*** Microsoft Windows 11 Thoughts & Discussion Thread ***

Is there some weird bugs in updates lately? Im happily playing Resident Evil 4 for 14hrs, then Win11 dumps some .NET security patch on me and now the game locks my PC up and restarts randomly. ******* infuriating!
 
www.bleepingcomputer.com

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows systems.
www.bleepingcomputer.com www.bleepingcomputer.com

More zero day exploits exposed by same researcher.. Guessing ex Microsoft employee by the sounds of it all and how he has recently targeted them with all the recent issues.
 
Last edited:
Purgatory said:
www.bleepingcomputer.com

New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released

A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows systems.
www.bleepingcomputer.com www.bleepingcomputer.com

More zero day exploits exposed my same researcher.. Guessing ex Microsoft employee by the sounds of it all and how he has recently targeted them with all the recent issues.
Click to expand...

Doesn't surprise me - when my brother worked for the NHS in IT they discovered a serious security bug with the language toolbar in Windows 10 and it took Microsoft 9 months to take it seriously and fix it, despite it being submitted to them through a professional route. Despite it exposing both local privilege escalation and remote code execution vulnerabilities.
 
Rroff said:
Doesn't surprise me - when my brother worked for the NHS in IT they discovered a serious security bug with the language toolbar in Windows 10 and it took Microsoft 9 months to take it seriously and fix it, despite it being submitted to them through a professional route. Despite it exposing both local privilege escalation and remote code execution vulnerabilities.
Click to expand...

Yes same here I reported a lot of issues in the past and just get the generic cut and paste reply and they never seem to do anything now. Back in the day they did now seems to be automated AI replies and still see the same issues. It's just become a time waste reporting stuff to them. The company has really gone downhill.
 
www.windowscentral.com

Don't like Windows 11's Copilot key? Microsoft confirms it will let you remap it later this year

Windows 11's special Copilot Key has not been the popular hit that Microsoft was hoping it would be, and has now confirmed plans to let users remap the button back to its old functionality.
www.windowscentral.com www.windowscentral.com

Finally they are going to add this option without having to mess around other ways to remap this useless copilot key they have added to all new keyboards and laptop keyboards.
 
Purgatory said:
More zero day exploits exposed by same researcher.. Guessing ex Microsoft employee by the sounds of it all and how he has recently targeted them with all the recent issues.
Click to expand...
This one looks intentional - ie a backdoor. I guess there's a vanishing small possibility that using a USB stick for the malware while holding down CTRL while rebooting into the Windows RE to bypass Bitlocker is a bug.

github.com

YellowKey/README.md at main · Nightmare-Eclipse/YellowKey

YellowKey Bitlocker Bypass Vulnerability. Contribute to Nightmare-Eclipse/YellowKey development by creating an account on GitHub.
github.com github.com

The rumour going around is that the "surprise" the guy has for next patch Tuesday is a "kill switch" for Win11. Fun times if it is...

Its notable that the guy has so far always delivered exactly what he threatens to.
 
Mesai said:
Next patch will be:
  • Fixed bugs (nothing to worry about).
  • Added Copilot to Minesweeper.
Click to expand...
The role back the "bugs" aka backdoors in future updates.

This all smells fishy to me. This is why I keep saying we can't rely on these companies in countries that are run by governments that don't respect the law anymore.

Vestas said:
This one looks intentional - ie a backdoor. I guess there's a vanishing small possibility that using a USB stick for the malware while holding down CTRL while rebooting into the Windows RE to bypass Bitlocker is a bug.

github.com

YellowKey/README.md at main · Nightmare-Eclipse/YellowKey

YellowKey Bitlocker Bypass Vulnerability. Contribute to Nightmare-Eclipse/YellowKey development by creating an account on GitHub.
github.com github.com

The rumour going around is that the "surprise" the guy has for next patch Tuesday is a "kill switch" for Win11. Fun times if it is...

Its notable that the guy has so far always delivered exactly what he threatens to.
Click to expand...

I'm sure there is a kill switch in windows 11 with the forced TPM requirements. So they can target exactly the systems they want and now made easier with TPM and the forced Microsoft account login even on a new install now. This guy is just showing all the issues we all knew were there and why they have been doing what they have to make sure they know everything about your pc and who is using it.

Anyways this is all not new to anyone that understands computer security. The world we allowed to happen and governments never protect their citizens and doing the same rubbish too now with digital ID and collecting all your private information.
 
Last edited:
Mesai said:
Next patch will be:
  • Fixed bugs (nothing to worry about).
  • Added Copilot to Minesweeper.
Click to expand...
Defender now blocks the files so obviously we're all safe. Nothing to see here, move along....

If nothing else its hugely amusing the guy is publishing POCs vulns for Windows on github :D
 
Purgatory said:
Then

https://www.bleepingcomputer.com/ne...49-windows-11-security-update-install-issues/

All become comical..
Click to expand...
Oh that's nothing new. ESP space issues have been around for what seems like forever & aren't new to Win11. Asus (as an example) have a load of crud in there - I had problems with that on Win10 a few years back.

I'm not really sure how much worse MS can get. I have three machines here at home - one gets patch Tuesday (compulsory), one gets it two weeks later and the last gets updated every 2.5 months. This generally allows me to dodge the AI self-inflicted failure which seems inevitable with every patch.

For the machines not used for work, using Windows is simply becoming a chore.
 
There is now some advice from Microsoft as to mitigating Yellowkey :

Security Update Guide - Microsoft Security Response Center

msrc.microsoft.com msrc.microsoft.com

Basically don't allow auto-unlock on any machine is the tl;dr - this requires a boot-time PIN before TPM gives up the key, rather than the way things work now.

Probably breaks other things yet to be seen (dual-boot seems likely) but seems to be the only way to "secure" any Windows 11 machine from this bitlocker bypass/backdoor.
 
I haven't looked into them all in detail but most of these vulnerabilities are only a threat to multi-user environments and unlikely to be a problem for the average home user and/or if they are being exploited on your system as the average home user you have much bigger problems :s
 
Rroff said:
I haven't looked into them all in detail
Click to expand...

I suggest you do. The bitlocker bypass affects every Win11 machine on the planet and means lost/stolen machines are now a security breach issue for companies/individuals.

Its utterly trivial to bypass Win11 disk encryption unless a boot-time (not Windows login) PIN is setup (and that's rarer than rocking horse crap).

Its also clearly a backdoor put there by MS.
 
Vestas said:
I suggest you do. The bitlocker bypass affects every Win11 machine on the planet and means lost/stolen machines are now a security breach issue for companies/individuals.

Its utterly trivial to bypass Win11 disk encryption unless a boot-time (not Windows login) PIN is setup (and that's rarer than rocking horse crap).

Its also clearly a backdoor put there by MS.
Click to expand...

Not great for those who do rely on bitlocker, especially companies, but a lot of home users just don't bother with security like that.
 
Had the full screen backup ads again at login, this time it was also trying to force me to have a MS account, WTF! Also, it only had an remind me in 3 days, no get *****d option!
 
  • Haha
Reactions: TNA
FredFlint said:
Had the full screen backup ads again at login, this time it was also trying to force me to have a MS account, WTF! Also, it only had an remind me in 3 days, no get *****d option!
Click to expand...

Yiu need to go Fred Flintstone on their arse and move to Linux, or pen and paper :p
 
You must log in or register to reply here.
Back
Top Bottom