Security Expert Explains TPM 2. 0 & Secure Boot - Ask A PC Expert
video description
Date: 2022-03-15
Related videos
Comments and reviews: 10
Alexander
Time for the Complete Removal of All Closed Source OS. With a True Free Market a Rockefeller Whelp (Gates) could never have Obfuscated the Amigo OS running true Multi Core On Motorola Chips Years before Microccrapt could even consider implementing faulty versions. Under Open Source, You Know Where the Doors are. NO EXCUSES. You are 100% Secure, or you are Zero % Secure. Closed Source OS is a Black Box and Exploitable By Design. Secure Boot Makes Sure They have Full Access to Complete Control of Your Information, and they can modify any and all Data on your PC. If you are that Puerile to allow such idiocy into your Personal Life. TPM 2. 0 The Perfect Back Door into Everyone's Bank Account, Because Bill Gates is a Great Guy, who You Will be required to Trust Implicitly with Every Aspect of Your Life. No Vaccine I. D.? Sorry. Bank Account Now $0. 00, and Full Hard Drive Data Wipe Upon Reboot. All Personal Data was Transferred to Microsoft for Proprietary Use. Thank You Dave. Have a Nice Day!
reply
Time for the Complete Removal of All Closed Source OS. With a True Free Market a Rockefeller Whelp (Gates) could never have Obfuscated the Amigo OS running true Multi Core On Motorola Chips Years before Microccrapt could even consider implementing faulty versions. Under Open Source, You Know Where the Doors are. NO EXCUSES. You are 100% Secure, or you are Zero % Secure. Closed Source OS is a Black Box and Exploitable By Design. Secure Boot Makes Sure They have Full Access to Complete Control of Your Information, and they can modify any and all Data on your PC. If you are that Puerile to allow such idiocy into your Personal Life. TPM 2. 0 The Perfect Back Door into Everyone's Bank Account, Because Bill Gates is a Great Guy, who You Will be required to Trust Implicitly with Every Aspect of Your Life. No Vaccine I. D.? Sorry. Bank Account Now $0. 00, and Full Hard Drive Data Wipe Upon Reboot. All Personal Data was Transferred to Microsoft for Proprietary Use. Thank You Dave. Have a Nice Day!
reply
FuelrIce
Love the interview, nice to hear from a security expert just what these technologies actually are; however, I will need to correct him on one point. Windows 10 -did- in fact ship with the mandatory update feature, at least on Windows 10 Home. You can -snooze- or delay the updates -- for awhile -- but you cannot turn them off entirely without third-party software, and eventually Windows will stop letting you snooze the update and just install it without user input or consent. I upgraded from Windows 7 during the free-digital-upgrade period, and this extremely annoying -feature- was very much present on the system. It was also present on my daughter's Windows 10 Home install, 3 years later from physical install media. It is still present on both, as it cannot be turned off on the Home edition. So. yeah, on that -one- point alone, I'll have to disagree with our esteemed expert. For the rest: Thanks for the new info, I do try to learn something new every day!
reply
Love the interview, nice to hear from a security expert just what these technologies actually are; however, I will need to correct him on one point. Windows 10 -did- in fact ship with the mandatory update feature, at least on Windows 10 Home. You can -snooze- or delay the updates -- for awhile -- but you cannot turn them off entirely without third-party software, and eventually Windows will stop letting you snooze the update and just install it without user input or consent. I upgraded from Windows 7 during the free-digital-upgrade period, and this extremely annoying -feature- was very much present on the system. It was also present on my daughter's Windows 10 Home install, 3 years later from physical install media. It is still present on both, as it cannot be turned off on the Home edition. So. yeah, on that -one- point alone, I'll have to disagree with our esteemed expert. For the rest: Thanks for the new info, I do try to learn something new every day!
reply
Anthony
Ok here is the question that the real people want to know TPM. I went to turn on my TPM on my motherboard. -Warning turning this feature on can not be reversible and will encrypt everything on you're hard drives-. Sounds fine. Now I have replaced motherboards on my computer at least 4 times for power failures or faulty water cooler to new hardware like graphics cards. This will mean all my backups on TPM including information will never be abled to be recovered due to the fact it is locked to the old Bios board under it's TPM encryption. in short term you will be Fecked. FACT. I do not know many real people who could afford to loss everything. This is the only reason I do not trust Microsoft windows 11. Why do you not give that choice to the user on install not forced an open door for users & businesses to loose everything on there data. Remember encrypted to TPM.
reply
Ok here is the question that the real people want to know TPM. I went to turn on my TPM on my motherboard. -Warning turning this feature on can not be reversible and will encrypt everything on you're hard drives-. Sounds fine. Now I have replaced motherboards on my computer at least 4 times for power failures or faulty water cooler to new hardware like graphics cards. This will mean all my backups on TPM including information will never be abled to be recovered due to the fact it is locked to the old Bios board under it's TPM encryption. in short term you will be Fecked. FACT. I do not know many real people who could afford to loss everything. This is the only reason I do not trust Microsoft windows 11. Why do you not give that choice to the user on install not forced an open door for users & businesses to loose everything on there data. Remember encrypted to TPM.
reply
Jeannette
I want to borrow you for a day. lol - Love the frames win games. dying here. I have a super old (2009) Gateway laptop - not valid for win11 - I wouldn't dare anyways with 3 GB ram and minimal upgrade availability without buying a new board. I installed Linux Mint. It -SUGGESTED- that I use secure boot - so I did by adding a PIN requirement at startup. Now - I want to install Anbox and 2 module requirements are holding me up because of secure boot. Is there a way I can bypass this without it becoming a task that I dread later. I read somewhere about signing my own digital cert to enable the modules for i installation - this wouldn't leave me unprotected and i would get my Anbox so I can prove that in the mobile - pay- to- win app-world, bots win in those apps that are cleverly disguised as games. ;D
reply
I want to borrow you for a day. lol - Love the frames win games. dying here. I have a super old (2009) Gateway laptop - not valid for win11 - I wouldn't dare anyways with 3 GB ram and minimal upgrade availability without buying a new board. I installed Linux Mint. It -SUGGESTED- that I use secure boot - so I did by adding a PIN requirement at startup. Now - I want to install Anbox and 2 module requirements are holding me up because of secure boot. Is there a way I can bypass this without it becoming a task that I dread later. I read somewhere about signing my own digital cert to enable the modules for i installation - this wouldn't leave me unprotected and i would get my Anbox so I can prove that in the mobile - pay- to- win app-world, bots win in those apps that are cleverly disguised as games. ;D
reply
mrdali67
what if you actually have a 6-7 year old Intel based PC without one of those tpm slots. is there alternative solutions? And will eg an Asus modul be compatible with eg a Gigabyte MB (are they using some sort of standard pin layout or is it totally wild west how each brand implement it? There seem to be countless advertices of these modules on E-bay, Ali and other more or less dodgy online shops, but I was looking for an msi, and they have 2 different modules shown on their website dependent on what system you are on, but none of them are to be found in stock anywhere. Is those things also hit by the global lack of chip availability? those little chips is hardly on the scale of a cpu?
reply
what if you actually have a 6-7 year old Intel based PC without one of those tpm slots. is there alternative solutions? And will eg an Asus modul be compatible with eg a Gigabyte MB (are they using some sort of standard pin layout or is it totally wild west how each brand implement it? There seem to be countless advertices of these modules on E-bay, Ali and other more or less dodgy online shops, but I was looking for an msi, and they have 2 different modules shown on their website dependent on what system you are on, but none of them are to be found in stock anywhere. Is those things also hit by the global lack of chip availability? those little chips is hardly on the scale of a cpu?
reply
Dougie
Another useful video, I don't think I have seen so many videos regarding tpm and secure boot as I have ever seen before, all very helpful and usefull but clearly another massive mistake by microsoft, so many folk out there won't have a clue how to upgrade and enable uefi, tpm, secure boot. My advice to anybody considering Windows 11 would be if you are using Windows 10 and are happy with Windows 10, don't waste your time with windows 11, it's clearly an effort by Microsoft to generate revenue and convince folk to buy new hardware.
reply
Another useful video, I don't think I have seen so many videos regarding tpm and secure boot as I have ever seen before, all very helpful and usefull but clearly another massive mistake by microsoft, so many folk out there won't have a clue how to upgrade and enable uefi, tpm, secure boot. My advice to anybody considering Windows 11 would be if you are using Windows 10 and are happy with Windows 10, don't waste your time with windows 11, it's clearly an effort by Microsoft to generate revenue and convince folk to buy new hardware.
reply
James
Notice the guest keeps hinting or doesn't want to admit that TPM isn't full proof. Nobody ever addresses that the weak point of a TPM system is the interface between the OS and TPM. Given Microsoft's history of making buggy software, there is sure to have plenty of security flaws if not built in back doors to anything trying to use TPM. We trusted Microsoft in the past, and they gave us Wana Cry by way of a back door in Windows!
reply
Notice the guest keeps hinting or doesn't want to admit that TPM isn't full proof. Nobody ever addresses that the weak point of a TPM system is the interface between the OS and TPM. Given Microsoft's history of making buggy software, there is sure to have plenty of security flaws if not built in back doors to anything trying to use TPM. We trusted Microsoft in the past, and they gave us Wana Cry by way of a back door in Windows!
reply
Tony
Well, he was completely wrong. Its out, TPM2 is there to stay. Previous OS's like windows 10 is still in support so that makes his argument completely void as far as older devices. Also if someone just -built there 3k gaming rig- just now and they can't install windows 11 then they either bought something garbage or they got ripped off. All new motherboards comes with the security required to install windows 11
reply
Well, he was completely wrong. Its out, TPM2 is there to stay. Previous OS's like windows 10 is still in support so that makes his argument completely void as far as older devices. Also if someone just -built there 3k gaming rig- just now and they can't install windows 11 then they either bought something garbage or they got ripped off. All new motherboards comes with the security required to install windows 11
reply
Suzanne
Its basically Windows 10 plus TPM. just wondering where I can load this into my system where I can make ready for Windows 11. got an HP box using ADM with Windows 10. hate that. gotta get my intel system repaired. sighs water cooling pump died. and where can I set up Secure Boot? i will not try Windows 11 for several years. until better tested and used.
reply
Its basically Windows 10 plus TPM. just wondering where I can load this into my system where I can make ready for Windows 11. got an HP box using ADM with Windows 10. hate that. gotta get my intel system repaired. sighs water cooling pump died. and where can I set up Secure Boot? i will not try Windows 11 for several years. until better tested and used.
reply
Thomas
Why don't you just edit TPM and UEFI out of your Windows 11 installer files? It's easier and takes about 10 minutes. Windows 11 wasn't compatible with both of my CPUs. I edited those aspects out of my my appraisers. dll file and it installed and works like a champ. In fact, it updated both of my CPUs in the windows update the next day after I upgraded.
reply
Why don't you just edit TPM and UEFI out of your Windows 11 installer files? It's easier and takes about 10 minutes. Windows 11 wasn't compatible with both of my CPUs. I edited those aspects out of my my appraisers. dll file and it installed and works like a champ. In fact, it updated both of my CPUs in the windows update the next day after I upgraded.
reply
Add a review, comment
Other channel videos
1:44:32