(untitled)

Do the impossible? Windows 10 / sec / Edition? Hello Lainon, I need to use the Windows 10 operating system for the facilities it offers, specifically all the software and games available. Is there a way to make it safe and anonymous? Maybe similar to Linux. With my little programming knowledge I know that this is an impossible task, however I am asking the best cyberpunk chan on the Internet.

>>14141 No

Get rid of all known telemetry. It doesn't take much Googling. Use Tinywall to filter internet access by process. That's what I did last time I had to use Windows.

>>14143 Forgot to say this won't by any means make you "safe" or "anonymous". But it's the best you can do.

>>14141 Your OS vendor has root. Nothing personal kid.

>>14141 >Is there a way to make it safe and anonymous? Safe from who? Anonymous from who? What's your threat model?

Never connect to the internet and you win

>>14161 >Air Gap Depends on threat model. Are you worried about availability? OS vendor could place a logic bomb or custom code for your environment. Good luck exfiling as an OS vendor without internet though.

>>14161 Guys, I have an idea, if it's about the operating system having access to the Internet, why don't we make a kind of application where only what you choose has access and the rest by default don't? I don't know how to explain myself

>I need to use the Windows 10 >games >need please leave sec if you're addicted to gaming or can't into linux because it is slightly harder

>>14171 That's a good idea. Maybe we could give it a cool name like "firewall".

>>14141 Pay for or pirate "oxbridge computer security". It's a video course on basic computer security principles directed at fools / newbies.

>>14172 You think a person with a gaming addiction doesn't have the right to computer security? What about a drug addict or alcoholic? They deserve to have their privacy invaded?

>>14179 >what is physical addiction I don't care about people who do not have enough willpower to just switch an OS because of muh gaymin. Do you really want to compare something like an opioid addiction to playing vidya all day? Please have some respect for people who quit serious addictions and stop with your retarded comparisons. You can't keep your privacy on windows, OP knows it and if he wants to use it he doesn't care about privacy

You can run software in compatibility layers like wine, virtual machine, make an air gap, or limited local network. For most of professional software a local network is sufficient, for games, well, don't play modern online games, they're waste of time.

>>14141 I'm kind of a scrub but if need to just install Win10 and dont want too much bloatware, TeamOS forums has a good selection of custom ISOs

>>14184 >Waste of time Can you define waste of time? For me waste of time means of doing X and believing to yourself that it isn't worthful whatsoever.

>>14190 Any activity that you deem as waste of time in retrospective. It's a chicken-egg paradox, but consider other people's experience with similar problems to evaluate your own.

>>14143 >google how to remove windows spyware hah

>>14229 I don't actually use Google myself. But when I say Google, I mean whatever search engine you prefer. Google as a verb is basically a standard phrase these days anyway.

>>14188 Don't tell me you.. trust those custom made ISOs where anyone can inject anything? If you need a bloat-free windows ISO, make one yourself from a legit one.

>>14244 working on learning how to do that myself but from what I've seen, they seem stable and safe. maybe I'm being too careless for the danger that might present itself with this but I've been fine thus far

>>14250 >seem stable and safe You can only judge one of those with the experience you've had (stability) and are equating the other with it. Those aren't the same thing. You don't know who has the data from whatever you did on that machine.

>>14244 Honestly how many people even use custom ISOs? What's the point of even injecting malware if only a small handful of the Windows's userbase would even look into a custom ISO?

This is like trying to make a car not be a car.

>>14179 you dont even need 10 for gaming. This is just lazyness / herd mentality. Also killing some of the telemetry kills the Os. You literally cant remove everything unless they patched it recently.

Is PC gaming even worth it anymore? Most AAA games like GTA Online can't even do the basic IP masking. So if you in theory secured Windows you have to be careful of what soykafty online game you are playing cause it might leak your IP if you don't use a VPN.

The gaming concern pales in comparison to the amount of software/workflows which only exist on Windows, particularly for creative work. Games are neat, but for fuarrrk's sake, it's annoying that the debate is constantly centered around them. Since ReactOS is progressing at the speed of a kidney stone, is Windows 10 AME the best solution so far? https://ameliorated.info/ >Spyware systems, which are abundant in Windows 10 by default, have not been disabled using group policy, registry entries or various other workarounds – they have been entirely removed and deleted from the system, on an executable-level. >Due to the modified nature of this Windows installation, there are various possible security and stability concerns to consider when using Windows 10 AME. The entire removal of the Windows 10 update subsystem, coupled with the lack of automatic driver detection, beyond what is included in the 1809 build of Windows 10 from late 2018, requires manual action in order to configure proper and safe operation. >It is critical to understand, that Windows, regardless of its modernity and patched state, has proven to not be a secure platform. If security is one of your primary concerns, you should not be using AME, or Windows in general.

>>14244 >Don't tell me you.. trust those custom made ISOs where anyone can inject anything This. Now you trust microsoft and anon with root. If you run Windows, MS has root. Even if anon modifies your ISO.

>>14369 Depends on much you will want to play that game. I'm playing MCC

Windows 10 AME and pfsense firewall with a decent browser. Never use it without the pfsense on, make pfsense block all telemetry services.

>>14391 Is it not as buggy on PC anymore?

>>14172 gaming on GNU/Linux is almost as good or as good as gaming on windows with applications like Lutris and steams proton. its also very simple to use requiring little to no configuration.

>>14455 No

This really is easier than you think. If you're gaming, then you're rich enough to buy a pi, even a used one. Pit dietpi on it, very light, and easy. Configure the pi to act as a router on a stick, so that you can set your gateway in the windows PC to the IP of the pi. Now you set up a whitelisting firewall and just watch the traffic, keep allowing IPs that you've OKed to connect. Or if that is too much work (which it could be, and that's okay) then you could simply go with pihol - but more importantly - ipset blacklists. For the latter will cover non-DNS connections to places you do not trust. Above all, ipset blacklisting is the meat of this operation. I do this on my win10 PC and even updates simply don't happen, I can't research things on TechNet. It really works. Or, you could just not set a gateway.

>>14141 I understand anon. My graphics card of my current pc has incompatibility issues with linux making it a problem too time consuming just to fix, therefore I have to use windows in which "just werks". Just try to use your windows computer for work only and search some tools for deactivating windows telemetry; it will not stop being a botnet of a bloated OS, but still, might give you the feeling you have some privacy. In the meantime you can start using linux WSL and start using BASH more often, once you taste the powers of BASH the transition to linux might get easier TL;DR >Disable telemetry >Install WSL and use it a lot in order to make your eventual transition into linux easier

>>14141 Yes, there is. Windows10>OS <--> Linux router OS <--> WAN >specifically all the software and games available However the catch is you don't get to use every software that is offered unless you're good enough to even try and 'ghidra' your own binaries (reverse engineer and dissect it yourself). Worms are a big thing on windows. As example, one executable/exe that loads an icon (yes you heard it right) or a file that generates a normal thumbnail BUT is a malformed image can then infect your entire system with self replicating worm. This is without any user interaction but just "loading" icon or thumbnail previews. I've seen it many times, I've fixed many systems of different people and it was as almost a hobby, sometimes I get to experience and see what a pwned computer looks like before I purge it and recover whatever is thrashed by the malware but I get to see and hear those cool hacker team sounds and animations (like reskinned the entire windows OS). Anyway, back to the topic just make sure to only whitelist the required connections on the router OS, while also having a blocking mechanism on your Windows OS preferably with Proxifier or similar software. Router must be fully hardened and does not fail even after power/system fail. >know that routers have this flaw where it can overload and restart by getting overloaded amounts of connections which was used before on big operations but I forgot what it is called, this is hardware specific. >know that if you use a software VPN over windows, it can crash on its own BUT leaving your OS browser active along with the browser's active connections thus defeating the point of using a private network. router VPN prevents this but know that your router must also stop everything upon crashing on its own. I don't generally recommend VPN as they're all just at this point sub companies of a main "tracking" company and there's like few internet companies these days while there are multiple flaws on the nature of VPN too. Remember that user data is "the new oil" worldwide, you might as well invest in it (by maybe understanding it and writing your anti-dataminer or dataminer). It's totally fine to use windows and ignore those "foss" purists who don't even know the reason behind this. Most programs that do chip flashing are usually released only for windows and have less of a trouble when it comes to drivers (which is reliant on kernel/dkms availability of a distro and it usually is not available or it was but its dependency breaks or the flasher is unavailable too). You'd also need this in order to flash a "Linux router" over your compatible router that is running pwned OS. There is also no point to using windows 10 other than getting an aquarium that leaks holes every new fancy update-makeover which usually happens without your permission so I generally recommend using 8.1 or less with the updates disabled (when I mean disabled it must be disabled to the services+regedit+powershell level, not just the control panel method of disabling updates). Generally, a outdated system is more /sec/ than one that's always connected to the WAN and getting frequent updates which in itself is an attack surface. Some of these terminologies you might not understand yet, just save it and view it again for later.

>>14468 Also forgot the reason why I made this post >Is there a way to make it safe and anonymous? >specifically all the software and games available There are software that are less harmful. For example, you can run Steam games but you will get G analytics along with your Steam which you might not like however there are other "digital distribution platforms" that are more user-friendlier and doesn't have DRM and outright tracking. For anonymity, you already lost when you relied on your local network. Even if you did use a VPN which is always futile and not recommended, there are multiple ways to track you still. If you use firefox or plain chrome you will get a lot of analytics too >>>/Ω/ you can always use Packet analysis or even just Proxifier to monitor these unsafe and anti-anonymity stalking programs and prove and see it for yourself. Those programs would give you the IP that is active. You can even use resmon.exe on windows to check the IP or domains connected, you can then whois the IP itself to find out which tracking company it came from or which connections you weren't expecting. You can even log it yourself as sometimes they just schedule to run when they think you're sleeping or there is no system activity. There is no other effective way to block them than to just whitelist connections that you only need (in proxifier and router)

I'd start by virtualizing the machine. Safer than running it on bare metal. I found success in QEMU+Libvirt+KVM with virt-manager as a gui so I didn't have to deal with the hell that is XML. If you want to game using a GPU, you'll need IOMMU compatible hardware (see your CPU and mobo for details). A second monitor, keyboard and mouse which are dedicated to the host are nice when things go bad (the windows VM will take over the others when its running). Windows 10 LTSC is the enterprise version without the telemetry (link to iso and activation tool at the bottom). This version gets security updates and whatnot from Microsoft but doesn't have any of their MS store soykaf. Which means that with this version if you NEED to use applications from the MS store you need to use another version. This includes some MS owned games, e.g. Forza. Otherwise, LTSC is the best version to use. If you're virtualizing, you probably don't need to worry about full disk encryption on Windows because that should be handed by the host with LUKS. If you have an entire hard drive you use for Windows that has NTFS or bitlocker partitions you will want to install the windows virtio drivers for SATA I/O (link at the bottom) then pass through the device, otherwise speeds will be slow. You will likely need to install the virtio networking drivers too (packaged together). If you have a DAC you'll want to pass that through to the VM in order to eliminate audio latency. I don't have one so I use the software scream to send audio from the VM to the host over the bridged network (link to software at bottom). I did find in some cases when downloading games from steam or doing other high bandwidth things audio would be a bit laggy or choppy. You can install the Windows Linux Subsystem or whatever to make things more linux-like (at least you'll have a shell). This makes Windows 10 safer to use and work with, but doesn't make it anonymous. Windows 10 LTSC ISO: http://cdn.digiboy.ir/?b=dlir-s3&f=SW_DVD5_WIN_ENT_LTSC_2019_64-bit_English_MLF_X21-96425.ISO Windows Activation tool: https://github.com/massgravel/Microsoft-Activation-Scripts Windows virtio drivers: https://docs.fedoraproject.org/en-US/quick-docs/creating-windows-virtual-machines-using-virtio-drivers/ Scream audio software: https://wiki.archlinux.org/index.php/PCI_passthrough_via_OVMF#Passing_VM_audio_to_host_via_Scream

>>14460 Yes

>>14144 >Forgot to say this won't by any means make you "safe" or "anonymous". But it's the best you can do. >>14141 Nor Linux by the way. It's not about the tool you use but HOW you use it. Sure "Linux" is less botneted than Windows. >>14254 If I were a glowie or a bad guy I'm not trust me it's typically the people I will target. >>14460 >>14486 mmmh not really

>>14254 Actually, this kind of supply chain attack seems useful to me.. Only Extremists would download and use Extremist Windows 10. Why not produce the product you enemy wants and make the ISO available to him?

I use weboas.is "performance edition" and I run tron script right after installing.

>>14141 how do i play games without getting pwned by skiddies

>>14181 Sometimes an application you want to run doesn't run well on Linux or Steam Proton and you might need to use Windows to run it. The end user should be able to modify Windows to be more or less bloated or filled with telemetry as much as possible. Sure they will never fully accomplish the task but there are other ways to stop the data collection from reaching Microsoft, you're just gatekeeping. Also the brain can be addicted to anything. Societies definition of a "serious addiction" spawns from the war on drugs.

>>14521 >Only Extremists would download and use Extremist Windows 10 Extremists would download GNU+Linux or BSD

There's powershell scripts out there you can run that will debloat it, disable all the known spying it does. But if you're using it for gaming then what do you care. Just don't use any personal info on the windows box you're using and you'll be fine.

install ltsc disable updates disable av disable fw enjoy windows nt

the only reason im still on windblows is because of onenote 2016, xournal++ still doesnt have an infinity canvas and there wont be one in the next 5 years

>>16819 Be the change you wish to see in the world. https://github.com/xournalpp/xournalpp/ Happy hacking!

>>16828 Damn son, just what the doctor ordered. I've needed a decent notetaking replacement.

>>14141 It's actually very easy: - delete everything in the windows folder (especially system32) - install linux