Forwarded from BlackBox (Security) Archiv
Last phase of the desktop wars?
The two most intriguing developments in the recent evolution of the Microsoft Windows operating system are Windows System for Linux (WSL) and the porting of their Microsoft Edge browser to Ubuntu.
For those of you not keeping up, WSL allows unmodified Linux binaries to run under Windows 10. No emulation, no shim layer, they just load and go.
Microsoft developers are now landing features in the Linux kernel to improve WSL. And that points in a fascinating technical direction. To understand why, we need to notice how Microsoft’s revenue stream has changed since the launch of its cloud service in 2010.
Ten years later, Azure makes Microsoft most of its money. The Windows monopoly has become a sideshow, with sales of conventional desktop PCs (the only market it dominates) declining. Accordingly, the return on investment of spending on Windows development is falling. As PC volume sales continue to fall off , it’s inevitably going to stop being a profit center and turn into a drag on the business.
Looked at from the point of view of cold-blooded profit maximization, this means continuing Windows development is a thing Microsoft would prefer not to be doing. Instead, they’d do better putting more capital investment into Azure – which is widely rumored to be running more Linux instances than Windows these days.
Our third ingredient is Proton. Proton is the emulation layer that allows Windows games distributed on Steam to run over Linux. It’s not perfect yet, but it’s getting close. I myself use it to play World of Warships on the Great Beast.
The thing about games is that they are the most demanding possible stress test for a Windows emulation layer, much more so than business software. We may already be at the point where Proton-like technology is entirely good enough to run Windows business software over Linux. If not, we will be soon.
👀 👉🏼 http://esr.ibiblio.org/?p=8764
#windows #microsoft #linux #WSL #ubuntu #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag
The two most intriguing developments in the recent evolution of the Microsoft Windows operating system are Windows System for Linux (WSL) and the porting of their Microsoft Edge browser to Ubuntu.
For those of you not keeping up, WSL allows unmodified Linux binaries to run under Windows 10. No emulation, no shim layer, they just load and go.
Microsoft developers are now landing features in the Linux kernel to improve WSL. And that points in a fascinating technical direction. To understand why, we need to notice how Microsoft’s revenue stream has changed since the launch of its cloud service in 2010.
Ten years later, Azure makes Microsoft most of its money. The Windows monopoly has become a sideshow, with sales of conventional desktop PCs (the only market it dominates) declining. Accordingly, the return on investment of spending on Windows development is falling. As PC volume sales continue to fall off , it’s inevitably going to stop being a profit center and turn into a drag on the business.
Looked at from the point of view of cold-blooded profit maximization, this means continuing Windows development is a thing Microsoft would prefer not to be doing. Instead, they’d do better putting more capital investment into Azure – which is widely rumored to be running more Linux instances than Windows these days.
Our third ingredient is Proton. Proton is the emulation layer that allows Windows games distributed on Steam to run over Linux. It’s not perfect yet, but it’s getting close. I myself use it to play World of Warships on the Great Beast.
The thing about games is that they are the most demanding possible stress test for a Windows emulation layer, much more so than business software. We may already be at the point where Proton-like technology is entirely good enough to run Windows business software over Linux. If not, we will be soon.
👀 👉🏼 http://esr.ibiblio.org/?p=8764
#windows #microsoft #linux #WSL #ubuntu #thinkabout
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag
Forwarded from BlackBox (Security) Archiv
Media is too big
VIEW IN TELEGRAM
How to compile Windows Server 2003 - and compile Windows XP, (part 1)
From source code to ISO. Sit back, relax, and witness the miracle of creating a new build of Windows :)
Just to be clear from the start: As of now, there is NO way to completely compile Windows from the Source code, as it lacks some stuff... However, this is pretty close.
👀 👉🏼 https://nitter.net/NTDEV_/
https://invidious.snopyta.org/watch?v=bO0daYbti5g
👀 👉🏼 Compiling Windows XP, part 1
https://invidious.snopyta.org/watch?v=8IyW-bwGQTQ
#windows #compiling #sourcecode #leak #video #guide
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag
From source code to ISO. Sit back, relax, and witness the miracle of creating a new build of Windows :)
Just to be clear from the start: As of now, there is NO way to completely compile Windows from the Source code, as it lacks some stuff... However, this is pretty close.
👀 👉🏼 https://nitter.net/NTDEV_/
https://invidious.snopyta.org/watch?v=bO0daYbti5g
👀 👉🏼 Compiling Windows XP, part 1
https://invidious.snopyta.org/watch?v=8IyW-bwGQTQ
#windows #compiling #sourcecode #leak #video #guide
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN
📡@BlackBox_Archiv
📡@NoGoolag
Windows 10 PCs will directly install and run Android apps from 2021, claims report
The report claims these apps will be brought to Windows 10 OS through the Microsoft Store.
https://www.indiatoday.in/technology/news/story/windows-10-pcs-will-directly-install-and-run-android-apps-from-2021-claims-report-1744347-2020-11-26
https://www.gizchina.com/2020/11/26/windows-10-to-receive-support-for-android-apps-next-year
#windows #android #apps
The report claims these apps will be brought to Windows 10 OS through the Microsoft Store.
https://www.indiatoday.in/technology/news/story/windows-10-pcs-will-directly-install-and-run-android-apps-from-2021-claims-report-1744347-2020-11-26
https://www.gizchina.com/2020/11/26/windows-10-to-receive-support-for-android-apps-next-year
#windows #android #apps
India Today
Windows 10 PCs will directly install and run Android apps from 2021, claims report
The report claims these apps will be brought to Windows 10 OS through the Microsoft Store.
Windows reference manual
If you suddenly find you have Windows on your hard drive:
burning causes pollution so just call an exorcist
General:
https://rentry.co/fwt
https://tb.rg-adguard.net/public.php
https://t.me/NoGoolag/2549
https://github.com/jebofponderworthy/windows-tools
https://github.com/massgravel/Microsoft-Activation-Scripts
App managers:
https://chocolatey.org
https://scoop.sh
https://store.rg-adguard.net
Telemetry:
https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services
https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization
https://github.com/mirinsoft/debotnet
https://github.com/Sycnex/Windows10Debloater
Disable Cortana
With Registry editor: https://docs.microsoft.com/en-us/answers/questions/104991/disable-34let-cortana-help-you-get-things-done34-d.html
With Group policy editor: Set "Allow Cortana" to be disabled
Security reference:
https://docs.microsoft.com/en-us/windows/security
Use Enterprise edition; It has a lot of security features
How to get Windows enterprise ?
Run this command in an elevated powershell. Use appropriate path of the media creation tool in place of Media creation tool.exe
Enter XGVPP-NMH47-7TTHJ-W3FW7-8HV2C if you don't have any product key and activate later with HWID on booting windows
Use Virtualisation Based Security to stop stuff like mimikatz or capcom.sys
https://github.com/beerisgood/Windows10_Hardening
https://github.com/AndyFul/Hard_Configurator
https://www.microsoft.com/security/blog/2020/03/17/secured-core-pcs-a-brief-showcase-of-chip-to-cloud-security-against-kernel-attacks/
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/using-software-restriction-policies-and-applocker-policies
Security highlights of Windows 10
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#a-href-idbkmk-unlockpol1arequire-additional-authentication-at-startup
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/controlled-folders
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview
Standard User account is a part of the windows security model, it's better to use an admin account only when you need it rather than 24/7
Discussion group on windows security: @windowssec_group
Security hardening guide: @windowssec
#windows #security
If you suddenly find you have Windows on your hard drive:
dd if=/dev/zero of=/dev/[drive]burning causes pollution so just call an exorcist
General:
https://rentry.co/fwt
https://tb.rg-adguard.net/public.php
https://t.me/NoGoolag/2549
https://github.com/jebofponderworthy/windows-tools
https://github.com/massgravel/Microsoft-Activation-Scripts
App managers:
https://chocolatey.org
https://scoop.sh
https://store.rg-adguard.net
Telemetry:
https://docs.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services
https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization
https://github.com/mirinsoft/debotnet
https://github.com/Sycnex/Windows10Debloater
Disable Cortana
With Registry editor: https://docs.microsoft.com/en-us/answers/questions/104991/disable-34let-cortana-help-you-get-things-done34-d.html
With Group policy editor: Set "Allow Cortana" to be disabled
Security reference:
https://docs.microsoft.com/en-us/windows/security
Use Enterprise edition; It has a lot of security features
How to get Windows enterprise ?
Run this command in an elevated powershell. Use appropriate path of the media creation tool in place of Media creation tool.exe
.\MediaCreationTool.exe /Eula Accept /Retail /MediaArch x64 /MediaLangCode en-US /MediaEdition EnterpriseEnter XGVPP-NMH47-7TTHJ-W3FW7-8HV2C if you don't have any product key and activate later with HWID on booting windows
Use Virtualisation Based Security to stop stuff like mimikatz or capcom.sys
https://github.com/beerisgood/Windows10_Hardening
https://github.com/AndyFul/Hard_Configurator
https://www.microsoft.com/security/blog/2020/03/17/secured-core-pcs-a-brief-showcase-of-chip-to-cloud-security-against-kernel-attacks/
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/applocker/using-software-restriction-policies-and-applocker-policies
Security highlights of Windows 10
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#a-href-idbkmk-unlockpol1arequire-additional-authentication-at-startup
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-sandbox/windows-sandbox-configure-using-wsb-file
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/controlled-folders
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/md-app-guard-overview
Standard User account is a part of the windows security model, it's better to use an admin account only when you need it rather than 24/7
Discussion group on windows security: @windowssec_group
Security hardening guide: @windowssec
#windows #security
rentry.co
Friendly Windows Thread Paste
Friendly Windows Thread Paste
Microsoft Windows
What edition / version should I get?
Windows 10 Education
Windows 10 Enterprise LTSC IoT 2021
Windows Embedded 8.1 Enterprise
Windows 7 Enterprise
Windows Embedded POSReady 7
What are N / KN editions?
Changing…
Microsoft Windows
What edition / version should I get?
Windows 10 Education
Windows 10 Enterprise LTSC IoT 2021
Windows Embedded 8.1 Enterprise
Windows 7 Enterprise
Windows Embedded POSReady 7
What are N / KN editions?
Changing…
Forwarded from BlackBox (Security) Archiv
‘Windows is sh*t:’ Linux Users and The Technical Superiority Problem
“Windows is shit.” “That’s garbage, don’t use it.” “I don’t understand why anyone uses that crap.” ~Toxic nerds on the internet, since forever.
https://medium.com/linuxforeveryone/windows-is-sh-t-linux-users-and-the-technical-superiority-problem-196a597aa860
#linux #windows #thinkabout
📡@cRyPtHoN_INFOSEC_FR
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
📡@BlackBox_Archiv
📡@NoGoolag
“Windows is shit.” “That’s garbage, don’t use it.” “I don’t understand why anyone uses that crap.” ~Toxic nerds on the internet, since forever.
https://medium.com/linuxforeveryone/windows-is-sh-t-linux-users-and-the-technical-superiority-problem-196a597aa860
#linux #windows #thinkabout
📡@cRyPtHoN_INFOSEC_FR
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
📡@BlackBox_Archiv
📡@NoGoolag
Forwarded from BlackBox (Security) Archiv
Windows 10 AME
Version 20H2 Dated 2021-04-01
The goal of the AME project is to provide a stable and non-intrusive build of Windows 10, without sacrificing usability and Win32 compatibility for the majority of mainstream applications. This includes the avoidance and riddance of privacy infringing automated data collection services, central to Microsoft’s strategy for the Windows 10 operating system.
This page provides a complete step-by-step description of how AME images are mastered based on Windows 10 build 20H2 with minor proceeding updates, defining a complete documentation of this project.
While large portions of this process have been automated using various scripts and Linux command line utilities, a large majority requires manual effort, with many of the steps often producing differing and sometimes non-predictable results from instance to instance, increasing the difficulty of this procedure. As such, sections where abnormal behavior may occur have been appropriately highlighted.
💡 It is also recommended that anyone attempting to reproduce the steps in this guide be moderately versed with Linux and consequently also not afraid of using the command line.
👉🏼 ISO Download:
https://t.me/amereleases/41
💡 Documentation:
https://wiki.ameliorated.info/documentation_20H2
👉🏼 Source Code:
https://git.ameliorated.info/malte/scripts
👀 Join the Discussion:
https://t.me/joinchat/TFCUAzfq6Y-Bl9vG
#ame #windows
📡 @nogoolag 📡 @blackbox_archiv
Version 20H2 Dated 2021-04-01
The goal of the AME project is to provide a stable and non-intrusive build of Windows 10, without sacrificing usability and Win32 compatibility for the majority of mainstream applications. This includes the avoidance and riddance of privacy infringing automated data collection services, central to Microsoft’s strategy for the Windows 10 operating system.
This page provides a complete step-by-step description of how AME images are mastered based on Windows 10 build 20H2 with minor proceeding updates, defining a complete documentation of this project.
While large portions of this process have been automated using various scripts and Linux command line utilities, a large majority requires manual effort, with many of the steps often producing differing and sometimes non-predictable results from instance to instance, increasing the difficulty of this procedure. As such, sections where abnormal behavior may occur have been appropriately highlighted.
💡 It is also recommended that anyone attempting to reproduce the steps in this guide be moderately versed with Linux and consequently also not afraid of using the command line.
👉🏼 ISO Download:
https://t.me/amereleases/41
💡 Documentation:
https://wiki.ameliorated.info/documentation_20H2
👉🏼 Source Code:
https://git.ameliorated.info/malte/scripts
👀 Join the Discussion:
https://t.me/joinchat/TFCUAzfq6Y-Bl9vG
#ame #windows
📡 @nogoolag 📡 @blackbox_archiv
Telegram
Ameliorated
Windows 10 AME based on 20H2 build.
Here at last.
Default login credentials:
Username: user
Password: malte
Here at last.
Default login credentials:
Username: user
Password: malte
Forwarded from BlackBox (Security) Archiv
Linux, macOS, and Windows running simultaneously on a 1st generation Core i5 and 8GB RAM
This is my Thinkpad T410 with a 1st generation Intel Core i5 and 8 GB of RAM. It runs Arch Linux with Xfce.
The macOS Mojave (chosen over Catalina or Big Sur for it’s lower resource usage) VM works surprisingly well with 3GB RAM, but even when the Windows VM was allocated that much, it was very sluggish.
The Windows installation was very easy. All you have to do is download the ISO from Microsoft, and fill in your username, password, and product key in the “Express Installation” feature of Gnome Boxes.
https://lukesempire.com/2021/04/11/vms
#linux #macos #windows #installation
📡 @nogoolag 📡 @blackbox_archiv
This is my Thinkpad T410 with a 1st generation Intel Core i5 and 8 GB of RAM. It runs Arch Linux with Xfce.
The macOS Mojave (chosen over Catalina or Big Sur for it’s lower resource usage) VM works surprisingly well with 3GB RAM, but even when the Windows VM was allocated that much, it was very sluggish.
The Windows installation was very easy. All you have to do is download the ISO from Microsoft, and fill in your username, password, and product key in the “Express Installation” feature of Gnome Boxes.
https://lukesempire.com/2021/04/11/vms
#linux #macos #windows #installation
📡 @nogoolag 📡 @blackbox_archiv
Microsoft Demos GUI Linux Apps Running on Windows 10
Microsoft has shared video demo of desktop Linux apps running on Windows 10
The capability is made possible using the new and improved Windows Subsystem for Linux (aka WSL 2) plus a new companion layer called WSLg (one assumes the ‘g’ stands for ‘GUI’, but don’t quote me on that).
You can watch Microsoft’s Craig Loewen showcase the feature in the following video. We’re talking about real desktop Linux apps running on Linux via WSL on Windows 10, and both X11 and Wayland-ready apps are supported
https://www.omgubuntu.co.uk/2021/04/run-linux-apps-on-windows-wsl-2
#Windows #Linux #apps
Microsoft has shared video demo of desktop Linux apps running on Windows 10
The capability is made possible using the new and improved Windows Subsystem for Linux (aka WSL 2) plus a new companion layer called WSLg (one assumes the ‘g’ stands for ‘GUI’, but don’t quote me on that).
You can watch Microsoft’s Craig Loewen showcase the feature in the following video. We’re talking about real desktop Linux apps running on Linux via WSL on Windows 10, and both X11 and Wayland-ready apps are supported
https://www.omgubuntu.co.uk/2021/04/run-linux-apps-on-windows-wsl-2
#Windows #Linux #apps
OMG! Ubuntu!
Microsoft Demos GUI Linux Apps Running on Windows 10
Ever wanted to run desktop Linux apps on Windows 10? Microsoft's WSL engineering team are making this strange marriage a reality, as this demo video shows!
Now KDE Connect can hook up your Windows machine as well!
KDE Community @ https://www.twitter.com/kdecommunity/status/1409808049116700673/
The Windows version of KDE Connect gets official support and you can get the beta version right now from the Microsoft Store. Exclusive link-only access: https://microsoft.com/store/apps/9N93MRMSXBF0
https://kdeconnect.kde.org
https://f-droid.org/repo/org.kde.kdeconnect_tp
#kdeconnect #transfer #windows
KDE Community @ https://www.twitter.com/kdecommunity/status/1409808049116700673/
The Windows version of KDE Connect gets official support and you can get the beta version right now from the Microsoft Store. Exclusive link-only access: https://microsoft.com/store/apps/9N93MRMSXBF0
https://kdeconnect.kde.org
https://f-droid.org/repo/org.kde.kdeconnect_tp
#kdeconnect #transfer #windows
Twitter
KDE Community
Now KDE Connect can hook up your Windows machine as well! The Windows version of KDE Connect gets official support and you can get the beta version right now from the Microsoft Store. Exclusive link-only access: microsoft.com/store/apps/9N9…
This media is not supported in your browser
VIEW IN TELEGRAM
#Microsoft to introduce an ever present #AI agent to #Windows
This is announced 1 week after it was discovered that Microsoft scanned e-mails to look for encrypted zip file passwords which it used to scan the content of said zip files
This is announced 1 week after it was discovered that Microsoft scanned e-mails to look for encrypted zip file passwords which it used to scan the content of said zip files
#Microsoft is using malware-like pop-ups in #Windows 11 to get people to ditch #Google
https://www.theverge.com/2023/8/30/23851902/microsoft-bing-popups-windows-11-malware
https://www.theverge.com/2023/8/30/23851902/microsoft-bing-popups-windows-11-malware
Microsoft to kill off third-party #printer #drivers in #Windows
Go native or go home: End of servicing plan rolled out for legacy printer drivers in fresh update
https://www.theregister.com/2023/09/11/go_native_or_go_home/
Go native or go home: End of servicing plan rolled out for legacy printer drivers in fresh update
https://www.theregister.com/2023/09/11/go_native_or_go_home/
The Register
Microsoft to kill off third-party printer drivers in Windows
Go native or go home: End of servicing plan rolled out for legacy printer drivers in fresh update
#Windows-as-a-nuisance: How I clean up a “clean install” of Windows 11 and Edge
https://arstechnica.com/gadgets/2024/02/what-i-do-to-clean-up-a-clean-install-of-windows-11-23h2-and-edge/
https://arstechnica.com/gadgets/2024/02/what-i-do-to-clean-up-a-clean-install-of-windows-11-23h2-and-edge/
Ars Technica
Windows-as-a-nuisance: How I clean up a “clean install” of Windows 11 and Edge
Tips and tricks for making Microsoft leave you alone while you use your PC.
n0rthl1ght/ahwt: Another Hardening Windows Tool – GitHub
GPL-3.0 license
AHWT - another hardening tool for Windows operating systems.
Description (on RUS)
Program is a script generator with collection of parameters and recommendations from CIS Benchmarks and DoD STIGs with some adjusments.
All parameters placed in databases with the names of the operating systems that are used to.
Parameters were checked and tested according to official MS documentation and researchers opinion.
Scripts generates in 2 modes - auto and manual.
All databases have profiles for each operating system min/med/full which corresponds with Minimum (only level 3 parameters (CIS lvl 2/STIG lvl 3)), Medium (level 2 & 3 parameters (CIS lvl 1 & 2/STIG lvl 2)) and Full (lvl 1-3 parameters).
#Windows #Hardening #Security
GPL-3.0 license
AHWT - another hardening tool for Windows operating systems.
Description (on RUS)
Program is a script generator with collection of parameters and recommendations from CIS Benchmarks and DoD STIGs with some adjusments.
All parameters placed in databases with the names of the operating systems that are used to.
Parameters were checked and tested according to official MS documentation and researchers opinion.
Scripts generates in 2 modes - auto and manual.
All databases have profiles for each operating system min/med/full which corresponds with Minimum (only level 3 parameters (CIS lvl 2/STIG lvl 3)), Medium (level 2 & 3 parameters (CIS lvl 1 & 2/STIG lvl 2)) and Full (lvl 1-3 parameters).
#Windows #Hardening #Security
Microsoft Recall should make you consider Linux
It was hard to miss the irony in Microsoft’s latest product announcement.
A new feature named “Recall” takes snapshots of whatever is on-screen on a #Windows 11 computer, every few seconds, and then stores it locally on-disk. Unfortunately it turns out that the analyzed data is stored in plaintext, leaving users’ private activity vulnerable to hackers. As security researcher Kevin Beaumont pointed out, “Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code.”
And yet #Microsoft named it “Recall.” It’s an interesting choice, given the problems it’s likely to create...
https://creativegood.com/blog/24/recall-switch-to-linux.html
#why #spyware
It was hard to miss the irony in Microsoft’s latest product announcement.
A new feature named “Recall” takes snapshots of whatever is on-screen on a #Windows 11 computer, every few seconds, and then stores it locally on-disk. Unfortunately it turns out that the analyzed data is stored in plaintext, leaving users’ private activity vulnerable to hackers. As security researcher Kevin Beaumont pointed out, “Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code.”
And yet #Microsoft named it “Recall.” It’s an interesting choice, given the problems it’s likely to create...
https://creativegood.com/blog/24/recall-switch-to-linux.html
#why #spyware
Everything you do with a #windows 11 computer is being recorded by microsoft
now a non #microsoft operative has found a way to extract this info
the result ? : info on everything you have been doing with a laptop is possible to be captured by a hacker
https://www.wired.com/story/total-recall-windows-recall-ai/
Dubbed TotalRecall the tool can pull all the information that Recall saves into its main database on a Windows laptop.
>"The database was easy prey," Hagenah says.
Since Microsoft revealed Recall in mid-May, security researchers have repeatedly compared it to spyware or stalkerware that can track everything you do on your device.
They were correct.
>"It's a Trojan 2.0 really, built in," Hagenah says, adding that he built TotalRecall only in order to show what is possible to capture peoples information. He is not going to do it himself but hopes Microsoft takes action after seeing this happen. So that people are safe.
Included in what the database captures are screenshots of whatever is on your desktop -- a potential gold mine for criminal hackers or domestic abusers who may physically access their victim's device. Images include captures of messages sent on encrypted messaging apps Signal and WhatsApp, and remain in the captures regardless of whether disappearing messages are turned on in the apps. There are records of websites visited and every bit of text displayed on the PC.
Once TotalRecall has been deployed, it will generate a summary about the data; it is also possible to search for specific terms in the database. Hagenah says an attacker could get a huge amount of information about their target, including insights into their emails, personal conversations, and any sensitive information that's captured by Recall.
Hagenah's work builds on findings from cybersecurity researcher Kevin Beaumont, who has detailed how much information Recall captures and how easy it can be to extract it.
https://github.com/xaitax/TotalRecall
#why #spyware #recall
now a non #microsoft operative has found a way to extract this info
the result ? : info on everything you have been doing with a laptop is possible to be captured by a hacker
https://www.wired.com/story/total-recall-windows-recall-ai/
Dubbed TotalRecall the tool can pull all the information that Recall saves into its main database on a Windows laptop.
>"The database was easy prey," Hagenah says.
Since Microsoft revealed Recall in mid-May, security researchers have repeatedly compared it to spyware or stalkerware that can track everything you do on your device.
They were correct.
>"It's a Trojan 2.0 really, built in," Hagenah says, adding that he built TotalRecall only in order to show what is possible to capture peoples information. He is not going to do it himself but hopes Microsoft takes action after seeing this happen. So that people are safe.
Included in what the database captures are screenshots of whatever is on your desktop -- a potential gold mine for criminal hackers or domestic abusers who may physically access their victim's device. Images include captures of messages sent on encrypted messaging apps Signal and WhatsApp, and remain in the captures regardless of whether disappearing messages are turned on in the apps. There are records of websites visited and every bit of text displayed on the PC.
Once TotalRecall has been deployed, it will generate a summary about the data; it is also possible to search for specific terms in the database. Hagenah says an attacker could get a huge amount of information about their target, including insights into their emails, personal conversations, and any sensitive information that's captured by Recall.
Hagenah's work builds on findings from cybersecurity researcher Kevin Beaumont, who has detailed how much information Recall captures and how easy it can be to extract it.
https://github.com/xaitax/TotalRecall
#why #spyware #recall
WIRED
This Hacker Tool Extracts All the Data Collected by Windows’ New Recall AI
Windows Recall takes a screenshot every five seconds. Cybersecurity researchers say the system is simple to abuse—and one ethical hacker has already built a tool to show how easy it really is.
New #WiFi Takeover Attack—All #Windows Users Warned To Upgrade To Linux Now
https://www.forbes.com/sites/daveywinder/2024/06/14/new-wi-fi-takeover-attack-all-windows-users-warned-to-update-now/
https://www.forbes.com/sites/daveywinder/2024/06/14/new-wi-fi-takeover-attack-all-windows-users-warned-to-update-now/
Forbes
New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now
Microsoft has released a critical security update for users of all supported Windows versions as a new Wi-Fi compromise requiring no authentication has been confirmed.