They're probably brainstorming for ways to lock you from your own computer.

You can solve this problem by creating an offline account with Admin privileges after setting up Windows with your online account, but most users won't do that.

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#79

Could you create a slipstream ISO using nlite, create a user and then it's bypassed?

Easy way to create custom Win11 iso is using microwin from the Chris Titus win util suite

https://christitustech.github.io/winutil/userguide/

https://github.com/ChrisTitusTech/winutil

https://christitus.com/windows-utility-improved/

It's an open source textGUI powershell suite with hyperlinks to all the toggle tweaks, maintained by one talented MS engineer and contributed to and eyeballed by a hundred odd contibuters.

Re: Upcoming Windows 11 builds cannot install without internet and Microsoft Account

#80

Earlier quoted context omitted.

It's an argument for increased security in the same way that they consider uploading the contents of your hard drive to their servers to scan for "malware" (and other undesirable-to-them content) is. Corporate authoritarianism.

The trick is that most of the users need this service. Before Windows Defender was built in you had to buy an anti virus software from sneak oil Windows security industry, and likely get somehow scammed in process. The same companies sell anti virus for Android today. Also most users is not all.

But this made Windows Defender an actually good and useful feature for the users.

Requiring an online account to use Windows isn't really the same thing.

Post reply on HN