Posts by Phil NZ 19 publicly visible posts • joined 20 Aug 2010
That is true, and inexcusable. However it was resolved 6 months ago. So the point still stands, enable the vulnerable driver blocklist in Windows 10, and the Vulnerable Driver ASR rule.
https://support.microsoft.com/en-gb/topic/kb5020779-the-vulnerable-driver-blocklist-after-the-october-2022-preview-release-3fcbe13a-6013-4118-b584-fcfbc6a09936
Anyone running Windows Defender AV can enable one of the Attack Surface Reduction rules to do just this.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide#block-abuse-of-exploited-vulnerable-signed-drivers
No MDE licence necessary. This one blocks attempts to write known-vulnerable drivers to disk.
Additionally the Vulnerable Driver Blocklist has been available since Windows 10 1809 and is enabled by default in Windows 11 22H2.
This one blocks vulnerable drivers from being loaded by Windows even if they’re already installed.
Stops BYOVD attacks, at least for known-vulnerable drivers.
I know there’s been a lot of whinging on Reg about the hardware requirements for Windows 11, well most of those strict requirements are for the hardware security features that allow for robust HVCI which in turn allows for these controls.
My work laptop, Surface Book 2, vanilla Windows 10, AAD joined (no Group Policy or legacy login script crud) took about 3 minutes non-invasive update plus 30 seconds reboot for the (early adopter) 20H2 to 21H1 update the other day.
I’d agree, sounds like you have a poorly managed build and overly intrusive systems management/patching. That’s an IT problem and not a device/OS/patching problem.
This is not Orwellian but a pragmatic measure taken by a private (non-state) group as a significant gesture recognising terms like “master” and “slave” as offensive.
It’s your right to think it’s an overreaction, it’s also the right of the rest of us to embrace this as a positive step and mute your whining arses.
Zoom said they used end to end encryption, Microsoft didn’t (because how do you do end to end in a 100+ person meeting without killing user experience??)
That’s why it’s an issue. Don’t mislead about a fundamental feature. If Microsoft had made this claim about Teams we would be roasting them right now.
I'd buy a droid from Blackberry. If the camera doesn't suck. I ended up on an iPhone because the 5c camera was faster and better than equivalent priced droids. Nexus 4 cameras were slooooow, the 5s I checked out not much better. Software problem I think but such a fundamental thing to have wrong in a smartphone.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
