If anything, it should be optional for personal use, and mandatory for enterprise. Not that they would come to this conclusion either way, granted that half of the workforce is busy putting ads into the start menu, and the other half are probably not doing any work whatsoever
If you don’t have TPM how can they do browser attestation and ensure you have no ad blocking software?
Rats. Leaving TPM off in the BIOS is how I’ve been avoiding it nagging me to upgrade from 10.
I found it was pretty easy to get rid of the nag. I installed a different OS. For my development stuff that needs windows and I can’t run with wine (very few tools) - I have a VM running a windows version with 0 Internet access. Fuck that company sideways.
I’ve been curious about people who have been disabling the TPM. Where are you storing your disk encryption keys?
You can run bitlocker without TPM using a usb flash drive instead. I think you can also store the key in your mind as a password.
Yes, but when they’re on USB the keys are much more accessible. You can just plug it in and dump them.
If you’re only using a password, the keys are stored in an unencrypted part of the drive, which can again easily be dumped.
Once you’ve dumped the keys, you can brute-force the passphrase offline.
I’m not using disk encryption. It’s a desktop and if it’s every stolen I’ve got bigger problems.
Also, I presume that disk encryption makes it so you can’t just pop the drive in an adapter and pull stuff off it, which I sometimes need to do with old, retired drives.veracrypt is a thing, encrypting drives does not need TPM.
Just boot using the good old Master Boot Record for a clean solution (The Veracrypt documentation gives a good overview). Veracrypt works with EFI too, but the EFI partition itself cannot be encrypted. You can even create a hidden OS, if you are forced to give out your password, theres still plausible deniability.
It’s been quite a while, but on an older system years ago I recall it slightly nagging me about how the computer wasn’t W11-enabled.
Btw. release here.
Thank you
I tried to find a link a couple weeks ago and I came up short
Me too. Guess it wasn’t there then.
deleted by creator
Didn’t help that beta tests didn’t require it either
deleted by creator
Oh no, they accommodated our desires and removed the requirement that we hated. The bastards.
They didn’t though, unless you want to run the IoT (internet of things) version, which is for integrated devices. That’s why storage size matters.
This isn’t my largest complaint with W11, and I don’t think it’s many other’s either. I don’t run windows though, so I don’t really care.
It already wasn’t a requirement when flashing the iso with Rufus.