• In December, an investigation by Tom’s Hardware found that Recall frequently captured sensitive information in its screenshots, including credit card numbers and Social Security numbers — even though its “filter sensitive information” setting was supposed to prevent that from happening.
  • arakhis_@feddit.org
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    7
    ·
    13 hours ago

    You for sure feels so good being this helpful. But TIN really don’t understand SHT if you use so many Technical terms(TT)

    But there’s a solution in brackets I just presented, that’s commonly accepted in academia if you still want to use TT like that

    • Septimaeus@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      2 hours ago

      Forgive me for not explaining better. Here are the terms potentially needing explanation.

      • Provisioning in this case is initial system setup, the kind of stuff you would do manually after a fresh install, but usually implies a regimented and repeatable process.
      • Virtual Machine (VM) snapshots are like a save state in a game, and are often used to reset a virtual machine to a particular known-working condition.
      • Preboot Execution Environment (PXE, aka ‘network boot’) is a network adapter feature that lets you boot a physical machine from a hosted network image rather than the usual installation on locally attached storage. It’s probably tucked away in your BIOS settings, but many computers have the feature since it’s a common requirement in commercial deployments. As with the VM snapshot described above, a PXE image is typically a known-working state that resets on each boot.
      • Non-virtualized means not using hardware virtualization, and I meant specifically not running inside a virtual machine.
      • Local-only means without a network or just not booting from a network-hosted image.
      • Telemetry refers to the data harvesting apparatus. Most software has it. Windows has a lot. Telemetry isn’t necessarily bad but it is easily abused by data-hungry corporations like MS, so disabling it is a precaution.
      • MS = Microsoft
      • OSS = Open Source Software
      • Group policies are administrative settings in Windows that control standards (for stuff like security, power management, licensing, software and file system access, etc.) for user groups on a machine or network. Most users stick with the defaults but you can edit these yourself for a greater degree of control.
      • Docker lets you run software inside “containers” to isolate them from the rest of the environment, exposing only what they need to run, and Compose is a related tool for defining one or more of these containers, the resources they need, how they interact, etc. To my knowledge the only equivalent for Windows to date is Wine and its successors like Proton.

      Many of these concepts are IT-related, as are the use-cases I had in mind, but the software is simple to use if you pick one of the premade playbooks. (The AtlasOS playbook is popular among gamers, for example.)

      Edit: added docker