I have one computer that will upgrade to Windows 11, the rest either fail because of the CPU generation and or the TPM chip So what Microsoft is saying is that in 2025 when Windows 10 security updates expire , millions of computers will become EOL. Linux is looking pretty good right about now All motherboards will be obsolete if they don't have that secure TPM chip, how does that affect system builders ?
No Windows 10 with the four suggestions at the end of the video will give you a secure and safe PC to work with for many years. Windows 10 will have support for many years to come.
In additional, I believe it was Linus Tech Tips that showed you can install Win 11 on many PCs that fail the Win 11 compatibility check in a few different ways so there’s always that if you’re worried about Win 10 EOL when it comes around.
The claim is that windows 12 will require TPM to be mandatory. They are starting to push windows 12 now as windows 11 is such a failure, but it looks like windows 12 will be even worse than windows 11. Building TPM into each and every system created huge vulnerabilities. When they say it is trusted then we know there is something fishy about it. Trusted for who? This is not the time to be naïve and go with the flow. They are promising a sleek graphic interface with windows 12. You better take it, just like the covid shots. It is safe and effective.
The CISecurity benchmark documents seem to all be for enterprise computers and not for individuals or small business that don't use active directory or domain servers. Is that correct?
These will work for home PCs. Some settings that relate to Active Directory you can skip. I use these settings on my Android and my PCs. If you have a business print out the CIS benchmark and take notes on each setting that you use. If an application does not like the change you can always roll back.
Hi Lowell, Great video! Q: Will CloudFlare DNS 1.1.1.1 block the popup scam warnings of infection that occur when someone clicks on a temporarily compromised advertisement or search result? Their home page includes "Cloudflare’s 67 Tbps network blocks an average of 70 billion threats per day, including some of the largest DDoS attacks ever recorded." which causes me to think they may be able to sense and block that content.
CloudFlare's public DNS 1.1.1.1 provides an additional layer of security by blocking all the "blacklist" domains. It is not perfect but a great layer to add to your operating systems security. They do share some of their technology in how they protect users but details are avoided to prevent the wrong folks from circumventing them.
@@TechsavvyProductions Thank you for your reply. I am trying to restore an iDrive entire machine backup downloaded to an external hard drive, using a winRE bootable thumb drive that launches idrive restore software. From there I am supposed to choose the backup file from the external hard drive and then select my laptop's hard drive to restore to. The issue is that the laptop's hard drive doesn't appear as an option to restore to. It is, however, listed as X: drive as an option to select the backup file FROM, but not as an option to restore TO. iDrive tech support says my laptop's hard drive is bad, but my laptop is less than a year old, and all diagnostics says 100% in excellent condition.
i cannot turn on firmware protection inside the core isolation menu although i have configured the virtualization based security in group policy editor.
@@TechsavvyProductions i have followed the tutorial and enabled all hyper V features however i still cannot enable the firmware protection feature. I think i have configured the bios and windows correctly, i have iommu, svm, ftpm, and secure boot enabled with csm off. bitlocker is running and the boot drive is encrypted. I have the latest bios and windows version as well as the latest WHQL drivers. maybe my cpu does not support those features, it is a cpu with zen1 architecture. I also did a clean installation which did not fix this issue. Sadly there aren’t many documentation about this on this issue.
Great question, the TPM video was over 30 minutes and I knew it was too long so at 14:23 I cut and saved the rest for video 2 which is coming soon. You are sharp!
I have one computer that will upgrade to Windows 11, the rest either fail because of the CPU generation and or the TPM chip So what Microsoft is saying is that in 2025
when Windows 10 security updates expire , millions of computers will become EOL. Linux is looking pretty good right about now All motherboards will be obsolete if they don't have that secure TPM chip, how does that affect system builders ?
No Windows 10 with the four suggestions at the end of the video will give you a secure and safe PC to work with for many years. Windows 10 will have support for many years to come.
In additional, I believe it was Linus Tech Tips that showed you can install Win 11 on many PCs that fail the Win 11 compatibility check in a few different ways so there’s always that if you’re worried about Win 10 EOL when it comes around.
The claim is that windows 12 will require TPM to be mandatory.
They are starting to push windows 12 now as windows 11 is such a failure, but it looks like windows 12 will be even worse than windows 11.
Building TPM into each and every system created huge vulnerabilities.
When they say it is trusted then we know there is something fishy about it. Trusted for who?
This is not the time to be naïve and go with the flow.
They are promising a sleek graphic interface with windows 12. You better take it, just like the covid shots. It is safe and effective.
Thank you sir for this information
Keep watching
Nice informative video sir 🙏🙏🙏. Thanks..
Thank you for watching!
The CISecurity benchmark documents seem to all be for enterprise computers and not for individuals or small business that don't use active directory or domain servers. Is that correct?
These will work for home PCs. Some settings that relate to Active Directory you can skip. I use these settings on my Android and my PCs. If you have a business print out the CIS benchmark and take notes on each setting that you use. If an application does not like the change you can always roll back.
@@TechsavvyProductions Thank you
Hi Lowell, Great video! Q: Will CloudFlare DNS 1.1.1.1 block the popup scam warnings of infection that occur when someone clicks on a temporarily compromised advertisement or search result? Their home page includes "Cloudflare’s 67 Tbps network blocks an average of 70 billion threats per day, including some of the largest DDoS attacks ever recorded." which causes me to think they may be able to sense and block that content.
CloudFlare's public DNS 1.1.1.1 provides an additional layer of security by blocking all the "blacklist" domains. It is not perfect but a great layer to add to your operating systems security. They do share some of their technology in how they protect users but details are avoided to prevent the wrong folks from circumventing them.
@@TechsavvyProductions Thank You
I love these videos
Thanks for watching!
Can TPM prevent installing a Entire Machine Backup from iDrive to the same computer?
No, TPM is not involved with backup restores, I can impact booting the "restored operating system" but not the backup or restore process.
@@TechsavvyProductions Thank you for your reply. I am trying to restore an iDrive entire machine backup downloaded to an external hard drive, using a winRE bootable thumb drive that launches idrive restore software. From there I am supposed to choose the backup file from the external hard drive and then select my laptop's hard drive to restore to. The issue is that the laptop's hard drive doesn't appear as an option to restore to. It is, however, listed as X: drive as an option to select the backup file FROM, but not as an option to restore TO. iDrive tech support says my laptop's hard drive is bad, but my laptop is less than a year old, and all diagnostics says 100% in excellent condition.
i cannot turn on firmware protection inside the core isolation menu although i have configured the virtualization based security in group policy editor.
Check out this article on installing Hyper-V, it sounds like it is not installed. petri.com/how-to-install-hyper-v-on-windows-10
@@TechsavvyProductions i have followed the tutorial and enabled all hyper V features however i still cannot enable the firmware protection feature. I think i have configured the bios and windows correctly, i have iommu, svm, ftpm, and secure boot enabled with csm off. bitlocker is running and the boot drive is encrypted. I have the latest bios and windows version as well as the latest WHQL drivers. maybe my cpu does not support those features, it is a cpu with zen1 architecture. I also did a clean installation which did not fix this issue. Sadly there aren’t many documentation about this on this issue.
-Thanks...🙏
Thanks for watching1
There is an abrupt cutoff at around 14:23. Maybe it's an editing error?
Great question, the TPM video was over 30 minutes and I knew it was too long so at 14:23 I cut and saved the rest for video 2 which is coming soon. You are sharp!
I wonder if they use a blockchain to confirm the chain of trust?
Interesting idea
💐
Thanks for watching!
nice.
Thanks for watching!