|
I stay up to date on cruft lore. He uses a Jitterbug.
|
![]() |
|
![]()
|
# ? May 14, 2024 02:05 |
|
I have it on my smartphone, I just have my Chromebook handy more frequently than I have my smartphone handy. The point is, Microsoft Authenticator doesn't run on Microsoft Windows. It seems like $EMPLOYER might care that I installed the Bonzai Buddy launcher on my phone, which I gave permission to draw over any app, and subsequently can change the map everybody ignores to show wherever I happen to be at the time, so that Bonzai HQ can evilproxy attack my account. But, no, in this one instance, I am not only allowed to run a super important work app on my personal device, but I am required to. cruft fucked around with this message at 21:31 on Mar 22, 2024 |
![]() |
|
slidebite posted:Oh, I'll have to do that. Isn't the TPM hardware needed for encryption, like Bitlocker?
|
![]() |
|
Thankfully since Windows is primarily only good for gaming these days, it should be fine. you likely don’t need to encrypt your Steam directory.
|
![]() |
|
Last Chance posted:Thankfully since Windows is primarily only good for gaming these days, it should be fine. you likely don’t need to encrypt your Steam directory. Speak for yourself.
|
![]() |
|
Dick Trauma posted:Isn't the TPM hardware needed for encryption, like Bitlocker? Sorta. If you use bitlocker for full-disk encryption of the system drive, TPM key storage is the most convenient method. (But you can also not use it and just type a password every time you boot the PC.) If you only use Bitlocker for removable drives, it's not needed at all. TPM is also used for Windows Hello, for logging in with PIN or fingerprint. (But in this case no TPM has no reduction in user functionality, just less security against local attack. Not really a big deal for a desktop in your house.)
|
![]() |
|
cruft posted:I have it on my smartphone, I just have my Chromebook handy more frequently than I have my smartphone handy. Employer might in fact care, which is why they let you install any cool poo poo on your phone
|
![]() |
|
Dick Trauma posted:This morning I saw a popup about Dynamic Lighting being available and it took me to a settings panel I hadn't seen before that allowed me to fiddle with the LED logo on my mouse. Same but for a mouse that doesn't have customisable lights. Good job Microsoft!
|
![]() |
|
cruft posted:
lol that's so terrible and worthless, A++ at making this incredibly stupid system. E: I should try reading to the end of the page next time, lol.
|
![]() |
|
Harik posted:lol that's so terrible and worthless, A++ at making this incredibly stupid system. Well, it *is* an improvement over reusable passwords. It's just a two steps forward, one step back sort of thing.
|
![]() |
|
cruft posted:There is no explanation of why the map is there, so most people ignore it, which is why a type of proxy attack called "evilproxy" is making big waves right now. Nobody thinks anything of it if the map shows Indonesia, because it was never explained why the map mattered. Also, the GeoIP or whatever of your company's web proxy is usually in some big city that may or may not be anywhere near where you are located. My company's Citrix VDI terminates in India or France.
|
![]() |
|
cruft posted:Well, it *is* an improvement over reusable passwords. It's just a two steps forward, one step back sort of thing. We have to use this poo poo at work and generally it'll just let me log in without even asking for a new token. Like I just click "login" and it goes right through, for weeks at a time. E: there's also an option to send a code by SMS if the cloud poo poo isn't working for whatever reason mobby_6kl fucked around with this message at 11:04 on Mar 24, 2024 |
![]() |
|
mobby_6kl posted:I'm not so sure. so it's a nuisance to use, not a sane standard and a "or has $20 to slip the teen at the kiosk" authentication? absolutely perfect. nothing to improve, security has reached its peak. E: Theoretically it has the token on your machine that's tied with your IP and doesn't just let you login from anywhere in the world. Theoretically. Hopefully. Harik fucked around with this message at 17:31 on Mar 24, 2024 |
![]() |
Harik posted:so it's a nuisance to use, not a sane standard and a "or has $20 to slip the teen at the kiosk" authentication? absolutely perfect. nothing to improve, security has reached its peak. You can absolutely disable SMS authentication in MS Authenticator, and in fact you need to go out of your way to add it as things are. The option to add it is hidden behind a "show additional options" button. I believe that business accounts can also add policies about what kinds of authentication they accept, and possibly limit your access to various things depending on what kind of authentication you used. They can also make your sign-ins last longer on certain devices or from certain networks/IP addresses, so you don't need to verify as often when (for example) you're using a managed device on the company network.
|
|
![]() |
|
nielsm posted:You can absolutely disable SMS authentication in MS Authenticator, and in fact you need to go out of your way to add it as things are. The option to add it is hidden behind a "show additional options" button. Yeah, that's my experience. Pretty sure we have SMS verification disabled, so if you don't have your phone with Microsoft Autheticator on it you're pretty much locked out if you do need to log in. At the office and the home machines I use for work, it retains the authentication for a long time and I can just log in as normal.
|
![]() |
|
There's a huge amount of control that is granted through Conditional Access which anybody using Entra (Microsoft 365) seriously should have the licenses for and be implementing. For example you can decide that you will never see an MFA prompt if you're using a managed device that meets all the compliance rules, has a TPM chip in it, and is using biometrics to authenticate you to it, or choose to only display an MFA prompt on those devices in certain applications like ones related to finance etc. It's always a balancing act but throwing MFA prompts multiple times a day for someone doing normal office tasks leads to fatigue and devalues it as a security method, so there's lots of initiatives going on that try to be more selective about when you're going to be asked to auth.
|
![]() |
|
Thanks Ants posted:There's a huge amount of control that is granted through Conditional Access which anybody using Entra (Microsoft 365) seriously should have the licenses for and be implementing. For example you can decide that you will never see an MFA prompt if you're using a managed device that meets all the compliance rules, has a TPM chip in it, and is using biometrics to authenticate you to it, or choose to only display an MFA prompt on those devices in certain applications like ones related to finance etc. My bank asks me to authorize logging in every. Single. Time. It's a bit annoying, but I guess if it helps keep people out of my account I'm willing to put up with it.
|
![]() |
|
CaptainSarcastic posted:Yeah, that's my experience. Pretty sure we have SMS verification disabled, so if you don't have your phone with Microsoft Autheticator on it you're pretty much locked out if you do need to log in. At the office and the home machines I use for work, it retains the authentication for a long time and I can just log in as normal. If you follow the phone transfer process, it offers to wipe your old phone. This will lock you out of your account if you allow it, since the MS Auth app on the new phone is stuck in a useless state until you re-enroll every account again. ~Coxy posted:I've installed Explorer Patcher, but I can't get Process Explorer to show up in the systray. You can actually drag-and-drop icons in the systray overflow to the systray proper. https://github.com/valinet/ExplorerPatcher/issues/1157
|
![]() |
|
CaptainSarcastic posted:My bank asks me to authorize logging in every. Single. Time. It's a bit annoying, but I guess if it helps keep people out of my account I'm willing to put up with it. i just wish my credit union had proper totp instead of sms 2FA
|
![]() |
|
susan b buffering posted:i just wish my credit union had proper totp instead of sms 2FA I suspect that a lot of credit unions are using the same third party vendor for their apps. Over the last 10 years I’ve been a member of three different credit unions due to various moves, and they all look and behave exactly the same right down to the lack of proper totp support.
|
![]() |
|
chocolateTHUNDER posted:I suspect that a lot of credit unions are using the same third party vendor for their apps. Over the last 10 years I’ve been a member of three different credit unions due to various moves, and they all look and behave exactly the same right down to the lack of proper totp support. They are. Jack Henry and Associates, iirc.
|
![]() |
|
I have an odd issue with a friends' laptop, running latest Windows 11, where the taskbar doesn't properly start and locks up instead. The desktop itself is functional, as in the context menu shows and is functional, as well regular Explorer windows show up when I run the process manually. Eventually I noticed that ShellExperienceHost.exe doesn't show up. And the Task Manager doesn't list any processes in the Details tab, and when killing processes in the other Processes tab, it acts like they didn't get killed, and eventually it locks up too. I blanked disabled anything non-Microsoft in any autostart locations known to man, used tools like ShellExView and such to disable anything that hooks into Explorer, etc. Even all these Microsoft Forum useless standard responses like sfc /scannow and all the dism stuff. It still doesn't budge. I can't start the Settings app either to trigger anything related to resetting the PC. Anyone ever had anything like that and found a solution? Meanwhile I told him to prep an USB and install over it like in the olden times, in the hopes it'll fix it without doing a proper fresh install that needs to reinstall all applications.
|
![]() |
|
Combat Pretzel posted:Eventually I noticed that ShellExperienceHost.exe doesn't show up. And the Task Manager doesn't list any processes in the Details tab, and when killing processes in the other Processes tab, it acts like they didn't get killed, and eventually it locks up too. I had this exact thing happen in Windows 10. For me it was preceeded by a sort of creeping dysfunction of all other UWP apps. At the end the only UWP apps that worked were settings and the MS Store -- which would open but every app it tried to update errored out. And no, I didn't find a solution. "In-place upgrade", the now official term for over-the-top install, is easily the best option. (At the time I used the Reset My PC which semi-worked: my taskbar worked again, but MS Store was totally broken. ![]()
|
![]() |
|
Didn't there use to be a Refresh option (not Reset) in the settings app, that did trigger an in-place upgrade? --edit: Then again, that settings app refused to start, too, so whatever lol. --edit: Also, it's a goddamn travesty in which ways they hosed up Task Manager. I mean, it's easily "fixed" by downloading Process Explorer, but still. It used to be unkillable, now it's like a piece of flash paper in hell. Combat Pretzel fucked around with this message at 22:23 on Mar 25, 2024 |
![]() |
|
Windows Explorer just took literally 4-5 seconds to even indicate it was launching, let alone become actionable. How incredibly awful.
|
![]() |
|
Serotoning posted:Windows Explorer just took literally 4-5 seconds to even indicate it was launching, let alone become actionable. How incredibly awful. Why are you even trying to browse the file system? Just tell Copilot which file you want to view!
|
![]() |
|
Serotoning posted:Windows Explorer just took literally 4-5 seconds to even indicate it was launching, let alone become actionable. How incredibly awful. That's started happening to me the first time I open it after restarting. It may happen other times, but that's when I've really noticed it. It's pretty pathetic. All my drives are SSDs, and I have no optical drive.
|
![]() |
|
If there's a network drive in pinned/favorites section on the left bar of Explorer, that will make Explorer perform terribly whenever that network drive is unavailable or needs to be initially connected; because loading that bar's contents blocks the entire window until its complete. Every time I've seen explorer start to crawl it's because a network share found its way into that list.
|
![]() |
|
Onedrive hijacks print screen and alt+print screen shortcuts and I can't do anything about it? There's nothing about shortcuts in its settings... And save screenshots to onedrive is off already. Also why do I have to log into all the MS products again every 2-4 weeks? I'm logged into their thing on Windows so why can't they just use that information? Some services require me to re-enter my password and 2fa code, while others just want me to click on log-in. Madness
|
![]() |
|
Sininu posted:Onedrive hijacks print screen and alt+print screen shortcuts and I can't do anything about it? There's nothing about shortcuts in its settings... And save screenshots to onedrive is off already. What do you mean hijacks? Like you press print screen and your one drive folder popsup? In windows 11 it should default to the sniping tool, which can save images to your one drive. Sininu posted:Also why do I have to log into all the MS products again every 2-4 weeks? I'm logged into their thing on Windows so why can't they just use that information? Some services require me to re-enter my password and 2fa code, while others just want me to click on log-in. Madness Yeah, nothing new here. Its never worked that seamlessly.
|
![]() |
|
Rawrbomb posted:What do you mean hijacks? Like you press print screen and your one drive folder popsup? In windows 11 it should default to the sniping tool, which can save images to your one drive. I've been always just using Dropbox, but I'm trying out Onedrive for more free storage.
|
![]() |
|
Sininu posted:If I set Onedrive to start with Windows ShareX can't register the hotkeys for itself because Onedrive took them already. If you go check in Settings > Accessibility > Use the Print screen key to Open Screen Capture Is that on or off? If its on try toggling off and rebooting and see if share X will work? I've never heard of ShareX, but I know tons of people using various different screen capture tools on W11 without an issue. Half my team uses a stupidly old program we have a license for that windows 7 wasn't even a twinkle in its eyes, and its still working fine.
|
![]() |
|
Rawrbomb posted:If you go check in Settings > Accessibility > Use the Print screen key to Open Screen Capture It's off already. Idk if I did it or it defaults to off.
|
![]() |
Sininu posted:If I set Onedrive to start with Windows ShareX can't register the hotkeys for itself because Onedrive took them already. I can't remember exactly what I did to fix this, but as far as I remember, it involved activating OneDrive via that hotkey it registers, and then going through its feature presentation, and at the end rejecting or disabling it. Then it stopped registering that hotkey afterwards.
|
|
![]() |
|
nielsm posted:I can't remember exactly what I did to fix this, but as far as I remember, it involved activating OneDrive via that hotkey it registers, and then going through its feature presentation, and at the end rejecting or disabling it. Then it stopped registering that hotkey afterwards. Thank you nielsm! You're always so helpful c:
|
![]() |
|
Found out:DerekSmartymans posted:I've got the weirdest problem with some (not all) of my Windows 11 programs. The text and icons, whether on buttons or in text fields, get "blurry" or "smeared out" a couple of seconds after opening up correctly. This doesn't happen with things like word processing or web pages/web text, butt mainly seems to show up in game launchers such as Steam or Epic Games launchers (and the new Eve Online launcher), as well as the new default Outlook. Usually you can move the mouse over the smeared text/icon and it will clear up to "readable" right away, but may fade back to blurry after a second or two. I recorded a short video with ShareX of my Outlook getting wonky and it shows the transitions quite well. This is Windows 11, all current updates, but has been happening for a while now and doesn't seem to be clearing up on its own! It was f’d up anti-aliasing settings in the nvidia control panel.
|
![]() |
|
What's that bad man doing to my OS?
|
![]() |
|
Another day, another ad![]() I've disabled Copilot every way I can find and still periodically get this. I googled it and found a series of MS community posts where the support dorks recommended looking for an option to disable in the Settings menu. People are saying they disabled copilot with group policy and still get the ads. The support dorks do not respond further.
|
![]() |
|
This must be the US vs EU thing. I'm seeing none of that and I did nothing but click no to everything MS asked me about.
|
![]() |
|
![]()
|
# ? May 14, 2024 02:05 |
|
Wanna trade countries? ;_;
|
![]() |