OT: Windows 11 October 5th and Other Interesting News..

123468

Comments

  • TaozTaoz Posts: 10,264

    Subtropic Pixel said:

    IceCrMn said:

    I got a question for anyone experienced with using this kind of hardware. 

    Will this TPM device have to encrypt/decrypt my entire 2TB+ daz studio content drive every time I want to use it? If so, how long does that take?

    As far as I understand it, the TPM chip just validates your credentials.  If something is to be encrypted/decrypted, that's done by another type of processor, typically in your hard drive.  And being hardware based, it's so fast that people are using audio recording programs without issues, even with i3 and i5 processors.  I'm really not worried about en/de-cryption performance in this area.

    Even software based (like DriveCrypt or the free VeraCrypt) disk en/decryption can be very fast, and has been for many years actually.       

  • kyoto kidkyoto kid Posts: 41,887

    Subtropic Pixel said:

    The only Google nag I get is on my phone to update the Android version of Chrome (which I rarely use save for a couple sites).  Not even sure the newest version is supported by Android 5.1. but I can't seem to get rid of the nagware.  Not about to dump money into a new phone as I pretty much only have it for emergency contacts. 

    I do nearly as much on my phone as I do on my computers.  It's your choice of course, but you're actually missing out on a big part of modern computing.

    ...I'd need a more comprehensive plan with unlimited data access (and a larger monthly bill) for doing that along with a newer, far more capable (expensive) phone, both of which are out of my budget. At most I check sports scores, the current weather, what time the bus will arrive (or if there are delays), and how to get to someplace I haven't been to before.  That's about it. I easily can do that on my old phone with 3 GB of data.  Yeah, it's a bit slow at times, but I'm retired, and no longer in a rush to do things or get somewhere.

    I also could never watch videos or films on that tiny screen either when I have a nice 24" widescreen display and mini home theatre sound system on my desk. (along with a really nice comfy chair to sit in).

  • takezo_3001takezo_3001 Posts: 2,026

    I was putting off a motherboard upgrade for a while now... thanks to the TPM requirement it looks like I'll have to do an upgrade ASAP but even if I do have until the holidays, I predict that Mobo prices will be getting scalped as with the TPM plugins, so I'm getting one next paycheck!

  • IceCrMnIceCrMn Posts: 2,320

    Just saw this on slashdot

    https://it.slashdot.org/story/21/06/26/1918225/microsoft-admits-to-mistakenly-signing-a-malicious-malware-rootkit

    The new TPM requirement came up in the comment section pretty fast.

  • takezo_3001takezo_3001 Posts: 2,026
    edited June 2021

    IceCrMn said:

    Just saw this on slashdot

    https://it.slashdot.org/story/21/06/26/1918225/microsoft-admits-to-mistakenly-signing-a-malicious-malware-rootkit

    The new TPM requirement came up in the comment section pretty fast.

    Ironic that they require TPM as a security mandate, yet break their own security themselves!

    "Yeah, it'll be so great when I upgrade to a new computer with a TPM module and current-gen CPU. Then I can run Windows 11 and still get malware, because Microsoft accidentally signed it. Oops."

    Sucks that I still have to upgrade my mobo, as an os system upgrade mandate, oh well, I need a new mobo anyways!

    Post edited by takezo_3001 on
  • nonesuch00nonesuch00 Posts: 18,753
    edited June 2021

    namffuak said:

    As a single person, living alone, I can't see any use for full drive encryption. I have several terabytes of material on my drives, the vast majority consisting of documents, images, and videos downloaded from the internet. There's no point in encrypting these. I have one directory of less than a gigabyte that might qualify for encryption - tax and medical data - but I don't even consider that worth the effort.

    I have my financial data, my user names and passwords, my DAZ stuff and a long list of other things but I note that you assume they only want to steal your data and money.

    What if they want to use your storage space for storing and distributing their files? Are you confident that what they're distributing is legal? Why is that, because they are already on your computer illegally? They also like using your computer for DDoS and other types of attacks on other computers and networks.

    Post edited by nonesuch00 on
  • nonesuch00nonesuch00 Posts: 18,753

    Seven193 said:

    nonesuch00 said:

    I bought a TPM 2.0 mobule for my Gigabyte motherboard wunning a AMD Ryzen 7 2700 CPU last year. It was expensive at $25 on eBay. I use it to encrypt my local drives on the PC. I once even had to go online to MS to retreive a backup unlock of the key for a particular drive after I upgraded the motherboard BIOS causing Windows 10 to think I was using a different computer with that drive.. I sweated that one a bit until I got the backup unlock key online. If push came to shove I could of restored the motherboard BIOS to the prior version. I don't know what else those TPM 2.0 modules enable.

    I think TPM 2.0 is Microsoft's solution to protecting computers against ransomware, which has been mentioned a lot in the news lately.  So, if ransomware were to overwrite your BIOS firmware with malware, TPM 2.0 is somewhow able to scan it and give you control of your computer back?  Something like that.  But, that probably has something to do with Windows 11 too.  Older operating systems might not work like that.


     

    I've not studied how it does that but if a drive is already locally encrypted using the very long unique encryption key generated by the TPM 2.0 module then I think further attempts to encrypt that already encrypted drive will fail in the Windows OS. The very long encryption key and fast(er) encryption is what the "BitLocker" with a TMP 2.0 module offers.

    Better go look it up at a more expert sight then what little I know.

  • nonesuch00nonesuch00 Posts: 18,753

    IceCrMn said:

    Nyghtfall said:

    Quasar said:

    Well, I turned on TPM PTT in my BIOS and ran the PC Health Check app. It tells me that my computer is ready for 11. Unfortunately, I can't hear sound from my computer now. There doesn't seem to be any driver issue since the computer acts as if it is playing the sounds. They just aren't coming out of the speakers. I'm not sure if sound issue has anything to do with TPM but can I safely turn it off in the BIOS again to test it?

    I can't find anything about TPM/PTT adversely effecting audio output but you can safely turn it off.  If there's an option to clear any stored data, you might want to enable it when you un-check the PTT.  I suggest reading the link below for detailed instructions, adapting the steps to your BIOS of course.

    Reference:

    https://docs.microsoft.com/en-us/windows/security/information-protection/tpm/initialize-and-configure-ownership-of-the-tpm

    I have 2 family members I live with that can't remember their FB logins. They refuse to write them down. Adding TPM to the mix, and a guarantee of data loss every time the TPM password is forgotten should make for some entertaining times ahead.

    It makes you save a recovery key to your online MS account or locally to a USB file. For what it's worth, I've had to use a different recovery key (I upgraded my motherboard BIOS AND did not turn off BitLocker beforehand, yes, you can turn BitLocker on and off) on 3 2TB drives using my tiny 5 year old iPhone SE and my online MS account. I really thought that data might be gone but it worked like a charm. 

  • LynnInDenverLynnInDenver Posts: 147

    Yeah, the "supported processors" list is actually Microsoft's document to manufacturers of computers/components for what they'll allow the "Ready for Windows 11" logo set to be printed on the box of. It apparently doesn't have a lot of bearing on what the OS will actually install on that's already out there..

  • pixelquackpixelquack Posts: 333
    edited June 2021

    IceCrMn said:

    Just saw this on slashdot

    https://it.slashdot.org/story/21/06/26/1918225/microsoft-admits-to-mistakenly-signing-a-malicious-malware-rootkit

    The new TPM requirement came up in the comment section pretty fast.

    I couldn't have wished for a better example how platform control is taken away from you. Not "careless admin did not not spot malware", no, "MS ok'ed it". You rely on MS, you get screwed.

    Plus that door swings both ways: "Oh, we blocked that VPN tool to masquerade your IP, totally an accident, we'll roll back in 6 months".

    "Oh we blocked your favourite encryption software, totally by accident, but why don't you just use Bitlocker, now encrypted with keys from the totally secure TPM2.0 module on your board, which has a root key from the TC Group, so a conglomerate of intel, IBM, MS and other bigheads who proven over and over in the past how they are the world greatest altruists and only care about you being happy."

     

    Post edited by pixelquack on
  • kyoto kidkyoto kid Posts: 41,887

    ...MS is only ensuring that those like myself stay on W7 or 8.1. 

    Unless they want to buy me a whole new W11 ready machine because I cannot afford one.  Then again after reading that peice in the link above, not sure I really want a system with a built in backdoor.  It may only be affecting one nation for now but who's to say it won't be eploited elsewhere?

  • Nyghtfall3DNyghtfall3D Posts: 813
    edited June 2021

    Just pulled the trigger on a Core i7-10700K to get ahead of potential scalpers. Picked it up for $312 on Amazon. I won't be able to upgrade my mobo or RAM for a while yet but at least my build's got a new brain.

    pixelquack said:

    Heck no. Actually, everybody in their right mind should avoid TPM like the plague.

    "I'm only saying this because I care - there's a lot of decaffeinated brands on the market that are just as tasty as the real thing." - Val Kilmer in Real Genius.

    Post edited by Nyghtfall3D on
  • PerttiAPerttiA Posts: 10,024

    kyoto kid said:

    ...MS is only ensuring that those like myself stay on W7 or 8.1. 

    Unless they want to buy me a whole new W11 ready machine because I cannot afford one.  Then again after reading that peice in the link above, not sure I really want a system with a built in backdoor.  It may only be affecting one nation for now but who's to say it won't be eploited elsewhere?

    Yes, and when the smelly thing hits the fan, it adds an other layer of complexity to tackle. 

  • kyoto kidkyoto kid Posts: 41,887

    ...or as I used to say "the solid matter hits the air circulation unit".

    I have my VPN service, a stout firewall, excellent AV and anti malware software, nobody else in my place to physically access my systems, my connection is all hardwired (as is my local network), and I am careful where I go on the Net and what I click on.

  • pixelquackpixelquack Posts: 333

    Nyghtfall said:

    Just pulled the trigger on a Core i7-10700K to get ahead of potential scalpers. Picked it up for $312 on Amazon. I won't be able to upgrade my mobo or RAM for a while yet but at least my build's got a new brain.

    pixelquack said:

    Heck no. Actually, everybody in their right mind should avoid TPM like the plague.

    "I'm only saying this because I care - there's a lot of decaffeinated brands on the market that are just as tasty as the real thing." - Val Kilmer in Real Genius.

    Your new brain won't think W11 and with a new board on W11 the ones to allow what it can think or not is the platform owner, and with TPM+MSacc that's not you. 

  • Nyghtfall3DNyghtfall3D Posts: 813

    pixelquack said:

    Your new brain won't think W11 and with a new board on W11 the ones to allow what it can think or not is the platform owner, and with TPM+MSacc that's not you. 

    I get it.  You hate MS.  Fine.  I need Windows, and I need to be able to upgrade to 11 when the time comes.  Therefore, I'm sticking with the devil I know and upgrading my hardware.

  • kyoto kidkyoto kid Posts: 41,887

    ...indeed given that Macs are more expensive and very liited with regards to expansion (as well as their OS no longer supports Nvidia drivers) and Linux isn't supported by Daz or a number of other 2D/3D graphics software, Windows is all we have.

  • TorquinoxTorquinox Posts: 4,290

    OS/platform developer control and montoring of devices is nothing new. It's been an integral part of the mobile market and part of Apple everything for years. The surprising part is not that MS is doing it now. It's that it took this long for MS to do it. Also, we don't know if the features that require the TPM are actually required for the OS to run or if they can be deactivated. Historically, the system services allow one to have full ownership of the system. You can disable any services you like with the caveat that your system may not be quite right after that. It may be ridiculous to think that we can all escape the TPM, but IDK. We may well be able to say no to those services. As with anything, time will tell.

  • Ron KnightsRon Knights Posts: 2,145

    I saw the MS introduction of Windows 11. It felt like "deja vue, all over again." I've seen those features somewhere before. (Remember I used Apple computers for years before coming back to PCs.)

    I am not interested in any of the features. The panels, whatever they are called. I never used those things on my Apple computers either. The good news is that my HP Envy is ready for Windows 11.

  • Subtropic PixelSubtropic Pixel Posts: 2,388

    I think it's still early stages.  I plan to do nothing for a little while yet; maybe for as much as a year.  This will give me an idea of what needs to be done when, and will also give me time to budget for anything I may need to spend money on.

    But it would be foolish for me to swear I'll "always" do this thing, or that I'll "never" do that one. 

  • fred9803fred9803 Posts: 1,565

    kyoto kid said:

    ...or as I used to say "the solid matter hits the air circulation unit".

    I have my VPN service, a stout firewall, excellent AV and anti malware software, nobody else in my place to physically access my systems, my connection is all hardwired (as is my local network), and I am careful where I go on the Net and what I click on.

    If I were that concerned about my privacy I'd be using the Tails OS.

  • kyoto kidkyoto kid Posts: 41,887

    ..,not so much privacy, but simply keeping the system "clean" and virus/malware free. 

  • Ghosty12Ghosty12 Posts: 2,080
    edited June 2021

    Well decided to turn on the Intel TPM in bios and now the checker says I can run Win 11 now.. lol  Though "will try" to wait a while before upgrading as with everything to make sure it is more stable and that the hardware drivers are done for it.. laugh

    Post edited by Ghosty12 on
  • Nyghtfall3DNyghtfall3D Posts: 813

    Ghosty12 said:

    Well decided to turn on the Intel TPM in bios and now the checker says I can run Win 11 now.. lol 

    Grats!

  • fred9803fred9803 Posts: 1,565

    kyoto kid said:

    ..,not so much privacy, but simply keeping the system "clean" and virus/malware free. 

     A VPN won't protect you against viruses/malware and neither will hard-wiring. AV or malware software may so long as they keep their definitions ahead of the bad guys. I've had my AV pass files as clean only to have infection warnings pop up the next morning by the dozen AFTER the AV updated their virus definitions. Had to reformat my HD. 

  • takezo_3001takezo_3001 Posts: 2,026

    fred9803 said:

     A VPN won't protect you against viruses/malware and neither will hard-wiring.

    They'll help against hackers/DDoS and others that try and get your identity through your IP...

  • kyoto kidkyoto kid Posts: 41,887

    takezo_3001 said:

    fred9803 said:

     A VPN won't protect you against viruses/malware and neither will hard-wiring.

    They'll help against hackers/DDoS and others that try and get your identity through your IP...

    ...exactly. 

  • fred9803fred9803 Posts: 1,565

    kyoto kid said:

    takezo_3001 said:

    fred9803 said:

     A VPN won't protect you against viruses/malware and neither will hard-wiring.

    They'll help against hackers/DDoS and others that try and get your identity through your IP...

    ...exactly. 

    So it is about privacy? Unless your runnng a website from your own server DDoS doesn't factor into it. As for hiding your static IP address, why?  What is someone going to do with it? There are thousands of ports for every IP address and why would somene bother with a brute-force attack. Get into yor bank account? Just don't store your sensitive log-in details and clear your browser after every session.

  • Nyghtfall3DNyghtfall3D Posts: 813
    edited June 2021

    There's a new app on GitHub that, unlike MS's PC Health Checker, will tell you precisely why you can't run Windows 11.  You can download it here:

    https://github.com/rcmaehl/WhyNotWin11/releases/tag/2.2.4

    You may get a warning from Windows Defender that it's an unstrusted app (I did).  Click the Details / More Info button and then click Run Anyway.  It's an EXE file that doesn't actually install anything, it just does a quick check of your hardware and displays the results..

    Reference:

    https://www.thurrott.com/windows/windows-11/252493/tip-find-out-why-your-pc-is-incompatible-with-windows-11

    This is what it reported about my PC.  Sure enough, no TPM detected / enabled:

    whynotwin11.png
    798 x 599 - 36K
    Post edited by Nyghtfall3D on
  • takezo_3001takezo_3001 Posts: 2,026
    edited June 2021

    fred9803 said:

    So it is about privacy? Unless your runnng a website from your own server DDoS doesn't factor into it.

    DDossing is also DOXXING is getting your real-world address/name/family identity, which can be obviously abused by anonymous nefarious people, like swatting, and stalking, even targeting someone with violence... so yeah, protecting yourself with a VPN is a good idea.

    EDITED...

    Post edited by takezo_3001 on
Sign In or Register to comment.