And on SHA1 : SHAttered Attack: In 2017, Google and CWI Amsterdam announced a practical collision attack on SHA-1, known as the SHAttered attack. They demonstrated that two distinct PDF files could be created with the same SHA-1 hash, proving the practicality of the attack and showing that SHA-1 is no longer suitable for cryptographic use.
Important side note tho, 1) a signature only tells you who made the software, it doesn't say whether it's good 2) not having a signature is not a sign that a file is bad, especially software that is open source or made by individuals they likely can't afford a code signing cert
I still don't get it why MS keeps adding more of these "misc" security features while leaving many more important ones wide open. SMB ports are still listening on all inputs by default and is hard to block, autorun enabled by default, pulling unnecessary trash like ads from the internet for no reason, mixing system internals with web features by forcing Edge installations, complicated permission structures and UAC that doesn't work, and more. Non of these are issues on most Linux distros like CentOS or Ubuntu. I'd say this is just another trick to comfort muggles who have no idea what the principle of least privilege is.
Hackers will fun with that feature pulling up screenshots of users history of credit card numbers on shopping sites. Also usernames & passwords entered to access accounts.
Hey here's a video idea: What if you install Windows 11 on a system that doesn't meet the requirements? Specifically CPU and no SecureBoot. I'm wondering cause my PC doesn't meet the requirements because of its CPU (not sure why because my CPU does support PopCNT I think) and my PC doesn't have SecureBoot capabilities
Honestly, something that really annoys me is when Microsoft continues to add features in Win32... like I feel like they're just adding on to the remnant problem in Windows overall. Still a great feature though!
Here's one to think about...Is there going to be a way to KEEP from upgrading to 24H2 from 23H2? I have 1 computer that only runs windoz, and all the rest run Linux Mint. *I DON'T WANT IT TO UPGRADE!!*
installed garuda linux. all my steam games work. microsoft and windows 11 finally gone from my home. Frankly, as good and easy as current linux is i couldnt imagine paying for windows.
It's being issue by someone who is trusted. Yes that includes Microsoft, but multiple certificate authorities exist for code signing, and there are multiple brokers that you can purchase code signing signatures from.
@@KyleDavis328 Thank you. Personally I mistrust solutions that pretend payment="trust". In the eve it's only a pain in the a.. for the consumer or prosumer. MS is surely trying to force a lockin á la Apple or Google Android on us.
i use modded windows with lots of features i dont care about security at all , i also want to develop my own security app that will be connected to a network ,mostly my phone and pc
Thank you - this was exactly what I thought too. But on a second thinking: why should MS do that? We live with idiotic small windows in Windows now for 30 years, there is just no reason to improve this.... Oh, and when we speak about stupidities: why do we need tools to copy/paste error messages into the browser to do a web search?
With terrible software support. Open source is 1000 times worse than a closed source software on windows. Are you comparison Gimp with Photoshop? 😂 LoL.
Bitdefender scammio sounds like a great way of training an AI on what things a user finds suspicious. In other words, scammio could be used as a tool to make AI generated scams more difficult to detect.
I am going to ask scamio if something that takes screenshots of your computer every 10 seconds and stored them is spyware. I think it will say that it is :P
@@hiru92 It'll become mainstream and integrated into all architecture probably. Companies have an incentive to harvest user data, after all, and Recall looks like a fantastic way to do that, sadly.
Is the new Zone identifier thing also part of that update?Downloading a zip and opening it and eg clicking on an iso or exe will prompt you, that it’s dangerous.Whats even more confusing is, that it’s also the case of encrypted zip files.I assume windows is just passing them on to the files, when they are decompressed.But idk
@@MarioGoatse there's a subtle gradient, and also the tail is a little longer. the "link" is also more rounded, but based on win7 i think the borders are thicker too
If I knew what you knew I'd definitely use it...pretty cool to learn about. Nice job! I am a subscriber to Bitdefender total security. So hearing about Scamio was a surprise! Always good videos so keep up the good work! 👍
Hey Joe, What is your take on windows 11 24H2 "RECALL" feature...??? Seems to me that big brother Billy Gates is including more and more ways of prying info. I'm already starting to migrate to Linux Zorin distro....
Are you talking about the security feature where Microsoft takes snapshots every 3 seconds of everything you do on your computer??? What could possibly go wrong with that feature? Microsoft As Spyware is not secure in any way. Are we supposed to trust that company?
Microsoft has forced my hand back to Linux due to their new "'Recall" feature which will eventually make its way to every Windows installation. Unfortunately I have to keep Windows, so I'm forced to duel-boot. But what a terrible idea from a personal standpoint and a security standpoint. You know people will be able to bypass their encryption and view your passwords, blackmail you. 1984
It would be much more useful if they check signature from cert file in the same folder and with additional extintion. Need this to validate signature on documents.
One thing you didn't mention is the OSAttr entry in the tag. For signed drivers, this shows the version of Windows that the driver was signed for. In your SHA-1 example, you can see 6.3 (Windows 8.1) and 10.0 (Windows 10 or 11). I find it useful when on a driver hunt, so I can tell if the driver was intended for the OS that I'm running.
Hopefully the feedback on this vid is good. If not I want you to know that this video scratches the itch about signature and rules management that has bothered me for a while. I was not in critical need of this info but I am very glad you made the vid (and that MSFT doing common sense improvements in addition to the crazy ones) Thank you
I don't think Scamio will be very helpful over all. After all you have to be suspicious of some message/content in the first place, before you even start thinking of running it against Scamio. Otherwise the idea seems neat.
The new security feature is actually a security issue, a new security hole and attack surface added by none other than Microsoft itself, also, did I mention spyware?
8:31 Redacting the password tells the audience that ThioJoe reuses passwords. Had the on-screen value been something like... jB^FWx324TAhyfan8pp&tuIqpZt6Ks%zW!!m Would have been the more-secure option.
Have you heard of catalog signatures before? 🤔
yes
Nope
No
No
yes
And on SHA1 : SHAttered Attack: In 2017, Google and CWI Amsterdam announced a practical collision attack on SHA-1, known as the SHAttered attack. They demonstrated that two distinct PDF files could be created with the same SHA-1 hash, proving the practicality of the attack and showing that SHA-1 is no longer suitable for cryptographic use.
SHAttered is a badass name though.
Wait what where
All my homies use SHA2
Windows Repair Toolbox wtf is > Windows Repair Toolbox
I opened the catroot folder in order to find some cat pictures but there aren't any??? how come??
No cats, and no roots
🐈⬛😺
🫚🥔🥕
Cat is short for catalogue.
@@mopeybloke no way, sherlock! i had absolutely no idea
@@anamoyeee I was surprised and disappointed too.
U hv to dld them from YT. Yeah, but don't get the siamese or orange cats cause they don't play well with others and you don't want conflicting cats.
I really wish this was explained like 20 years ago...
Back when you first encountered cat files too huh? lol
Important side note tho,
1) a signature only tells you who made the software, it doesn't say whether it's good
2) not having a signature is not a sign that a file is bad, especially software that is open source or made by individuals they likely can't afford a code signing cert
3) I've nothing to add,
4) you can usually omit number 3.
5) Number 4 must always be followed immediately by number 5.
I hope you make a video about windows 11 iot enterprise ltsc.
I still don't get it why MS keeps adding more of these "misc" security features while leaving many more important ones wide open. SMB ports are still listening on all inputs by default and is hard to block, autorun enabled by default, pulling unnecessary trash like ads from the internet for no reason, mixing system internals with web features by forcing Edge installations, complicated permission structures and UAC that doesn't work, and more. Non of these are issues on most Linux distros like CentOS or Ubuntu. I'd say this is just another trick to comfort muggles who have no idea what the principle of least privilege is.
smb like super mario bros
Smoke and mirror “features” while leaving access open for the NSA.
SMB is disabled by default on windows 11 lol. I rather America monitor me than Jiang Tan😂.
And then there's legal spyware with Recall😂
well people have to timeshift their timemachines to that
I hope thare is a way to turn it off aka breaking it so it doesn't work anymore,
Exactly
Hackers will fun with that feature pulling up screenshots of users history of credit card numbers on shopping sites. Also usernames & passwords entered to access accounts.
@@tobyzillamoving to Linux utterly breaks that malware
Hi from TUNIS 🇹🇳🇹🇳
is this availble on Windows 10?
I don't get digital signatures in the property window. Win 11, latest release
thanks dude very interesting
It would be nice if you combine this to app locker to create a new video show examples of scenarios where to block things
Alright. When you are going to teach us how to assign modified Nvidia bios?
Wait there are people who intentionally update to 24H2
Hey here's a video idea: What if you install Windows 11 on a system that doesn't meet the requirements? Specifically CPU and no SecureBoot. I'm wondering cause my PC doesn't meet the requirements because of its CPU (not sure why because my CPU does support PopCNT I think) and my PC doesn't have SecureBoot capabilities
it's about frickin time the Signatures tab was universal!
Honestly, something that really annoys me is when Microsoft continues to add features in Win32... like I feel like they're just adding on to the remnant problem in Windows overall. Still a great feature though!
Here's one to think about...Is there going to be a way to KEEP from upgrading to 24H2 from 23H2?
I have 1 computer that only runs windoz, and all the rest run Linux Mint. *I DON'T WANT IT TO UPGRADE!!*
nice
Microsoft sneaked bitlock on me. I am through with windows. Going to either Mac or Linux.
Me over here not caring about updates, being stuck with error 0x80004005 and can’t cut move or rename folders
Sounds like you have a corrupted OS drive...
Not stuff for the average Joe (pun intended) but useful for some of us.
I do not have this and my windows version is 10.0.22631
Would be hillarious if someone tricked this bitdefender AI to instead teach how to scam people xD
With all the "AI jail-breaks" i saw... possibly
This is actual insanity.
Catalog file is not a new thing. This is just a new convenience feature of Windows Explorer.
Officially made the switch to Linux goodbye Microsoft you will not be missed!
Scamio sounds already like scam...
Im not updating anymore i installed atlas and im staying on 22h2
installed garuda linux. all my steam games work. microsoft and windows 11 finally gone from my home. Frankly, as good and easy as current linux is i couldnt imagine paying for windows.
Who or what decides what is trusted? Trusted is who pays Microsoft or?
It's being issue by someone who is trusted. Yes that includes Microsoft, but multiple certificate authorities exist for code signing, and there are multiple brokers that you can purchase code signing signatures from.
@@KyleDavis328 Thank you. Personally I mistrust solutions that pretend payment="trust". In the eve it's only a pain in the a.. for the consumer or prosumer. MS is surely trying to force a lockin á la Apple or Google Android on us.
Windows Repair Toolbox wtf is that
は-は-は？
はは！
i use modded windows with lots of features i dont care about security at all , i also want to develop my own security app that will be connected to a network ,mostly my phone and pc
I like turtles
New Features? who cares its not an OS its spywear
It's for security, so it's a good thing to add.
First
Based on the quality of your past postings, YOU ARE NOT A RELIABLE SOURCE.
It would save everyone time if that property window were wide enough to display all columns. I'm talking to you; Microsoft.
Thank you - this was exactly what I thought too. But on a second thinking: why should MS do that? We live with idiotic small windows in Windows now for 30 years, there is just no reason to improve this....
Oh, and when we speak about stupidities: why do we need tools to copy/paste error messages into the browser to do a web search?
Be nice if there was an option for an additional overlay on file icons for a unsigned / signed file. Much like the shortcut arrow overlay
My Brain Runs On Linux
I use arch btw
With terrible software support. Open source is 1000 times worse than a closed source software on windows. Are you comparison Gimp with Photoshop? 😂 LoL.
@@_tanzil_🤡
My brain r- uh oh "Brain" doesn't run on Loonix
Proton: Brain runs on Linux but you gotta waste 5 hours tweaking and brain cells don't work
So you're open sourced?
Bitdefender scammio sounds like a great way of training an AI on what things a user finds suspicious. In other words, scammio could be used as a tool to make AI generated scams more difficult to detect.
Yeah
First thing the AI will learn is that users find AI suspicious.
I'd like to see you do a video about Windows Recall.
I am going to ask scamio if something that takes screenshots of your computer every 10 seconds and stored them is spyware. I think it will say that it is :P
I am amazed you haven't done a video about Recall.
Probably because it's not available to the public yet.
Hope he does check it out though, it looks like a gross invasion of privacy!
only system with NPU, newer intel, amd apus with npu...
@@hiru92 It'll become mainstream and integrated into all architecture probably. Companies have an incentive to harvest user data, after all, and Recall looks like a fantastic way to do that, sadly.
Is the new Zone identifier thing also part of that update?Downloading a zip and opening it and eg clicking on an iso or exe will prompt you, that it’s dangerous.Whats even more confusing is, that it’s also the case of encrypted zip files.I assume windows is just passing them on to the files, when they are decompressed.But idk
It's like MD5?
Wasn't this feature already added to Windows 10? If so, when?
I'll never use this, but it'ss fun to know
You're such an amazing guy, Thio. I always enjoy your informative videos. You invest into them so much. Appreciated :)))
"dot C-A-T" 🤮 ❌
"dot cat" 😸✅
Probably not ever going to 11, and I've almost figured how to do the few Windows things in Linux, at which point, I won't look back.
Thanks for your insightful comment on a video about Windows 11.
what's your cursor set? it seems oddly different from the official windows one, but i kinda like it
Isn't it just larger? I might be wrong, but it looks it
@@MarioGoatse there's a subtle gradient, and also the tail is a little longer. the "link" is also more rounded, but based on win7 i think
the borders are thicker too
Good video
We got Windows Repositories system (like for linux) before GTA 6
This video is the only sponsor ive been interested in..Thank you for this!
files, what a rabbit hole.. just saying, thanks @ThioJoe😁
Thanks for the great help
Oh great ...
More stuff to get around to manipulate the windows files to be able to remove bloat...
😵💫
Meeeh... I'm done with Windows. Switched all to Linux Mint 2 years ago.
If I knew what you knew I'd definitely use it...pretty cool to learn about. Nice job! I am a subscriber to Bitdefender total security. So hearing about Scamio was a surprise! Always good videos so keep up the good work! 👍
Every signature means more money, more expensive product.
Hey Joe, What is your take on windows 11 24H2 "RECALL" feature...??? Seems to me that big brother Billy Gates is including more and more ways of prying info. I'm already starting to migrate to Linux Zorin distro....
I opened File Explorer and is not there, including after then clicking Properties
I wonder how much it costs a computer for games and another one for everything else?
Lmao to be fair, not sure if this would matter if they pushed the literal OS-level spyware
i thought catroot was where all the cats came from..
Hi
163 comment
Ok But who has a windows 11?
My .cat does Meow.
Are you talking about the security feature where Microsoft takes snapshots every 3 seconds of everything you do on your computer??? What could possibly go wrong with that feature? Microsoft As Spyware is not secure in any way. Are we supposed to trust that company?
This is a man!
Uhhh what?
EARLY!!
watching this on my RPiOS Bullseye RPi4B SBC desktop....relaxed....sipping coffee...hash browns on the side....
Microsoft has forced my hand back to Linux due to their new "'Recall" feature which will eventually make its way to every Windows installation.
Unfortunately I have to keep Windows, so I'm forced to duel-boot. But what a terrible idea from a personal standpoint and a security standpoint. You know people will be able to bypass their encryption and view your passwords, blackmail you. 1984
suuuure
It would be much more useful if they check signature from cert file in the same folder and with additional extintion. Need this to validate signature on documents.
I hope they add big red arrows and circles to Windows 11 that point at new features.
only 28.18% interested, lol (I still use win10)
Gosh 2 weeks. What happened? Jk Anyways welcome back 😊
"You need to know.", the word "about" is not needed and is a dangling modifier.
YES.
One thing you didn't mention is the OSAttr entry in the tag. For signed drivers, this shows the version of Windows that the driver was signed for. In your SHA-1 example, you can see 6.3 (Windows 8.1) and 10.0 (Windows 10 or 11). I find it useful when on a driver hunt, so I can tell if the driver was intended for the OS that I'm running.
first one
cool
why would you willingly run this spyware on your computer?
I’m sick of ads in the middle of a video. Run an overlay with the ad or make a separate video on who ever is paying you.
Hopefully the feedback on this vid is good. If not I want you to know that this video scratches the itch about signature and rules management that has bothered me for a while. I was not in critical need of this info but I am very glad you made the vid (and that MSFT doing common sense improvements in addition to the crazy ones)
Thank you
cat root
cat: root: No such file or directory
😋
I just realized I haven't opened my laptop for a month. Thanks for the update
Offtopic Joe, but what browser are you using these days for security and/or normal everyday use that maybe don't need privacy
They add new features to legacy style windows... Please make everything looking the same in windows...
For real, when will they give everything the WinUI 3 treatment... I think it looks good, just be consistent Microsoft!
I don't think Scamio will be very helpful over all. After all you have to be suspicious of some message/content in the first place, before you even start thinking of running it against Scamio.
Otherwise the idea seems neat.
The best feature is not using 11
The new security feature is actually a security issue, a new security hole and attack surface added by none other than Microsoft itself, also, did I mention spyware?
womp womp linux ftw
8:31 Redacting the password tells the audience that ThioJoe reuses passwords.
Had the on-screen value been something like...
jB^FWx324TAhyfan8pp&tuIqpZt6Ks%zW!!m
Would have been the more-secure option.
I know right? It's like when people redact their internal IP address...