Hardening Windows 10 with zero-day exploit mitigations | Hacker News Reader

Hardening Windows 10 with zero-day exploit mitigations

blogs.technet.microsoft.com

87 pointsdsr1220 comments

Never mind hardening windows, how about stopping Windows update behaving like some sort of particularly malicious malware by forcing me to rebuild my machines at random after an update? AU forced one machine to be fully reinstalled, last week's update rendered another machine inoperable with admin access denied on windows system programs (mmc etc.) followed by boot device error (disc was fine) with no restore or roll-back available, so had to rebuild that one too. Getting very tempted to set windows update addresses to point to Host.

I hate how Windows 10 silently installs updates and then rolls them back every time I boot it up (and then forces another reboot)... all because I have a Linux bootloader installed and C: isnt the active partition.

Fuck you Microsoft. This is 2017. You've had 25+ years to perfect dual booting.

I wouldn't mind if it <i>was</i> one if my dual boot machines, that might almost be unstable, but both these failures were on single OS laptops.

You're making it sound as if Microsoft would want dual-booting to work. Hasn't the Surface Pro been pretty bad for using Linux on it so far, compared to other notebooks?

Ahahhhh! That is why every single Windows 7 update since last October has failed on my machine with two installation trials and endless rollbacks! That explains a lot.

This may be kind of off-topic, but does anybody happen to have a link to some explanation of how to fix this without annoying things like unplugging internal drives or fiddling around with potentially dangerous disk tools? I've looked on official Microsoft community websites but they only give fairly useless advice like switching off all antivirus programs and reinstalling the whole OS from scratch.

I haven't seen any serious issues on any machines.. In all the csaes there were issues they were automatically rolled back by windows itself..

Have you disabled System restore or done anything like that?

Instead of discussing the merit of these exploit mitigations this has turned into a complaint forum about Windows update. Mods?

How does this Windows Defender ATP relate to EMET?

Still prefer to run Win10 with Surfright/Sophos HitmanPro Alert.

There's still one major, consistent source of unwanted access and software that hasn't been addressed.

Reply on news.ycombinator.com