I have a desktop PC. If i install Windows 11 on a second SSD on the same PC, the first ssd being linux. Is that safe to do?
Yes for the most part. Its kind of annoying to swap SSDs though if you intend to daily drive it. You are still vulnerable to UEFI level malware but those are rare.
1 Like
Just use chris titusâs winutil and/or privacy.sexy. No point in doing all that manual work with group policy/registry when people have already done it for you
As I recall (no, not that way), GrapheneOS has stated they will be working on Windows VMs in GrapheneOS. If this feature gets implemented, it could complement the rumored Android Laptop and threaten to make Windows obselete.
This has already happened. Check out how websites are designed these days.
Desktop has been overtaken by mobile long ago. There are far more people with phones than PCs these days.
Gaming is also more common on mobile these days. It doesnât help that console has also become more mobile and are going to the direction of portability due to the success of Steam Deck.
Imas long as you donât use those services
https://raw.githubusercontent.com/hagezi/dns-blocklists/main/hosts/native.winoffice.txt
Windows is not obsolete and will not become obsolete in the foreseeable future. There are lots of mission-critical pieces of hardware and software for many different use cases that only run on Windows (or Windows and Mac).
As far as I know there is no 100% compatible and reliable way to run Windows software in Linux. Maybe someday (performance penalties also need to be reduced).
Therefore there is still a need for Windows recommendations.
2 Likes
We are currently working on a Windows guide that focuses mostly on harm reduction. As you can see here, it is incomplete as of today. Only the âGroup Policyâ section is compelete.
This is more of an internal discussion among the PG team, but I am always happy to personally contribute to the Windows section during my spare time. However, I am also working on a few other projects related to site development.
Edit: Is there a specific guide on Windows that you would prefer seeing first? Installation is the easiest to write IMO but Iâm sure that you would probably prefer a more complete guide up-front lol
1 Like
It will never be complete as Windows like to thrash itself around after a Windows update (that happens every first tuesday of the month, btw) and reset your setting to whatever it wants to be. It also reinstalls your Candy Crush Cola just in case you changed your mind and like it now more. This happened because Windows have become so adversarial and so anti-user.
Me, I have given up. Windows is on permanent detention at home.
I have a laptop machine that runs Windows should I ever have a need for it (thankfully I dont). It is connected to the LAN port provided by the ISP and never touches the insides of the home network.
1 Like
My family runs a small business with a few computers. We are too small to hire an IT firm so i have to configure the computers. I already have hardened them. What i personally i am looking for are tips to increase the security of the OS. I already know how to increase privacy as much as possible but not too much about the security.
I have also done some things for security but i am not an expert and do not know if i have missed something important.
The employees using those computers are opening files from email all day (invoices, offers, etc). So the threat model is opening malicious files.
1 Like
Yep, itâs not great. Unfortunately, as long as businesses run on Windows, it wonât be going anywhere anytime soon.
My solution to that issue is that every couple of months, I run the privacy.sexy script that I configured to my needs after a Windows Update. Itâs annoying, but it only takes 15 minutes (once youâve done the first run).
If I can echo what Iâve read here, Windows is pretty secure combined with Windows Firewall. Itâs really the privacy that is the issue.
Apply Windows and MS Office security baselines. You might want to check for privacy invasive settings in these and adjust them. Let users only have access to non-admin accounts and encourage everyone to use Windows Hello for authentication. Block execution of untrusted software from user-writable locations with Applocker. All of these measures should require rather low maintenance, once adjusted to your needs. Update to a newer version of the baselines every now and then. You might also want to block unsigned script execution. If you want extra safety, have a look into WDAC, but this is definitely more effort to maintain.
Noted! We will look into this. Thanks for sharing