And on SHA1 : SHAttered Attack: In 2017, Google and CWI Amsterdam announced a practical collision attack on SHA-1, known as the SHAttered attack. They demonstrated that two distinct PDF files could be created with the same SHA-1 hash, proving the practicality of the attack and showing that SHA-1 is no longer suitable for cryptographic use.
Thank you - this was exactly what I thought too. But on a second thinking: why should MS do that? We live with idiotic small windows in Windows now for 30 years, there is just no reason to improve this.... Oh, and when we speak about stupidities: why do we need tools to copy/paste error messages into the browser to do a web search?
@@hiru92 It'll become mainstream and integrated into all architecture probably. Companies have an incentive to harvest user data, after all, and Recall looks like a fantastic way to do that, sadly.
I still don't get it why MS keeps adding more of these "misc" security features while leaving many more important ones wide open. SMB ports are still listening on all inputs by default and is hard to block, autorun enabled by default, pulling unnecessary trash like ads from the internet for no reason, mixing system internals with web features by forcing Edge installations, complicated permission structures and UAC that doesn't work, and more. Non of these are issues on most Linux distros like CentOS or Ubuntu. I'd say this is just another trick to comfort muggles who have no idea what the principle of least privilege is.
Hackers will fun with that feature pulling up screenshots of users history of credit card numbers on shopping sites. Also usernames & passwords entered to access accounts.
Is the new Zone identifier thing also part of that update?Downloading a zip and opening it and eg clicking on an iso or exe will prompt you, that it’s dangerous.Whats even more confusing is, that it’s also the case of encrypted zip files.I assume windows is just passing them on to the files, when they are decompressed.But idk
Hopefully the feedback on this vid is good. If not I want you to know that this video scratches the itch about signature and rules management that has bothered me for a while. I was not in critical need of this info but I am very glad you made the vid (and that MSFT doing common sense improvements in addition to the crazy ones) Thank you
@@MarioGoatse there's a subtle gradient, and also the tail is a little longer. the "link" is also more rounded, but based on win7 i think the borders are thicker too
Honestly, something that really annoys me is when Microsoft continues to add features in Win32... like I feel like they're just adding on to the remnant problem in Windows overall. Still a great feature though!
Hey here's a video idea: What if you install Windows 11 on a system that doesn't meet the requirements? Specifically CPU and no SecureBoot. I'm wondering cause my PC doesn't meet the requirements because of its CPU (not sure why because my CPU does support PopCNT I think) and my PC doesn't have SecureBoot capabilities
One thing you didn't mention is the OSAttr entry in the tag. For signed drivers, this shows the version of Windows that the driver was signed for. In your SHA-1 example, you can see 6.3 (Windows 8.1) and 10.0 (Windows 10 or 11). I find it useful when on a driver hunt, so I can tell if the driver was intended for the OS that I'm running.
Here's one to think about...Is there going to be a way to KEEP from upgrading to 24H2 from 23H2? I have 1 computer that only runs windoz, and all the rest run Linux Mint. *I DON'T WANT IT TO UPGRADE!!*
installed garuda linux. all my steam games work. microsoft and windows 11 finally gone from my home. Frankly, as good and easy as current linux is i couldnt imagine paying for windows.
Are you talking about the security feature where Microsoft takes snapshots every 3 seconds of everything you do on your computer??? What could possibly go wrong with that feature? Microsoft As Spyware is not secure in any way. Are we supposed to trust that company?
It's being issue by someone who is trusted. Yes that includes Microsoft, but multiple certificate authorities exist for code signing, and there are multiple brokers that you can purchase code signing signatures from.
@@KyleDavis328 Thank you. Personally I mistrust solutions that pretend payment="trust". In the eve it's only a pain in the a.. for the consumer or prosumer. MS is surely trying to force a lockin á la Apple or Google Android on us.
i use modded windows with lots of features i dont care about security at all , i also want to develop my own security app that will be connected to a network ,mostly my phone and pc
I don't think Scamio will be very helpful over all. After all you have to be suspicious of some message/content in the first place, before you even start thinking of running it against Scamio. Otherwise the idea seems neat.
Important side note tho, 1) a signature only tells you who made the software, it doesn't say whether it's good 2) not having a signature is not a sign that a file is bad, especially software that is open source or made by individuals they likely can't afford a code signing cert
Bitdefender scammio sounds like a great way of training an AI on what things a user finds suspicious. In other words, scammio could be used as a tool to make AI generated scams more difficult to detect.
With terrible software support. Open source is 1000 times worse than a closed source software on windows. Are you comparison Gimp with Photoshop? 😂 LoL.
I am going to ask scamio if something that takes screenshots of your computer every 10 seconds and stored them is spyware. I think it will say that it is :P
If I knew what you knew I'd definitely use it...pretty cool to learn about. Nice job! I am a subscriber to Bitdefender total security. So hearing about Scamio was a surprise! Always good videos so keep up the good work! 👍
Hey Joe, What is your take on windows 11 24H2 "RECALL" feature...??? Seems to me that big brother Billy Gates is including more and more ways of prying info. I'm already starting to migrate to Linux Zorin distro....
Microsoft has forced my hand back to Linux due to their new "'Recall" feature which will eventually make its way to every Windows installation. Unfortunately I have to keep Windows, so I'm forced to duel-boot. But what a terrible idea from a personal standpoint and a security standpoint. You know people will be able to bypass their encryption and view your passwords, blackmail you. 1984
It would be much more useful if they check signature from cert file in the same folder and with additional extintion. Need this to validate signature on documents.
The new security feature is actually a security issue, a new security hole and attack surface added by none other than Microsoft itself, also, did I mention spyware?
8:31 Redacting the password tells the audience that ThioJoe reuses passwords. Had the on-screen value been something like... jB^FWx324TAhyfan8pp&tuIqpZt6Ks%zW!!m Would have been the more-secure option.
![Cody Johnson - I'm Gonna Love You (with Carrie Underwood) [Official Music Video]](http://i.ytimg.com/vi/yy9PuYMU29g/mqdefault.jpg)
Have you heard of catalog signatures before? 🤔
yes
Nope
No
No
yes
And on SHA1 : SHAttered Attack: In 2017, Google and CWI Amsterdam announced a practical collision attack on SHA-1, known as the SHAttered attack. They demonstrated that two distinct PDF files could be created with the same SHA-1 hash, proving the practicality of the attack and showing that SHA-1 is no longer suitable for cryptographic use.
SHAttered is a badass name though.
Wait what where
All my homies use SHA2
Windows Repair Toolbox wtf is > Windows Repair Toolbox
I really wish this was explained like 20 years ago...
Back when you first encountered cat files too huh? lol
I opened the catroot folder in order to find some cat pictures but there aren't any??? how come??
No cats, and no roots
🐈⬛😺
🫚🥔🥕
Cat is short for catalogue.
@@mopeybloke no way, sherlock! i had absolutely no idea
@@anamoyeee I was surprised and disappointed too.
U hv to dld them from YT. Yeah, but don't get the siamese or orange cats cause they don't play well with others and you don't want conflicting cats.
It would save everyone time if that property window were wide enough to display all columns. I'm talking to you; Microsoft.
Thank you - this was exactly what I thought too. But on a second thinking: why should MS do that? We live with idiotic small windows in Windows now for 30 years, there is just no reason to improve this....
Oh, and when we speak about stupidities: why do we need tools to copy/paste error messages into the browser to do a web search?
This video is the only sponsor ive been interested in..Thank you for this!
You're such an amazing guy, Thio. I always enjoy your informative videos. You invest into them so much. Appreciated :)))
I am amazed you haven't done a video about Recall.
Probably because it's not available to the public yet.
Hope he does check it out though, it looks like a gross invasion of privacy!
only system with NPU, newer intel, amd apus with npu...
@@hiru92 It'll become mainstream and integrated into all architecture probably. Companies have an incentive to harvest user data, after all, and Recall looks like a fantastic way to do that, sadly.
I still don't get it why MS keeps adding more of these "misc" security features while leaving many more important ones wide open. SMB ports are still listening on all inputs by default and is hard to block, autorun enabled by default, pulling unnecessary trash like ads from the internet for no reason, mixing system internals with web features by forcing Edge installations, complicated permission structures and UAC that doesn't work, and more. Non of these are issues on most Linux distros like CentOS or Ubuntu. I'd say this is just another trick to comfort muggles who have no idea what the principle of least privilege is.
smb like super mario bros
Smoke and mirror “features” while leaving access open for the NSA.
SMB is disabled by default on windows 11 lol. I rather America monitor me than Jiang Tan😂.
And then there's legal spyware with Recall😂
well people have to timeshift their timemachines to that
I hope thare is a way to turn it off aka breaking it so it doesn't work anymore,
Exactly
Hackers will fun with that feature pulling up screenshots of users history of credit card numbers on shopping sites. Also usernames & passwords entered to access accounts.
@@tobyzillamoving to Linux utterly breaks that malware
I hope you make a video about windows 11 iot enterprise ltsc.
I'll never use this, but it'ss fun to know
It's like MD5?
Hi from TUNIS 🇹🇳🇹🇳
Is the new Zone identifier thing also part of that update?Downloading a zip and opening it and eg clicking on an iso or exe will prompt you, that it’s dangerous.Whats even more confusing is, that it’s also the case of encrypted zip files.I assume windows is just passing them on to the files, when they are decompressed.But idk
Hopefully the feedback on this vid is good. If not I want you to know that this video scratches the itch about signature and rules management that has bothered me for a while. I was not in critical need of this info but I am very glad you made the vid (and that MSFT doing common sense improvements in addition to the crazy ones)
Thank you
thanks dude very interesting
what's your cursor set? it seems oddly different from the official windows one, but i kinda like it
Isn't it just larger? I might be wrong, but it looks it
@@MarioGoatse there's a subtle gradient, and also the tail is a little longer. the "link" is also more rounded, but based on win7 i think
the borders are thicker too
it's about frickin time the Signatures tab was universal!
I opened File Explorer and is not there, including after then clicking Properties
I don't get digital signatures in the property window. Win 11, latest release
is this availble on Windows 10?
Wait there are people who intentionally update to 24H2
It would be nice if you combine this to app locker to create a new video show examples of scenarios where to block things
Honestly, something that really annoys me is when Microsoft continues to add features in Win32... like I feel like they're just adding on to the remnant problem in Windows overall. Still a great feature though!
I hope they add big red arrows and circles to Windows 11 that point at new features.
Alright. When you are going to teach us how to assign modified Nvidia bios?
Hey here's a video idea: What if you install Windows 11 on a system that doesn't meet the requirements? Specifically CPU and no SecureBoot. I'm wondering cause my PC doesn't meet the requirements because of its CPU (not sure why because my CPU does support PopCNT I think) and my PC doesn't have SecureBoot capabilities
One thing you didn't mention is the OSAttr entry in the tag. For signed drivers, this shows the version of Windows that the driver was signed for. In your SHA-1 example, you can see 6.3 (Windows 8.1) and 10.0 (Windows 10 or 11). I find it useful when on a driver hunt, so I can tell if the driver was intended for the OS that I'm running.
Microsoft sneaked bitlock on me. I am through with windows. Going to either Mac or Linux.
Officially made the switch to Linux goodbye Microsoft you will not be missed!
"dot C-A-T" 🤮 ❌
"dot cat" 😸✅
Not stuff for the average Joe (pun intended) but useful for some of us.
Me over here not caring about updates, being stuck with error 0x80004005 and can’t cut move or rename folders
Sounds like you have a corrupted OS drive...
nice
Here's one to think about...Is there going to be a way to KEEP from upgrading to 24H2 from 23H2?
I have 1 computer that only runs windoz, and all the rest run Linux Mint. *I DON'T WANT IT TO UPGRADE!!*
installed garuda linux. all my steam games work. microsoft and windows 11 finally gone from my home. Frankly, as good and easy as current linux is i couldnt imagine paying for windows.
I do not have this and my windows version is 10.0.22631
Catalog file is not a new thing. This is just a new convenience feature of Windows Explorer.
Gosh 2 weeks. What happened? Jk Anyways welcome back 😊
Oh great ...
More stuff to get around to manipulate the windows files to be able to remove bloat...
Scamio sounds already like scam...
Would be hillarious if someone tricked this bitdefender AI to instead teach how to scam people xD
With all the "AI jail-breaks" i saw... possibly
Lmao to be fair, not sure if this would matter if they pushed the literal OS-level spyware
Are you talking about the security feature where Microsoft takes snapshots every 3 seconds of everything you do on your computer??? What could possibly go wrong with that feature? Microsoft As Spyware is not secure in any way. Are we supposed to trust that company?
This is actual insanity.
"You need to know.", the word "about" is not needed and is a dangling modifier.
YES.
Meeeh... I'm done with Windows. Switched all to Linux Mint 2 years ago.
cat root
cat: root: No such file or directory
😋
Who or what decides what is trusted? Trusted is who pays Microsoft or?
It's being issue by someone who is trusted. Yes that includes Microsoft, but multiple certificate authorities exist for code signing, and there are multiple brokers that you can purchase code signing signatures from.
@@KyleDavis328 Thank you. Personally I mistrust solutions that pretend payment="trust". In the eve it's only a pain in the a.. for the consumer or prosumer. MS is surely trying to force a lockin á la Apple or Google Android on us.
Im not updating anymore i installed atlas and im staying on 22h2
cool
They add new features to legacy style windows... Please make everything looking the same in windows...
For real, when will they give everything the WinUI 3 treatment... I think it looks good, just be consistent Microsoft!
Uhhh what?
only 28.18% interested, lol (I still use win10)
why would you willingly run this spyware on your computer?
Windows Repair Toolbox wtf is that
😵💫
i use modded windows with lots of features i dont care about security at all , i also want to develop my own security app that will be connected to a network ,mostly my phone and pc
I don't think Scamio will be very helpful over all. After all you have to be suspicious of some message/content in the first place, before you even start thinking of running it against Scamio.
Otherwise the idea seems neat.
I’m sick of ads in the middle of a video. Run an overlay with the ad or make a separate video on who ever is paying you.
EARLY!!
I like turtles
は-は-は？
はは！
Ok But who has a windows 11?
New Features? who cares its not an OS its spywear
It's for security, so it's a good thing to add.
163 comment
First
womp womp linux ftw
The best feature is not using 11
Based on the quality of your past postings, YOU ARE NOT A RELIABLE SOURCE.
Important side note tho,
1) a signature only tells you who made the software, it doesn't say whether it's good
2) not having a signature is not a sign that a file is bad, especially software that is open source or made by individuals they likely can't afford a code signing cert
3) I've nothing to add,
4) you can usually omit number 3.
5) Number 4 must always be followed immediately by number 5.
Be nice if there was an option for an additional overlay on file icons for a unsigned / signed file. Much like the shortcut arrow overlay
Bitdefender scammio sounds like a great way of training an AI on what things a user finds suspicious. In other words, scammio could be used as a tool to make AI generated scams more difficult to detect.
Yeah
First thing the AI will learn is that users find AI suspicious.
My Brain Runs On Linux
I use arch btw
With terrible software support. Open source is 1000 times worse than a closed source software on windows. Are you comparison Gimp with Photoshop? 😂 LoL.
@@_tanzil_🤡
My brain r- uh oh "Brain" doesn't run on Loonix
Proton: Brain runs on Linux but you gotta waste 5 hours tweaking and brain cells don't work
So you're open sourced?
I am going to ask scamio if something that takes screenshots of your computer every 10 seconds and stored them is spyware. I think it will say that it is :P
I'd like to see you do a video about Windows Recall.
Wasn't this feature already added to Windows 10? If so, when?
Probably not ever going to 11, and I've almost figured how to do the few Windows things in Linux, at which point, I won't look back.
Thanks for your insightful comment on a video about Windows 11.
We got Windows Repositories system (like for linux) before GTA 6
files, what a rabbit hole.. just saying, thanks @ThioJoe😁
If I knew what you knew I'd definitely use it...pretty cool to learn about. Nice job! I am a subscriber to Bitdefender total security. So hearing about Scamio was a surprise! Always good videos so keep up the good work! 👍
Hey Joe, What is your take on windows 11 24H2 "RECALL" feature...??? Seems to me that big brother Billy Gates is including more and more ways of prying info. I'm already starting to migrate to Linux Zorin distro....
Good video
I wonder how much it costs a computer for games and another one for everything else?
Every signature means more money, more expensive product.
Microsoft has forced my hand back to Linux due to their new "'Recall" feature which will eventually make its way to every Windows installation.
Unfortunately I have to keep Windows, so I'm forced to duel-boot. But what a terrible idea from a personal standpoint and a security standpoint. You know people will be able to bypass their encryption and view your passwords, blackmail you. 1984
suuuure
Thanks for the great help
i thought catroot was where all the cats came from..
watching this on my RPiOS Bullseye RPi4B SBC desktop....relaxed....sipping coffee...hash browns on the side....
It would be much more useful if they check signature from cert file in the same folder and with additional extintion. Need this to validate signature on documents.
Hi
My .cat does Meow.
This is a man!
Offtopic Joe, but what browser are you using these days for security and/or normal everyday use that maybe don't need privacy
I just realized I haven't opened my laptop for a month. Thanks for the update
first one
The new security feature is actually a security issue, a new security hole and attack surface added by none other than Microsoft itself, also, did I mention spyware?
8:31 Redacting the password tells the audience that ThioJoe reuses passwords.
Had the on-screen value been something like...
jB^FWx324TAhyfan8pp&tuIqpZt6Ks%zW!!m
Would have been the more-secure option.
I know right? It's like when people redact their internal IP address...