Thread #108557841
File: Screenshot From 2026-04-08 08-38-26.png (439.3 KB)
439.3 KB PNG
MICROSOFT DECALRES WAR ON WIREGUARD AND VERACRYPT.
GET IN HERE
158 RepliesView Thread
>>
>>
>>
>>
>>
>>108558025
You can't run a driver on Windows unless it's signed with a EV certificate that's Microsoft approved.
On Loonix, you can enroll a MOK (Machine Owner Key) and use that to sign your own kernel modules, on Windows, if Microsoft won't allow you to sign drivers, you're SOL.
>>
>>
>>
>>
>>108557915
>>108558025
>Microsoft shuts down Wireguard and Veracrypt developer accounts
>I love Windows! Linux is so gay.
Literal retard shills.
>>108558081
>>108558025
>what does "developer account" mean in this context
>the fuck do you mean "developer accounts"? "push" updates?
Most intelligent Windows users on the board.
>>
>>
>>
>>108558066
yes you can.
>>108558126
Microsoft are always niggers.
you use windows in spite of Microsoft now because of it.
>>
>>108558066
>you can enroll a MOK (Machine Owner Key) and use that to sign your own kernel modules
You don't need to do that shit anymore. You can just enroll your custom SecureBoot keys in mobo (although you need to enroll microslop keys for compatibility reasons as well) and then make a unified kernel image which will host kernel, initramfs and efi stub, so you just sign a single efi executable.
>>
>>
>>
>>108558147
Good to know. Does any distro have support for actually doing that automatically on kernel updates? Can you ditch shim entirely? Do you just add the kernel as an efi executable into nvram or do you still use a bootloader?
>>
File: 1770158090392802.jpg (230.4 KB)
230.4 KB JPG
>>108558153
monumental.
>>
>>
>>108558180
>>108558153
This is the same as running DSE off from the boot menu. Both require a reboot to apply anyways.
>>
>>
>>108558180
Is this the option that literally adds a watermark to your desktop saying that unsigned drivers are enabled, or that was the test mode the other anon mentioned?
I remember I had to install some unsigned driver several years ago, and whatever thing I did kept the watermark as long as it was enabled.
>>
>>
File: shhh987887.jpg (69.7 KB)
69.7 KB JPG
>>108557841
Time to extinguish.
>>
File: 1000007496.jpg (24.1 KB)
24.1 KB JPG
>>108557841
I thought Windows users and its platform developers were into cuckoldy fetish. What's the problem, exactly? It's just another instance of Microsoft humiliating them. They should just enjoy it.
>>
File: GZ9A0CxX0AIC16m.jpg (38.2 KB)
38.2 KB JPG
>>108557841
I don't care, I use macOS
>>
>>
>>
>>
>>108557841
Worrying about security while using Windows is like worrying about HIV in a bugchasing orgy.
>>
File: 1762972689081442.jpg (46.4 KB)
46.4 KB JPG
>>108558353
don't doubt it
>>
>>
>>108558174
>Does any distro have support for actually doing that automatically on kernel updates?
I think every distro can do this: Debian and Arch both have documentation and upgrade hooks. I'm doing this on my Arch system because this allows me to unlock luks partitions using tpm2
>Can you ditch shim entirely
Yes
>Do you just add the kernel as an efi executable into nvram or do you still use a bootloader?
You can load kernel directly from nvram but I'm using systemd-boot for convenience
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
File: coparrot.jpg (18.6 KB)
18.6 KB JPG
>>108557915
>Still better than linux, btw. Unironically. I'll never use that garbage.
You sound like a Microslop Co-Parrot
>>
File: 128230291441.jpg (866.1 KB)
866.1 KB JPG
>>108558358
>>
File: Trinity Desktop.png (18.7 KB)
18.7 KB PNG
>>108558668
Not my problem.
>>
File: xfce.png (138.4 KB)
138.4 KB PNG
>>108558729
Exactly.. I've only ever heard about 1 guy using Gnome, named Emmanuel.
>>
>>
>>
>>108558668
The type of linux user we get on /g/ installed CachyOS yesterday and thinks it's magic pixie dust. They know nothing and cannot be helped.
>>108558358
>>108558081
Just retarded.
>>
File: 266f6b3f-ade5-4012-bda2-881faf82d867.png (72.2 KB)
72.2 KB PNG
>>108558143
>yes you can.
if you boot in test mode to enable unsigned drivers it will display a humongous watermark that you cannot turn off (no, really) until the end of times lmao
>>
>>
File: install-unsigned.png (17.2 KB)
17.2 KB PNG
>>108558507
>>
>>108557841
https://x.com/windscribecom/status/2041929519628443943
>>
>>
>>
File: 1759927752863851.jpg (26.1 KB)
26.1 KB JPG
>>108558147
>bro just hack your motherboard
>>
>>
>>
>>
File: 1754375154639.jpg (347.5 KB)
347.5 KB JPG
>Check to see if my Windows computer requires Microsoft's permission to install or update software
>It Does Not
>go back to anachronistically reading a newspaper by my kitchen window over coffee and croissant
>>
>>
>>
>>108558126
>Microsoft shuts down Wireguard and Veracrypt developer accounts
"Shuts down" how? I am not beholden to Microsoft's permission to update and use Wireguard or Veracrypt. What they do with their "developer accounts", whatever those are, does not affect me in any way.
Linux IS gay, and you're impotently seething because there's literally nothing you can do to get me to use your retarded failed commie software.
>>
>>
File: Screenshot From 2026-04-08 12-58-04.png (691.3 KB)
691.3 KB PNG
>>108557841
BREAKING NEWS, MICROSOFT ALSO DECLARED WAR ON WINDSCRIBE.
>>
File: (You).jpg (39.9 KB)
39.9 KB JPG
>>108560140
> I am not beholden to Microsoft's permission to update and use Wireguard or Veracrypt. What they do with their "developer accounts", whatever those are, does not affect me in any way.
>>
>>108560152
>black magic "my computer is doing creepy things I can't understand or identify or prove, the government sees all my porn" mentality
These cretins should never be permitted to post on /g/. There needs to be an computer operations test to enable posting on this board.
>>
>>
>>
>>
>>
>>
>>
>>108560196
10 ltsc iot iso and dodging hardware (e.g. laptop models) that don't support is already the norm of tolerating windows and not being forced to use start menu written in some webshit
android will make you drink the 24h verification soon can to install programs not from (((app store))) and why wouldn't microsoft
>>
>>108560208
>android will make you drink the 24h verification soon can to install programs not from (((app store))) and why wouldn't microsoft
You're going to have to write that in white people english if you want a response.
>>
File: nsa.png (319.8 KB)
319.8 KB PNG
>>108558668
>>108559719
You're retarded. There is a night and day difference between a vulnerability existing in software and Microsoft willingly giving your supposedly encrypted data to law enforcement.
>>
File: lol.jpg (117.5 KB)
117.5 KB JPG
>>108560223
you will have to go through more and more extra-steps to be able to "use"the os
https://arstechnica.com/gadgets/2026/03/google-details-new-24-hour-pro cess-to-sideload-unverified-android -apps/
there is no reason for microsoft jeets to not implement this for their consumers because consumers who buy laptops at walmart and amazon are a small % compared to enterprise, and their choices simply don't matter. after all it's easier to support a whitelist of (((verified))) software, like adobe reader, copilot and whatsapp, not some hacker autist third party disk encryption or network sniffers.
>>
>>
>>
>>
>>108560332
i had to go through pdf spec sheets and carefully handpick a 2025 14" thinkpad model that is certified (shit like wifi and touchpad actually working) win 10 ltsc for a normie who likes lenovo but doesnt want copilot(tm) jeet os
the clock is ticking
your sense of comfort deteriorating
>>
>>108560366
Your retarded fantasies are not my reality.
Amazing watching you crash out projecting your own inferiority, physically incapable of comprehending that other people are better at what you're doing. What was it like being found floating in the Ganges river?
>>
>>108560283
>>108560366
>we're supposed to care about some mentally ill jeet who can't get his "thinkpad" working
I have an entire warehouse full of hardware, hobbyist problems are not my problems.
to you, merely installing an operating system is your greatest tech achievement.
>>
>>108560377
"try changing group policies .msc to disable kernel features" is not a normal thing to say
>>108560395
calm down lol
>>
>>
>>108560415
>"try changing group policies .msc to disable kernel features" is not a normal thing to say
this is the kind of advice everyone gets when trying to do anything in linux but it's ok then when they do it right?
>>
>>
>>108560556
Ironically it's the best way to avoid the most popular threat that's the most difficult to defend against, supply chain attacks.
>we compromised your third-party dependency of a dependency of a dependency by pushing a new version with malware that everybody built into their new binaries and published in the latest update!
>>
>>
>>
>>
>>
>>
>>108560751
Linux secure boot really is a headache that doesn't add any real security anyway. The generated MOK is usually stored unencrypted on the filesystem anyway, so any attacker who gets root can just sign whatever module they want anyway, or compromise the entire bootloader.
It's not like Windows' secure boot is much better; what it adds is "safety" for software vendors to reliably determine you're a good goy who's not in control of their own computer and are, thus, allowed to run the software you purchased from them.
Feel free to tell me how I'm wrong if I am. But that's the impression secure boot gives me.
>>
>>
>>
>>
>>
File: 1685712634223761.webm (935.2 KB)
935.2 KB WEBM
>>108558439
Install LTSC. Use Defender Remover from GitHub.
>>
>>
File: 1764359330569622.png (1.1 MB)
1.1 MB PNG
>freetard doesnt check email for years
>account closed for inactivity
>freetard screeches and blames """""""M$$$$$""""
>other freetards screech about """"""M$$$$$$""""" without doing even 1 second of fact checking
reminder that nothing that comes out of a freetard's mouth is ever worth listening to
>>
>>108562205
Oh thank G*d, the brown golems had to be ordered by the only competent basically token white guy middle manager/tech lead in the whole dept. to restore their select good-goy software developer attestation accounts, because it would be too bad of a PR on orange reddit and The Register not to do so. (Just a part and parcel of distributing utilities and device drivers on Windows.)
>>
File: irrelevant.png (142 KB)
142 KB PNG
>>108559763
you guys are either RETARDs or MICROSOFT EMPLOYEES discussing some irrelevant internal shit
>>
>>
>>
>>
File: 1767766758261344.jpg (217 KB)
217 KB JPG
>>108562205
why is that necessary again?
this twitter retard is framing corporate bureaucracy as if its the law
>>
>>
>>
>>108560897
It literally won't grandma looking to browse the web and normie average joe looking to score on "jailbait nudes online" will have their brains exploded by the terminal alone, unless someone pushes a distoro something exactly easy to use like Windows on a nearly 1:1 scale then you're fucked, because itll open the floodgates to normies and midwits, be glad the OS gatekeeps itself on its difficulty to use case.
>>
File: 1645886755106.jpg (352.6 KB)
352.6 KB JPG
>>108557841
The powers that be have a new system that has been in the development for decades now, ready to be rolled out in the coming years. It will operate in parallel starting sometime this year and by the next decade it will be fully operational as the Agenda 2030 goals are slowly being implemented.
There will be no collapse, no violence, no uprising, no world war, no draft, no revolution, no killing of jews or politicians or other such fantasies. Instead there will be law & order, compliance and total surveillance until the very end. AI will be at the center of it all.
The Great Reset is inevitable.
>>
>>108564419
For basic bullshit like browsing the internet linux is even smoother than winblows nowadays. Updating is done thru gui as well.
it’s the moderately advanced use that is an issue, bullshit like full ffmpeg not being the default ffmpeg and needing both nvidia gpu and harness for drivers to work properly.
Essentially, linux is good if you know what you’re doing or have no idea what you’re doing, and kinda shit if you’re between those two, which just so happens to be most of /g/
>>
>>
>>
>>
>>108565059
You can make normie software without begging the man
If you want something with elevated privileges, like custom drivers or kernel anti cheat or whatever, you need to suck microdick for special privileges
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>108565327
>All it took was significant public outrage
This, and unless you're a massive tentpole of the IT community you're going to be fucked in the coming years where AI, jeets, and robots ban all software that isn't the Windows Store and government spyware
>>
>>
>>108560156
This is looking more and more like a gigantic fuck-up caused by Nadella's nepohires. Wouldn't be surprised if it's some overzealous AI being the source of the issue.
>VeraCrypt
Obvious schizobait cuz BitLocker
>WireGuard
MS doesn't have an alternative for this protocol, also used for serious enterprise networking
>Windscribe
So what about Mullvad, ProtonVPN and so on? If they're blanket banning VPN's, why target only one provider?
>>
>>
>>
>>
File: 1710194355867308.jpg (17.1 KB)
17.1 KB JPG
>>108561272
It's the element of truth that makes it funny.
>>
>>108558066
Did they do away with signtool? I used to use a digital signing certificate some japanese company leaked on github, that was not revoked, to sign my drivers. Even funnier, if the certificate expired, you could just set your local time to when it wasn't, and still sign without a timestamp, which was not a big deal.
Haven't used Windows since then, but that was around 2021.
>>
>>
>>108567440
found the batch script i used for signing.@ECHO off
set current_time=%date:~4,2%-%date:~7,2%-%date:~10,4%
date 06/06/2018
CALL %~dp0\bin\signtool.exe sign /a /ac "%~dp0\bin\AddTrust External CA Root.cer" /f "%~dp0\bin\cert.pfx" /p "redacted" *.sys *.exe *.dll
date %current_time%
pause
>>
File: 1754434248991462.jpg (88.8 KB)
88.8 KB JPG
>>108557915
>Mistake.
>With two of the most secure pieces of cryptography software on earth
>While the US is at war with half the middle east
>While it's on the front page of HN days ago and still not resolved
To be young and naive again
>>
>>
>>
File: 1767990494812981.jpg (49.5 KB)
49.5 KB JPG
>>108567351
>MS doesn't have an alternative for this protocol, also used for serious enterprise networking
Its like people just forgot L2TP and PPTP days
>>
>>108567525
>L2TP
>PPTP
Like I said, no alternative. Older, more complex. I know there are other protocols, including OpenVPN. So again, zero sense to target WG, especially when by default it's trivial to filter it via DPI due to it's packets being too unique. You could block global WG traffic at T1 ISP's but that doesn't fit the freetard conspiracy rhetoric.
>>
File: OpenVPN.png (35.6 KB)
35.6 KB PNG
>>108557841
> WireGuard
Literally no value lost.
>>
>>
>>
>>
>>
>>108567588
>Wireguard is the most secure piece of cryptography on Earth
>glowies purposefully try to kill future aigning of the Windows client
>despite them being able to kill it's global traffic overnight
>and the glowies use outdated crypto that WG thwarts
So as usual, freetard conspiracy theorists can't even make logical sense why the Occam's razor explanation of "Microsoft/the devs fucked up" is wrong.
>>
File: dunning kruger.jpg (20.1 KB)
20.1 KB JPG
>>108567607
>Occam's razor
The midwit's surrender cry of "I'm too retarded to understand complex problems so they must not be THAT complex".
>>
>>108567635
>Dunning-Kruger
Peak Mt. Stupid is coming up with a convoluted explanation that fits your personal narrative (Microslop bad) while rejecting every single other possibility.
Fucking hell /g/ really is a breeding ground for midwits.
>>
>>
>>
File: Wireguard.png (371.8 KB)
371.8 KB PNG
Wireguard is back.
>>
>>108567578
As someone who's used openvpn and wireguard, ovpn is dogshit. Waaaayyy more overhead. Literally tested it side by side. Ovpn was getting 40% of raw bandwidth, wireguard was getting 90%. This was going to the same pfsense router from the same client device.
>>
>>108568151
openvpn has it's advantages. you can do things with it that wireguard is too simple to do. can a wireguard server push dns servers? that doesn't matter to home users, but in a corporate setting that matters.