Nope, skill issue. Just choose no password at all and set one later (through [Ctrl]+[Alt]+[Del] for example). It only asks you to set them upon account creation if you choose a password.
at least for windows i just set them all to the same thing, not worth my time filling them out, not secure but i dont keep anything on my computer that need to be secured, especially with how easy it is to break it, and im not setting up bitlocker and AD credentials for a home network lol.
Edit: although i will probably share this with my companies SOC as they are always look for attack vectors and how to block them
Microsoft: “We value your privacy” Also Microsoft: “Not only is forcing windows recall (aka spyware) on us, but also stores Security Questions in plain text”
Two more things that would be interesting to try: * What happens if there are less than 3 questions in the list? Normally Windows never lets you select less, but can you do 2, 1, or even 0 questions? * What if you use crazy UTF-16 text for the _answers_? Obviously it'll be impossible to type, but can the validation algorithm handle that correctly?
Microsoft Edge's password manager also stores all its passwords in plaintext (well, not really, they are encrpyted but with a key that's in the same directory as the database... whoops).
@@mjdxp5688 Chromium does the same. Overall storing data safely is not possible on Windows because of bad app system / permission system (unlike Android / iOS where apps cannot steal passwords without cracked / fully rooted phone)
@@tmc249 That's why you should never save any password in any browser, even if its Brave or Librewolf or whatever. The best password manager is your own head. :D
@@starleaf-lunathe key is encrypted with your windows user's password. So an offline disk dump is useless if you don't know the password. (In theory at least, like enderman said, windows password hashes are a joke)
@@tmc249TLDR: yes, always has been, google denied it as a security issue but recently added an option to encrypt them with a master password. Not sure if edge already has this or not, it's usually a few versions behind.
i feel like bad actors could use this to get personal information like what your real name is also what happens if you set only 2 questions or a question that has no question prompt but an answer
So thats another reason to skip adding a password during oobe and setting it afterwards, I never liked security questions. I wish there was also an option to disable the password hint, but you can write random gibberish to that at least.
@@ivancomp_inside Nope, there's not, at least during the setup phase I can't tell if it could be disabled afterwards but knowing Microsoft it's unlikely
The problem is that most software can't be installed without admin. Linux solves that problem using package archives (.deb, .rpm) and trusted package repositories
That's why I on OOBE I make account without password, and add that then, on desktop. But I'm considering use cmd/powershell instead of Settings app, so I can skip creating password hint as well.
Another dumb thing: forcing you to create less secure PIN when you add your fingerprint. Thank Microsoft I can include letters and symbols to PIN, effectively turning that into a password.
Its even worse. If you're using EFS (Encrypting file system), and have security questions enabled, the questions can decrypt the EFS private key, and gain access to encrypted files. This renders EFS completely useless. All an attacker needs to do, is extract the security question answers from registry, and ask windows to reset the password (in winlogon), and boom, suddenly they gain access to "encrypted" files. (btw, I tried this in a Windows 10 VM 21h1 but it might still work on newer versions).
Isn't this why Microsoft recommends you use a Microsoft account? You officially aren't really supposed to be able to make a local account on Windows 11 Home anyway... Wouldn't be surprised to see server and pro editions following suit.
Not saying this isn't bad though, honestly shocking how they don't encrypt this
They HAD option to make local account on Windows 10. And they ALSO required to make security questions. And they, most likely, also stored in plain text.
you can also use a windows installer to gain access to trustedinstaller perms, so assuming the computer can boot into the installer, you can take whatever from wherever you want
So I don't think this is as big a deal as you might think.
One scenario is where you have a local admin account on the system (which you need to access SAM anyway). In this case, you can just reset a user's password directly and take control of their account. Security questions don't matter here.
Another scenario is where you don't have access and try to guess the security question answers. In this case you can't see the values in the registry so it doesn't matter how they are stored. If you can get access that is a separate problem and how they are stored doesn't matter.
Last scenario is if you pull the hard drive or boot from an alternate OS from a CD or USB stick. In this case if the hard drive is unencrypted you can definitely get access which is a problem. Of course you also have access to all the user's data anyway that they haven't encrypted so that is a concern as well. BUT if they've used Bitlocker then you still can't view the security questions since they are encrypted with the rest of the drive, unless I'm mistaken about that. AFAIK Bitlocker should be enabled by default on new Windows installs now.
Should the security answers be better protected? Definitely. Only other thing I have to say is there could be some dumb reason they can't (such as allowing partial string matches).
The reason why you couldn't see it at 3:45 is cause once you leave the textbox,it hides the eye button.if you want it back,you gotta remove the ENTIRE password and type it again. leaving even 1 character wont show it.
I haven't fooled around with security questions to know for sure. But maybe it's stored in plain text in order to be able to compare between the expected and given answer to pass even with small differences like punctuation?
Maybe MS decided to keep them unencrypted so they could do some level of fuzzy matching? Like if you typed "Tokyo" in OOBE but tried to reset with "tokyo". Or removing extra whitespace from answers or something like that
SAM is protected by System permission. If a hacker already has System might as well not have any passwords at all because you're already pwned regardless. As to why experts recommend not using security questions, its because it's easier tu guess especially if you know that person. But you can just write gibberish as the answers. And psst hey here's a secret..You can disable security questions in group policy.
AIs in code editors are so funny when you do strings, sometimes i get random things like "you will be rewarded with a free robux" or "THERE IS NO ESCAPE THERE IS NO ESCAPE THERE IS NO ESCAPE THERE IS NO ESCAPE THERE IS N" Aside from that, this remembers me of chromium storing password in plain text
@@mix3k818 oh my guy, you're massively mistaken about Russians being “fluent” in English. Russia is one of, if not THE lowest English proficient country out there. And this Russian guy is tryna showoff and be "better than everybody" type of sh. When in reality he's not. So annoying and disgusting.
@@mix3k818 Easy to speak, hard to remember. So, no. Russian could've become an inter lingua on Post-soviet space potentially, nowadays it's in the past mostly
I know English is already the language of the world and most Slavs including Russians are often fluent in it, but it makes me wonder if Interslavic will ever be a popular language.
I mean, I'm not sure this is a security hole. You need to be an administrator to perform this. You can already change anyone's password if you're an administrator. The only problem with not hashing the answers is that an administrator can read them - and your answers should probably not contain sensitive information. So while they don't increase security, I'm not sure that they decrease it at all.
@@MuhammadDaniyal-wk3hp Nonsense. If you lose your password just reset it. All you need is any usb drive with windows on it. You don't need security questions.
@@mrowlsss i have a friend who uses arch linux who thinks hes better than everyone for using the "superior" alternative i just use windows 10/11 for the convenience that it supports a ton of software that i use and that its pre installed most of the time
@@mrowlsss cuz doesnt matter if someone uses windows 11 while some "tech expert" says that theres a ton of security problems. "OoOh JuSt UsE lInUx!" just let everyone use their computer smh
@@MinecraftGrassBlock cuz windows is bloat,spyware and unstable, i have had lots of expirence with windows for over 3 years and its really unstable compared to arch
@@MinecraftGrassBlock i litterly said expect kernel anticheat games, and just cuz some software dosent run dosent mean there arent alternatives + if there are no good ones u can use a virtual machine for those so i dont see the isue
When Windows 10 support stops working I will use directly Ubuntu or any good system for games and programming in Linux.
Windows 11 is shifty asf. Bad interface. Bad security. Stupid IRM obligatory (wich can be easily bypassed) Bad support. Simply a bad system in my opinion . I use Windows only for commodity of not using code almost all of the time using a system, but I think I will get really easy using Linux. And that would help in a future work
Simple, windows is bad (especially win11) because of spyware, adware, and bloatware that comes with it by microsoft The alternatives, well you can use linux
@@lynixfox6009 I think only people who need special tools that only work on MacOS or Windows can't use Linux as a daily driver. I think pretty much anyone could use something like ChromeOS and then escalate from there to something more "advanced" like Linux Mint and go from there.
just setup the oobe like normal but in the password field don’t field anything just press to skip the password field because on windows you can go to control panel and create a password it will not ask for security questions
You can only skip these questions if you use command prompt to create the user account (or I think you can also use computer management in Pro editions) and then delete the previous one which has the security questions Edit: or you can just leave the password empty during the OOBE ;)
Remember guys, password in the system without any encryption is the password to prevent your toddler accessing the PC or to prevent your random classmates from googling black-orange YouTube when you don’t look at the laptop
These experiments are always great lol, just like bashing MS outright. They really seem to be a security vulnerability in themselves, but oh well. Anyway, hope you have fun with your other projects as well
jokes on windows back when it tried to make me use security questions i skipped making a password and made a password/passcode instead through control panel so it wouldnt give me the option to use security questions
You can always use a Nokia 6303i Classic and watch your videos by encoding them in H264, making them 240x320 and 10fps at 3gp format. Trust me it is more fascinating than you think.
I didn't test it because I always set my password in a way which bypasses the security question screen, but I assume they store it in plain text to make the matching case insensitive, also allow double space or whatever... Not that I would call that a good idea and say that there aren't other ways to do that like e.g., Facebook handles the password validation (checks with a few iterations)
honestly these security questions are insanely stupid, like you can't even ask yourself a question that only you would know the answer to, you only get 5 or 6 very specific questions that make you have to make up stuff
heck, even if they just stored a hash or there were procedurally generated salts, people could figure out what hashing salts were used and then they could just brute force through a list of names or cities, so they gotta do better than that
Yet another case of "If you are admin, you can do admin things".
If you have the ability to read HKLM/SAM or HKLM/Security, then you must have already gained admin privileges, if so then why stop there? As admin you can just override any user's passwords, or just read/execute whatever files/programs you want, why bother with security questions?
Go on, try stealing other user's security problems with, lets say the builtin Guest account.
If you've got admin access to the system and wanted to change the password you could. You don't need to security questions to do that as you have system or admin powers. Seems kind of redundant to probe security question answers with a process that accesses the registry with admin privileges.
Should they store as plain text? Probably not... but would someone use this vector of attack when they already have access enough to do what they want? Not likely. Probably easier to scrape their system for browser sessions or something else.
The reason this is mega-mega bad: An attacker could use malware to get your security questions and their answers, and there's a decent chance some people will use the same security questions, and same answers, on different services. They can use that to gain access to those accounts.
@@mazellovvv because sometimes sites do log you out all the time, or some do it properly and invalidate the token when someone suddenly logs in with the same session token from across the fucking planet.
does it really matter when NTLM is already easy to crack? this also requires file/registry access. if someone has that level of access, I think there are more important things to worry about than the answers to the questions
hey dude, hi, two years ago I wrote a program to reset the password just through the registry, I was just thinking about how to decrypt it or, for example, make the user an administrator, maybe we should talk somewhere
You should report this to microsoft officially if you haven't. This is a major security flaw that could cause people's bank accounts (and other services) to get stolen if they use the same security questions on multiple services.
@@MuhammadDaniyal-wk3hp i'm not even gonna bother with you, here's an answer from artificial stupidity: Yes, storing security information in plaintext is a significant security flaw.
This is not a security flaw, you have to get all 3 security questions correct. Also someone would need to have your pc to answer them, which if someone had you would most likely be already signed in
@@Boxersteavee Fair point, but the average user that bothered to force a local account still wouldn't turn BitLocker on. Of course, all MS accounts force BitLocker on by default, but those don't have security questions so they're a different subject.
a normal user doesn't have access to sam, so this attack vector is very ineffective and targeted at a specific user. but storing the responses as a hash is worth it
What were those command prompts labeled "Select" instead of "Administrator"?
Would these questions be usable outside of a machine that you already have some elevated privilege on? Resetting the password wouldn't unlock any encrypted files, and you already have free access to everything. Would they be relevant to accessing the person's microsoft account if they had used a microsoft account login or is this just a separate mechanism only used in the case of a local only account?
Oh jeez, the art of war. Could certainly be useful I guess depending what you're doing, but it's also the classic self-help book for dominant jerks.
Ok, you should not use security questions, because someone else who knows this person, could be able answer them, so far so good, but that is true for ANY platform that offers that, has nothing to do with Windows.
But why are unencrypted questions and answers in a part of the registry, that are only accessible by an administrator, a security risk for Windows? I mean if you are an admin, you can get direct access to that person, you don't need the questions then.
While this is obviously problematic, you can also just boot into Windows PE and reset the admin password (easier as you don’t need to have access to another admin account on the machine).
Is this actually a problem tho? If you are on a system where you could read the security answers to reset the password, you could also replace the password hash itself on your own and it’d have the exact same effect, no?
@@Endermanch right, but if you use the security answers you still have to reset the password right? Or does windows let you log in with just the security answers without resetting the password at the same time?
4:37 how did you get it to just be toggles? I've seen that UI before but always thought it was just early W10. It looks so much easier to decline than clicking No then Next over and over. Is it a GDPR thing where they can't have it pre-ckecked so have it as options instead?
I was talking my friend through bypassing the microsoft account and windows somehow managed to boot past the OOBE with a user named defaultuser0 with no password. a reboot fixed it but wtf microsoft, can't even get your spyware right
Hello, what version of Windows 11 or what day and year is this edition because you can skip without the Internet to install the account locally, thank you
Im not stupid i know my password, why I am obligated to do this thing??? For real, it's like the "Your password is not strong enough" Yes i know that and its my problem! Btw, bro are you using a wood switch? Man whats is this sound?
Do more videos with voiceover please! It helps me focus on the content on screen, I don't have to take my eyes off the content to read the information being conveyed. That and I don't like the music you use.
It isn't any worse than a Google account, I have my Microsoft account since it was called a Microsoft Passport (to hell? 🤣) and Adobe Acrobat Pro required it for some stupid reason, maybe to activate it, I don't remember, it was almost 20 years ago.
This is not a security flaw, you have to get all 3 security questions correct. Also someone would need to have your pc to answer them, which if someone had you would most likely be already signed in. Also nobody uses them and microsoft is probably the best company, they have made , Xbox Hotmail, Windows
This is kinda fucked up, legit even a newer scriptkitty could break into this.. I know the .ISO is free but Pro costs $200 Canadian and paying that much just to get this easily hacked? I'm thinking of switching to Linux
You are so dumb................ The person needs to have your computer to answer them, if the person has your computer then you would probably already be signed in 🤣Stop hating microsoft
Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux
Even if it didn't store them in plaintext, "security" questions are still a source of insecurity. They are a big target for phishing attacks, especially on social media, where they offer these stupid games like "Find out your VIKING name! combine your oldest cousin's name with your mother's maiden name and your birth city" And people JUST KEEP ON FALLING FOR IT :(
2:20 Microsoft, in fact, gave up so hard they are killing NTLM entirely! Options to disable NTLM in a domain network were present some fifteen years ago already, but now they are realizing NTLM security is so bad they are phasing it out even for LOCAL accounts! They are experimenting with a "Local KDC" system in Windows 11, or, in other words - abandoned NTLM and just use Kerberos. Yes, for local authentication.
Can you go into the mechanics behind custom login processes? For example, SAASPASS allows you to literally have 2fa on your windows login. What does that look like on the backend? How does one set that up in the registry and in GPE? I'm curious about how that works!
@Enderman function RUSSIA(){ console.log('Going to make new channel!') name = "EndermanRU" username = "EndermanRUSSIAN" ytAPI.createChannel({ repo.SECRETS ENDERMANS_PHONE } + {name} + {username}) make ENDERMAN do RUSSIA();
Microsoft doesnt give a shit about the security of their own products anyways. No matter if its a UAC bypass with thread injection or a null pointer deref in the kernel, unless its actually being exploited they dont care. I mean in the end im not complaining about microsoft making DSE bypassing a piece of cake.
4:48
622 likesWindows: Hi😭
Enderman: Bye🤣
Replies (3)
That got me 🤣
1 likei do this every single time
3 likesThe trick is you just press CTRL + ALT + DEL while you're on that screen and you sign back in :p much faster
21 likesi really like these casual less-edited videos where you just explain as you go its more natural i feel
356 likesReplies (5)
Same here, I really enjoyed it
1 likeAlso helps that there isnt as much earrape music in this type of his videos
2 likesI agree! I prefer to hear someone explaining than to just read subtitles.
8 likesyeah , really enjoyed it
6 likeslikewise!
7 likesThats great. Microsoft even forces you to select security questions
373 likesReplies (11)
Microsoft really out here forcing you to be more vulnerable to being hacked 💀
1 liketorille
0 likes@@fuseegelee I did the same with my Password Hint
0 likesNope, skill issue.
4 likesJust choose no password at all and set one later (through [Ctrl]+[Alt]+[Del] for example). It only asks you to set them upon account creation if you choose a password.
False
1 likeat least for windows i just set them all to the same thing, not worth my time filling them out, not secure but i dont keep anything on my computer that need to be secured, especially with how easy it is to break it, and im not setting up bitlocker and AD credentials for a home network lol.
2 likesEdit: although i will probably share this with my companies SOC as they are always look for attack vectors and how to block them
Torille!
2 likesMine are A, A, and A, so now people can hack me 😱 wait.. they need physical access… my password already sucks! I don’t need to worry
12 likesSo annoying to have to sign up with no password and when you're in create one just to not make those.
17 likesshocking
3 likesFor real, i avoided it because it's unnecessary to even have at first place.
21 likesNot even my gibberish keyboard mash security questions are safe! Thanks, Microsoft.
534 likesReplies (5)
@@Mizu2023”My dog name is “
0 likes@@Mizu2023 Your comment is amazing
0 likes"What is your dog's name?"
4 likes"Wuuswh<@^-<&"
Lol
2 likes💀
7 likes"security and privacy? whats that?" - michaelsoff
166 likesReplies (3)
michaelhard
0 likes@@jajoothecoolman hi god :3
0 likestrue :3
0 likesMicrosoft: “We value your privacy”
74 likesAlso Microsoft: “Not only is forcing windows recall (aka spyware) on us, but also stores Security Questions in plain text”
Replies (3)
@@H3llfire320 Yeah but they’re trying to make it mandatory now saying it was just a “bug” that you could disable it
1 like@@H3llfire320It still stands that they've baked it directly into Explorer - they certainly want to force it to be always on later.
0 likes@@maddox5081 didn't they change it to be off my default lol
1 likeTwo more things that would be interesting to try:
46 likes* What happens if there are less than 3 questions in the list? Normally Windows never lets you select less, but can you do 2, 1, or even 0 questions?
* What if you use crazy UTF-16 text for the _answers_? Obviously it'll be impossible to type, but can the validation algorithm handle that correctly?
Replies (1)
I think you can enter most things by using the Alt Gr key and some number combination ;)..
0 likesMicrosoft Edge's password manager also stores all its passwords in plaintext (well, not really, they are encrpyted but with a key that's in the same directory as the database... whoops).
170 likesReplies (13)
@@nezu_cc I see, so it's just an extra layer of annoyance that the theoretical bad actor would have to crack.
0 likes@@mjdxp5688 Chromium does the same. Overall storing data safely is not possible on Windows because of bad app system / permission system (unlike Android / iOS where apps cannot steal passwords without cracked / fully rooted phone)
0 likes@@starleaf-luna it will be encrypted for user comfort.
1 likeSame with chrome and firefox, there isn't really a way unless you setup a separate password, which most users don't
5 likesAnd anyway, if you got system/physical access, why care? The game is already lost and you can do whatever
Firefox and every Chromium based browsers do that too.
0 likesThe only secure way of storing passwords is something like Bitwarden
@@mjdxp5688 You should never store your password in a browser's password manager no matter which browser
0 likesyeah pls someone answer this@@tmc249
0 likes@@tmc249 edge stopped using chromium
0 likes@@tmc249 That's why you should never save any password in any browser, even if its Brave or Librewolf or whatever. The best password manager is your own head. :D
0 likes@@starleaf-lunathe key is encrypted with your windows user's password. So an offline disk dump is useless if you don't know the password. (In theory at least, like enderman said, windows password hashes are a joke)
19 likes@@tmc249TLDR: yes, always has been, google denied it as a security issue but recently added an option to encrypt them with a master password. Not sure if edge already has this or not, it's usually a few versions behind.
0 likesif it's encrypted, but the key is stored in the same database, why even bother encrypting it?
1 likeid be curious if its just edge or every chromium browser as well
14 likesI remember years ago I just opened regedit using utilman on the lock screen and found all the security questions inside the sam folder in there lol
83 likesReplies (3)
@@𰻝eat glass
0 likesOk haiden
0 likesBruh
0 likesi feel like bad actors could use this to get personal information like what your real name is
69 likesalso what happens if you set only 2 questions or a question that has no question prompt but an answer
4:25 andrew and ashley is not a good idea
89 likesReplies (14)
@@artyoshka the soup is dry!
1 like@@fuwno you're*
0 likes@@lmnk it’s about the game the coffin of andy and leyley. That’s all I’m saying
1 like@@i_am_called_glitchy parental figure
0 likes@@lmnkbe proud of it
0 likeswild coffin fan spotted
0 likes@@lmnk Look up the names on Google, you'll find out
0 likesNo way 😭
3 likes@@lmnk youre blessed
9 likesdon't get it
4 likes@@artyoshka What's for soup?
4 likesi love cargo containers
2 likesBeat me to it
6 likesrolling in my coffin rn
36 likes11:44 bro got rickrolled by a code editor ☠️☠️☠️
104 likesReplies (2)
rickroll in big 24 💔
2 likeswe do some light trollege
2 likes"only one of them are real, the rest are virtual"
22 likesMe who knows that you're using a virtual machine and that ALL of them are virtual:
So thats another reason to skip adding a password during oobe and setting it afterwards, I never liked security questions.
85 likesI wish there was also an option to disable the password hint, but you can write random gibberish to that at least.
Replies (12)
@@kab43 I meant yesterday
0 likes@@ivancomp_inside tomorrow??
0 likesOr, as a matter of fact, you can just leave the hint blank just by putting a regular space in it - literally hit your space bar!
1 like@@ivancomp_inside Nope, there's not, at least during the setup phase
1 likeI can't tell if it could be disabled afterwards but knowing Microsoft it's unlikely
Is there no option to disable security questions?
1 likeI thought there is... But I never set password to my PC as it's my home computer amd I don't have a laptop at all to think about setting password
@@kab43I've seen this tomorrow on other videos
0 likes@@ezequieldom641it's just the tik tok search button
0 likes@@ezequieldom641 I just type space as the password hint, it works
0 likes@@ezequieldom641 it’s a youtube search, not a google search. so close yet so far
0 likes@@kab43 finally YouTube adding something that sounds useful
4 likeswhen the hell did YouTube add a search feature to comments? the word “oobe” was blue and had a search icon
14 likes@@ezequieldom641 Did youtube make oobe a clickable search automatically or did you make it? If the latter, how?
0 likesI swear 90% of security issues in Windows can be solved by running your main account as a limited user and only elevating permissions when needed.
13 likesReplies (2)
The problem is that most software can't be installed without admin. Linux solves that problem using package archives (.deb, .rpm) and trusted package repositories
0 likes@@rdqsr That sounds kind of familiar...
0 likesThat's why I on OOBE I make account without password, and add that then, on desktop.
43 likesBut I'm considering use cmd/powershell instead of Settings app, so I can skip creating password hint as well.
Another dumb thing: forcing you to create less secure PIN when you add your fingerprint. Thank Microsoft I can include letters and symbols to PIN, effectively turning that into a password.
Replies (4)
@@tapafon_red The PIN is just as secure if not more secure because it can not be phished and/or bruteforced as easily
0 likes@@msedgeundwinfan That too
0 likesjust put no password then instantly shift f10 and do net user "user" "password" and thats it@@msedgeundwinfan
0 likesif you change/set you password on the security options screen (ctrl+alt+del) you don't have to put in an password hint
7 likesIts even worse. If you're using EFS (Encrypting file system), and have security questions enabled, the questions can decrypt the EFS private key, and gain access to encrypted files. This renders EFS completely useless. All an attacker needs to do, is extract the security question answers from registry, and ask windows to reset the password (in winlogon), and boom, suddenly they gain access to "encrypted" files. (btw, I tried this in a Windows 10 VM 21h1 but it might still work on newer versions).
15 likesReplies (1)
Isn't the registry encrypted too?
1 like6:37 elevate to trusted######### ?
24 likesReplies (1)
@@DraidK yeah he almost got banned for making videos with trustedinstaller
1 likeIsn't this why Microsoft recommends you use a Microsoft account? You officially aren't really supposed to be able to make a local account on Windows 11 Home anyway... Wouldn't be surprised to see server and pro editions following suit.
17 likesNot saying this isn't bad though, honestly shocking how they don't encrypt this
Replies (4)
They HAD option to make local account on Windows 10. And they ALSO required to make security questions.
5 likesAnd they, most likely, also stored in plain text.
@@MegaBytesMe yeah
0 likes@@SOTP. Exactly my point, it is a chore to create one - it isn't the intended method of account creation for a new user.
2 likesyou can make a local account just you have to do extra stuff to do it
5 likes0:10 streeeeeeeeeeeeeeeeeeeech lol
15 likesScrew the error-filled computer just this once. Embrace Cat.
14 likesloved the THERE IS NO ESCAPE tidbit, wow that took me back
8 likesReplies (1)
THERE IS NO ESCAPE
1 likeMicrosoft : We do things for your privacy. We care about it.
2 likesAlso microsoft : Does not fixes RTLO attacks and hidden file extension attacks
insecurity questions
28 likesReplies (1)
Well said
1 likeSupposed to be researching on IoT but I'm gonna stay here
29 likesReplies (4)
Same level of security. Hence probably a Majority connects to microsofts azure cloud servers or chinese tuya servers
0 likesDUDE WHAT I WATCH YOUR VIDEOS NO WAY @@xpower7125
0 likessimilar level of security
0 likesSame level of security
7 likes16:22 Жду чтобы это было в NoEscape 🔥
6 likesBro just hack windows in couple of minutes pov me:Trying to guess security questions in 10 hours
19 likesReplies (1)
*TRYNA
0 likesyou can also use a windows installer to gain access to trustedinstaller perms, so assuming the computer can boot into the installer, you can take whatever from wherever you want
1 likeLol the obvious NoEscape reference was so funny to me
5 likes11:45 ain't no way you didn't hardcode that🤣
39 likesReplies (2)
@@jajoothecoolman hardcoding is when something important like the main function is set in stone in the code instead of being something you input.
2 likeshere enderman made the replacement q/a part of the code itself, meaning of this was compiled to a .exe it could only make one set of questions
?
0 likeswhy dors microsoft even force you to do these? makes me have to spam my keyboard, AND NOW THAT IS EVEN NOT SECURE?????
10 likesSo I don't think this is as big a deal as you might think.
9 likesOne scenario is where you have a local admin account on the system (which you need to access SAM anyway). In this case, you can just reset a user's password directly and take control of their account. Security questions don't matter here.
Another scenario is where you don't have access and try to guess the security question answers. In this case you can't see the values in the registry so it doesn't matter how they are stored. If you can get access that is a separate problem and how they are stored doesn't matter.
Last scenario is if you pull the hard drive or boot from an alternate OS from a CD or USB stick. In this case if the hard drive is unencrypted you can definitely get access which is a problem. Of course you also have access to all the user's data anyway that they haven't encrypted so that is a concern as well. BUT if they've used Bitlocker then you still can't view the security questions since they are encrypted with the rest of the drive, unless I'm mistaken about that. AFAIK Bitlocker should be enabled by default on new Windows installs now.
Should the security answers be better protected? Definitely. Only other thing I have to say is there could be some dumb reason they can't (such as allowing partial string matches).
Replies (1)
Exactly what I was thinking the whole video
2 likesLike it's not accessible, and when it is, everything is accessible
The reason why you couldn't see it at 3:45 is cause once you leave the textbox,it hides the eye button.if you want it back,you gotta remove the ENTIRE password and type it again. leaving even 1 character wont show it.
1 likeI haven't fooled around with security questions to know for sure. But maybe it's stored in plain text in order to be able to compare between the expected and given answer to pass even with small differences like punctuation?
2 likesI always hated them. I was thinking that why does M$ want to know these private details about me. Anyways, is there way not to enter them at all?
11 likesReplies (3)
@@test-rj2vlwhen it asks for the password leave it blank
0 likes@@HAKANKOKCU Last time I installed it in VM it did not give me any option not to set it.
1 likedont set it at oobe and set it after you go to desktop, it doesnt ask as ik
0 likesMaybe MS decided to keep them unencrypted so they could do some level of fuzzy matching? Like if you typed "Tokyo" in OOBE but tried to reset with "tokyo". Or removing extra whitespace from answers or something like that
1 like2:40 oobe part that says "Hi" is also selectable
1 likegetting rickrolled by Copilot is WILD
4 likes0:35 ngl i would be just as annoyed if i dropped my ice cream
2 likesSAM is protected by System permission. If a hacker already has System might as well not have any passwords at all because you're already pwned regardless. As to why experts recommend not using security questions, its because it's easier tu guess especially if you know that person. But you can just write gibberish as the answers. And psst hey here's a secret..You can disable security questions in group policy.
1 likeAIs in code editors are so funny when you do strings, sometimes i get random things like "you will be rewarded with a free robux" or "THERE IS NO ESCAPE
1 likeTHERE IS NO ESCAPE
THERE IS NO ESCAPE
THERE IS NO ESCAPE
THERE IS N"
Aside from that, this remembers me of chromium storing password in plain text
still russian accent. i love it
79 likesReplies (20)
@@oosha2000 I know it
0 likesCome on, he's already Russian
0 likesYep. His great Russian voice. Also... for the person saying the C-word (cringe), YOU ARE AN IDIOT.
0 likes@@Bowling4986 go ahead and blame me, idgaf
0 likes@@mix3k818 oh my guy, you're massively mistaken about Russians being “fluent” in English. Russia is one of, if not THE lowest English proficient country out there. And this Russian guy is tryna showoff and be "better than everybody" type of sh. When in reality he's not. So annoying and disgusting.
0 likes@@R1ch4rd you're probably the only person who finds it annoying in this reply chain (that said, I can't blame you for it either)
1 like@@wathuh7114 No, he's born in Kaluga, Russia
0 likes@@R1ch4rdOk
0 likes@@Aeduo nothing silly to be reasonably annoyed by a genuinely annoying thing.
0 likes@@R1ch4rd just a reasonable suggestion to avoid being annoyed by someone's accent. Pretty silly thing to be bothered by though.
1 like@@Aeduo you don't get to tell me what to do.
0 likes@@mix3k818 Easy to speak, hard to remember. So, no.
0 likesRussian could've become an inter lingua on Post-soviet space potentially, nowadays it's in the past mostly
He's German
0 likes@@R1ch4rdlmao what
1 like@@R1ch4rd nuh uh bruh.
1 like@@R1ch4rd you don't have to watch. Plenty of other YouTubers.
15 likesIt's cringe
2 likesWhy would it go away? I guess if he really made an effort to get rid of it but one would have to care a lot to bother to do that.
15 likesI am from Russian to
1 likeI know English is already the language of the world and most Slavs including Russians are often fluent in it, but it makes me wonder if Interslavic will ever be a popular language.
21 likesI mean, I'm not sure this is a security hole. You need to be an administrator to perform this. You can already change anyone's password if you're an administrator. The only problem with not hashing the answers is that an administrator can read them - and your answers should probably not contain sensitive information. So while they don't increase security, I'm not sure that they decrease it at all.
2 likesReplies (2)
@@MuhammadDaniyal-wk3hp Nonsense. If you lose your password just reset it. All you need is any usb drive with windows on it. You don't need security questions.
1 likeMany people lose their passwords and get saved by security questions. Which only someone with your computer can answer.
0 likesDo.... not... use....... Windows at all
678 likesReplies (159)
macOS X Lion anyone?
0 likesNo ise windows 7
0 likesGood luck using Linux 🤣
0 likesБазанул, но большинство фанатиков эндермена - виндузоиды
0 likeslmao
0 likesAnother thing is using windows AND linux or whatever you want through dualbooting
0 likes@paxmccausland5484 me too
0 likesI use arch btw
1 likeMe: I use Raspberry Pi OS
0 likesLinux = android
0 likesIos = Mac
Windows... = window's....
@Mason219 now you know one🤑
0 likes@@Phan1hs ios sucks...
0 likes@@cruelcat870 android is Linux btw. And I'm pretty sure android isn't a pc..
0 likes@@gamergod_yt3053 gaslighting isn't even a new term. It's basically tricking someone into thinking something happened when it didn't
0 likesBecause everything in Linux is so secure and it also never breaks down and is so perfect
0 likes@@partedgem oh no, windows is bad sometimes, but stop shoving Linux in peoples faces.
0 likesI am not learning how to port programs just so i can use a better os. Also anticheat no likey linux
0 likesReactos is good
0 likessometimes you have no choice
0 likesI don't care. I will use windows because apps I need are only in windows.
1 like@@mrowlsss i have a friend who uses arch linux who thinks hes better than everyone for using the "superior" alternative
0 likesi just use windows 10/11 for the convenience that it supports a ton of software that i use and that its pre installed most of the time
NIXOS!
0 likes@@SirPlaysDarkSoulsALot absolutely bro. I personally use Ubuntu, but I'm not out here shilling Linux at every turn. This is shit is so annoying
0 likes@@mrowlsss cuz doesnt matter if someone uses windows 11 while some "tech expert" says that theres a ton of security problems. "OoOh JuSt UsE lInUx!"
2 likesjust let everyone use their computer smh
I would work on a Windows mod.
0 likesim switching to linux... imma install playonlinux there to run my apps from windows
0 likes@@SirPlaysDarkSoulsALot I agree with this Ralsei
0 likes@@cabbot_win12 is just gonna be edge
2 likes@@michaelepica3564it does suck lol
0 likes@@adminiget1602 win7 is great bro
0 likes@boogiehasfun Sorry to hear it, that's why I still use windows.
0 likesi don’t have a choice, playing vr without windows has been way too hard to do on linux for me especially with a nvidia card
3 likes@saveliyivanov9943 I still using windows 11. 🫤
0 likesLinux can't run Davinci or rec room
1 like@@Marlon-fi6sb then they weren't talking to you
1 likeBruh...
0 likesI am not using a PC...
Only Android...
...
🤣
Windows > Linux
0 likes@@vrajb210 factually incorrect
0 likes@@saveliyivanov9943 forgive me Luke smith, but I must game.
0 likes@Z_fentomFentom I have never had any issues on windows and removed all spyware/bloat, windows is the most stable os i have ever used
0 likesWelp sadly i didn’t know at the time when I first got a window pc it was not good thing to use
1 like@@MinecraftGrassBlock cuz windows is bloat,spyware and unstable, i have had lots of expirence with windows for over 3 years and its really unstable compared to arch
1 like@@Z_fentomFentom why have a windows vm to run software instead of just running it on windows normally?
0 likes@@MinecraftGrassBlock i litterly said expect kernel anticheat games, and just cuz some software dosent run dosent mean there arent alternatives + if there are no good ones u can use a virtual machine for those so i dont see the isue
0 likes@@Z_fentomFentom cod, fortnite, roblox, gta 5 and others don't run on linux, and also lots of software is unsupported
0 likes@@MinecraftGrassBlock 99% of gamed run and i dont think ppl should let kernel anticheats just on their pcs
0 likesUse BSD!
0 likes@@Z_fentomFentom whats fake?
0 likes@@torn5278 The hardest question in programming
0 likes@@C00LSH4RKUbuntu is just about as bad as Windows. Use Mint or Zorin.
0 likes@@MinecraftGrassBlock so fake
0 likesUse windows*
0 likes@@partedgemwhat is gaslighting (I'm gen z and I'm terribly outdated xD)
0 likesWhen Windows 10 support stops working I will use directly Ubuntu or any good system for games and programming in Linux.
0 likesWindows 11 is shifty asf. Bad interface. Bad security. Stupid IRM obligatory (wich can be easily bypassed) Bad support. Simply a bad system in my opinion . I use Windows only for commodity of not using code almost all of the time using a system, but I think I will get really easy using Linux. And that would help in a future work
@@Cart1416so underrated but barely usuable
0 likes@@noquality3587you suck
0 likesToday's mission:
0 likesMission: Install arch
Reward: gain "I use arch btw" title
W's in the chat! @@cruelcat870
0 likesi dont have a choice
0 likes@@Checkm8ra1nAVID JAILBREAKER MENTION
0 likes@@cedricsonaquevido1565
0 likesSimple, windows is bad (especially win11) because of spyware, adware, and bloatware that comes with it by microsoft
The alternatives, well you can use linux
@@Phan1hsmillions of phones in the world.....
0 likes@@rin_reverie frr but linux is more optmized
0 likesI use windows xp, 7 and 10
0 likes@@sys_key3287 nice one!
0 likesYeah if you don’t wanna look outside
3 likes@@windowsnt63officialkitty bou
0 likesevery chance you guys get huh
1 likeYeah, use Red Star OS instead
1 likeYes @@TheosTechTime
0 likesJust let people use what they want
5 likes@@lynixfox6009no? Just use linux mint
0 likes@@michaelepica3564look at the corporate tool defending the multinational
0 likesUse linux
1 likeeverything that isnt windows is better
4 likesNah I use arch
1 likeMacOS, Linux and even ChromeOS better
0 likesLinux Mint are better
0 likes@@Mason219 you know no one using android
0 likes@@Mason219 no android
1 like@@mrowlsss fr
1 likeIm a unix user😎
0 likes@@C00LSH4RKit sucks use Mint
0 likesWhy are Linux users make it feel like Linux is the best thing in the whole entire world without any problems or glitches
0 likes@@Phan1hs Nah android
0 likesBased, use linux instead.
0 likes@@noquality3587 only study things of Linux, before say thing you don't know only search on Google how to install or be your self and self learn
0 likes@@Checkm8ra1n i’d rather die
0 likesuse ios
0 likes@@vrajb210 true, but macOS is objectively better than Windows as well lol
1 likeMicrosoft moment 🗿
I'm still using windows I'm NEVER SWITCHING to windows
0 likesNah, DOS all day.
1 likeAs a Linux user THIS IS A WINDOWS VIDEO S T F U
5 likes@@lynixfox6009 I think only people who need special tools that only work on MacOS or Windows can't use Linux as a daily driver. I think pretty much anyone could use something like ChromeOS and then escalate from there to something more "advanced" like Linux Mint and go from there.
0 likesHoly shit from one Linux user to another THIS IS A WINDOWS VIDEO STFU
0 likesShut..... Up linux is trash
0 likesI have to for a little bit longer
0 likesStop making unrealistic comments. Linux is infact NOT for everyone. You may not think it is, but Linux is infact still a niche.
10 likes@@C00LSH4RK ubuntu more like uwubuntu
0 likes@@Checkm8ra1n I don't like Apple but I'd use anything but Windows
0 likesDo… not… comment……. here at all
2 likesFr just use Wine if you want stuff
2 likesYeah use Linux and have it die on you while doing anything critical and it updates.
2 likes@@vrajb210 nah real-life is better
2 likesQubeOs le gana 😎@@vrajb210
0 likesdon’t use a computer at all
1 likeOk, I use Astra Linux
0 likeswhy is windows bad and why should I use alternatives (and what alternatives should I use)?
2 likes@@imaguyyesmale openbsd
1 likeA lot of games don't run on linux or run poorly on linux, the same goes for a lot of software, that's why I can't use it.
1 likeno? lmao
1 likeMe: Uses Windows 7 & 11 on the same computer, and a Ubuntu VM
0 likesI use MacOS
1 likeNo.
0 likesUse [insert other OS that is not linux, macos, windows, or templeOS]
4 likesNah use windows
3 likes@@Checkm8ra1n I'd rather cut my dick off than do that
0 likesLinux sux
5 likes@@AblsmnIIRC BlissOS provides a microG edition, so at least that's an option to avoid Google.
0 likesEDIT: Looks like there's even vanilla builds which have neither GMS nor microG.
@@realploszukiwaczi use arch btw
0 likes@@saveliyivanov9943 i use arch btw
0 likesyeah use android
0 likes@@adminiget1602 that's windows
0 likes@@saveliyivanov9943 i WILL keep using windows
6 likesHow about HarmonyOS?
0 likesa hot take there boyo
2 likes@@weegeenumberone2 ok
2 likes@@michaelepica3564It is? Lmao
0 likesLinux forever!
2 likes@@u8_muser_official if you care about privacy then it's a good reason to switch, other than that it works fine
0 likesWhy?
0 likesMacos is a cheap mod of linux tbh@@vrajb210
0 likes@@smugay man I'm lost you tell me
10 likes@@michaelepica3564 you tell me man
1 like@@michaelepica3564 lol
0 likes@@smugay cope with what
4 likes@@michaelepica3564 cope
3 likes@@noquality3587how to tell someone has never used linux:
0 likes"Windows bad!1!1!1!1!1!"
18 likes@@cruelcat870i installed android x86 on my old laptop, super easy
0 likesYou bozos, MS-DOS is superior!
0 likesUse x86 androi- oh i forgot about the google preinstalled shit ware
6 likesLinux sucks
6 likestempleos the best
9 likesHaiku os anyone?
7 likes*DON'T
1 like@@cruelcat870 nah use ms-dos. security through obscurity
0 likesUse an BSD.
10 likesMe, a proud win7 user
25 likesNah use android
10 likesUse arch btw
52 likesok im using ubuntu
11 likes@@vrajb210 but its not good for warzone and fortnite. Anticheats dont work on linux, but if they did,bi would switch immediately
0 likesTempleos supremacy fr fr :fire:
85 likes@@Checkm8ra1nno >:(
0 likes@@Checkm8ra1n fuck macos
0 likes@@Checkm8ra1n for most work, yeah, none of the companies should use windows.. its so unsecure..
0 likes@@Checkm8ra1n nah linux is better
149 likes@@saveliyivanov9943 use macos instead 😅
25 likesKitties! You should do a video just showing off your cats.
4 likesI love joining early to the premieres, the description is like: Links? Later
4 likesoobe is so scared of Enderman it just breaks without him doing anything
1 likei rlly like these more casual styled videos, pls do more
1 likeVideo idea: bricking a windows system by flipping a single bit of
1 likeyo what? You dont get the option to skip it?
47 likesReplies (4)
just setup the oobe like normal but in the password field don’t field anything just press to skip the password field because on windows you can go to control panel and create a password it will not ask for security questions
6 likesand then remove them
1 likeYou can only skip these questions if you use command prompt to create the user account (or I think you can also use computer management in Pro editions) and then delete the previous one which has the security questions
7 likesEdit: or you can just leave the password empty during the OOBE ;)
@@themen3ace yup. That's why this is so bad.
20 likesThat was a great video. Good thing I never setup the security questions for my windows account anyway.
4 likesReplies (4)
@@jynz_l mb
0 likes@@thepenguinbird sorry, i only made windows 11 not windows 10.
0 likes@@jynz_l hello Roblox guy who made windows 10 in boblox
1 likeEven worse, your password isn't secure either..
3 likesi love those experiments
8 likesReplies (1)
Glad you enjoy them as much as I do!
5 likes2:49 you definitely dont want magic to happen when you are an sorcerer on your own
0 likesRemember guys, password in the system without any encryption is the password to prevent your toddler accessing the PC or to prevent your random classmates from googling black-orange YouTube when you don’t look at the laptop
1 like14:00 I love how Windows doesn't even warn you, when you've reused the same or older password. Which is usually a Microsoft thing. 😅🤣
1 like#BrokenW11
7:45 i love how he accidentally says "or 3 и (russian for and) 9"
36 likesReplies (10)
@@Endermanch oh, I couldn't really watch the video much, so mostly I just listened
0 likes@@Ginto_O Oh, yeah. I dunno if I'd say "gaslighting", at least not very effectively.
0 likes@@Aeduo trying to gaslight the author of the video that he made a mistake when the "3E9" hex is literally on the screen
1 likehold on hold on, he's got a point. It does sound close to the slavic word for "and" (literally just 'i' spelled the slav way)
0 likes@@Ginto_O which part?
0 likes@MoneyGrab yeah, "три E9" xD
2 likesSo cringe
2 likesIt was literally "3E9" if you see on the far left, but that would be an interesting mistake.
7 likesthe registry said 3E9 and not 3 И 9
9 likesNice catch! Though I was referring to the hex number 3E9...
36 likes"Don't use Windows security questions"
0 likes"Don't use windows" was enough for me
Omg Enderman uploading more videos!! 🎉🎉 You're awesome buddy you really explain in detail ❤
1 likeCan you do full Command prompt guide I think its cool and I don’t feel like searching every single detail and I would not even know what to search
1 likeThese experiments are always great lol, just like bashing MS outright.
0 likesThey really seem to be a security vulnerability in themselves, but oh well. Anyway, hope you have fun with your other projects as well
That first zaglo one may be useful to outright dissble the questions
0 likesWait.. people actually answer those questions accurately? I've put bogus answers for like 15 years.
1 likeI mean, if any service uses system rights to compromise your user account, they would already have access to the whole system...
1 likeIt's crazy all the content you make, I love it! I've been following you for a while now, I never get tired of your videos!
2 likesPS: Not bad cats 😺
holy enderman is on a uploading rampage
2 likesThis really surpass all the security breach with generic questions easy to decrypt
0 likesNow with this is more hard find these questions
finally normal video with voice
1 likejokes on windows back when it tried to make me use security questions i skipped making a password and made a password/passcode instead through control panel so it wouldnt give me the option to use security questions
1 likeThat OOBE speedrun plus hi-bye😂
1 likeOnly a minute left!
8 likesReplies (1)
i saw you at his telegram channel xd
0 likesThe internet would be fixed if
0 likesA : They let you make a local account
Or
B : They let you make a local account
For anyone saying windows 11 is bad i didnt got the telemetry thing and i didnt get aerformance drop,i guess thats good
1 likeDarn... This is quite cool from malware standpoint I must say... not for usual user, though! :D
0 likesThanks for the video!
Windows Security Questions: Hi
0 likesEnderman: GO AWAY YOUR USELESS
Windows Security Questions: 😭😭😭
Oh! Watching during premiere and it’s a video where my adhd ass will actually watch it because it’s a voiceover
3 likesLove your voice man, where are you from?
0 likesReplies (1)
@@eliaskerlin5465 Russia
0 likesYou can always use a Nokia 6303i Classic and watch your videos by encoding them in H264, making them 240x320 and 10fps at 3gp format. Trust me it is more fascinating than you think.
0 likesSame OOBE error happened to me, the date was correct though
4 likesReplies (3)
@@jam06 it eventually works, that's correct, but the error still persists.
2 likes@@R1ch4rdworked eventually though? I didn’t do anything at all and it just did
2 likesProbably an ambiguous region was selected during initial ISO setup, like English Europe.
2 likesYou can find owner email of a MacBook with diagnostic logs bruh
2 likesActually, my dads friend (The guy who made my pc) didn't answer the security questions becuase he said "It's useless"
1 likeHere before the Enderman gets restricted by Google once again
1 likeReminds me of how GD stores your password in your save file in plain text
1 likeReplies (3)
@@9vlc pretty sure it also uses xor and uses base64
0 likes@@SOTP. It's not encrypted, just compressed with gzip
0 likesyou still have to decrypt ur save file ig lol
1 likeWhat I've done for the last year or so is keyboard-spammed 30 or 40 random characters and used them as my security answers
0 likes11:50 i love that
0 likesI didn't test it because I always set my password in a way which bypasses the security question screen, but I assume they store it in plain text to make the matching case insensitive, also allow double space or whatever... Not that I would call that a good idea and say that there aren't other ways to do that like e.g., Facebook handles the password validation (checks with a few iterations)
0 likesReplies (1)
They are probably stored in plain text to make it REALLY EASY for the NSA !
0 likesImagine using windows in 2024 when proton lunches most windows apps anyway
0 likesi can now troll my friends with security questions
0 likeshonestly these security questions are insanely stupid, like you can't even ask yourself a question that only you would know the answer to, you only get 5 or 6 very specific questions that make you have to make up stuff
0 likesheck, even if they just stored a hash or there were procedurally generated salts, people could figure out what hashing salts were used and then they could just brute force through a list of names or cities, so they gotta do better than that
That's why they are forcing ms accounts and windows hello lmao
3 likesStill wouldn't trust it
Yet another case of "If you are admin, you can do admin things".
1 likeIf you have the ability to read HKLM/SAM or HKLM/Security, then you must have already gained admin privileges, if so then why stop there? As admin you can just override any user's passwords, or just read/execute whatever files/programs you want, why bother with security questions?
Go on, try stealing other user's security problems with, lets say the builtin Guest account.
Hey enderman! I have a question, will you make a video about ULTRAXP again?
0 likesReplies (1)
I will... I wish I had time to do something cool with it
0 likesJust from the information from the thumbnail, I honestly thought they would have been hashed as well.
0 likesi dont even have a password on my windows user
12 likesI never wanted to use them, it was oobe windows that forced me to do so
1 likeIf you've got admin access to the system and wanted to change the password you could. You don't need to security questions to do that as you have system or admin powers. Seems kind of redundant to probe security question answers with a process that accesses the registry with admin privileges.
0 likesShould they store as plain text? Probably not... but would someone use this vector of attack when they already have access enough to do what they want? Not likely. Probably easier to scrape their system for browser sessions or something else.
The reason this is mega-mega bad: An attacker could use malware to get your security questions and their answers, and there's a decent chance some people will use the same security questions, and same answers, on different services. They can use that to gain access to those accounts.
9 likesReplies (5)
@@mazellovvv Nah, its still good to steal just in case the cookies get invalidated. It's also more information, and more info never hurts
1 like@@mazellovvv true but some people don't technically know about cookie logging soo they do this
0 likes@@mazellovvv because sometimes sites do log you out all the time, or some do it properly and invalidate the token when someone suddenly logs in with the same session token from across the fucking planet.
0 likes@@mazellovvv for sites that force you to login every time, like some banks (mine does on the website)
0 likeswhat kind of hacker would hack secret questions if they can just steal cookies and not bother at all
7 likesThis is social engineering questions more than security questions
0 likes"Don't use Security question." What do we do if we are forced to put them ?
0 likesПриятно слышать тебя в добром здравии. Успехов!
1 likesomeone at microsoft got lazy
1 likedoes it really matter when NTLM is already easy to crack?
this also requires file/registry access. if someone has that level of access, I think there are more important things to worry about than the answers to the questions
security that doesn't even act like security
1 likeI watched this on the student transportation van on the way home from school during the instant premier
0 likeswasn't the password itself stored in plain text pre nt 6.0?
2 likesThis man can make his own Windows💀
0 likesyour accent improving overtime
0 likescool
Cool!
5 likesMicrosoft just gave up on local security. Ig they just want you to use a Microsoft account.
1 likeFirst. Love you endermanch ur videos are amazing >3 My security answers are:
1 likeAfagdhetif
shfiafh we
duagdifen
Thats how I stay safe ;)
Process Hacker is now System Informer btw
0 likesWindows hasn't a security focused OS since never. Windows 8 started it all really.
0 likeshey dude, hi, two years ago I wrote a program to reset the password just through the registry, I was just thinking about how to decrypt it or, for example, make the user an administrator, maybe we should talk somewhere
0 likesI love your keyboard sounds...
0 likesYou should report this to microsoft officially if you haven't. This is a major security flaw that could cause people's bank accounts (and other services) to get stolen if they use the same security questions on multiple services.
0 likesReplies (6)
@@MuhammadDaniyal-wk3hp i'm not even gonna bother with you, here's an answer from artificial stupidity:
0 likesYes, storing security information in plaintext is a significant security flaw.
This is not a security flaw, you have to get all 3 security questions correct. Also someone would need to have your pc to answer them, which if someone had you would most likely be already signed in
0 likes@@Boxersteavee Fair point, but the average user that bothered to force a local account still wouldn't turn BitLocker on. Of course, all MS accounts force BitLocker on by default, but those don't have security questions so they're a different subject.
0 likes@@thepwrtank18 not necessarily, not everything is accessible with access to the hard disk, especially with Microsoft pushing disk encryption so hard.
0 likesnot really, if you can access the data in the hard disk it's over anyway
1 likea normal user doesn't have access to sam, so this attack vector is very ineffective and targeted at a specific user. but storing the responses as a hash is worth it
1 likeyou would think the security question answers would be secure...
1 likeWhat were those command prompts labeled "Select" instead of "Administrator"?
0 likesWould these questions be usable outside of a machine that you already have some elevated privilege on? Resetting the password wouldn't unlock any encrypted files, and you already have free access to everything. Would they be relevant to accessing the person's microsoft account if they had used a microsoft account login or is this just a separate mechanism only used in the case of a local only account?
Oh jeez, the art of war. Could certainly be useful I guess depending what you're doing, but it's also the classic self-help book for dominant jerks.
Replies (2)
@@NotActuallyMousey oh I see ok.
0 likesIt's labelled select if you click on something in the command prompt, nothing special
0 likes0:07 “hello everybody”
0 likesThis is why linux is getting more popular and if you want to use a better windows then use react os
0 likesand this is the reason why i am still with windows 10
1 likeReplies (4)
@@charginginprogresss Газ на баварецаааа
0 likeswindows 10 is equally crap, nope it's more crap, enjoy ig
0 likes@@invalescent I mean for the errors but ok
0 likesYou think you're safe, but this is present in Windows 10 as well 🤦
0 likesI'm glad I make my password after the install process is over with
0 likesOk, you should not use security questions, because someone else who knows this person, could be able answer them, so far so good, but that is true for ANY platform that offers that, has nothing to do with Windows.
0 likesBut why are unencrypted questions and answers in a part of the registry, that are only accessible by an administrator, a security risk for Windows? I mean if you are an admin, you can get direct access to that person, you don't need the questions then.
Windows isnt as secure as MS promised it is how pathethic
1 likeWhile this is obviously problematic, you can also just boot into Windows PE and reset the admin password (easier as you don’t need to have access to another admin account on the machine).
0 likesReplies (1)
issue is you get answers to security questions that could also be used elsewhere
0 likesTry uninstalling edge and instal chrome and see after windows update
0 likesVulnerability questions...
1 like4:00
0 likesare the security questions really optional?? iirc, you are forced to include that stupid garbage no matter what.
you shouldve made noescape do that lmao
1 likeBro I didn't even know windows still had em
0 likesWhat if I enable bitlocker? Would it be safer? Or is windows hello safe(face recognition, fingerprint)? Or is a Ms account safe
0 likesenderman kity reveal!!!!
2 likesTHIS IS THE FUNNIEST THING IVE SEEN TODAY
0 likes"and- Hi! Bye."
0 likesI Like Your Videos, Enderman. It is Interesting
0 likesUnsecured security questions
0 likesExpected
2 likesI wonder how many people after this video switched to Linux xd
1 like11:56 hell yeah
0 likesokay i thought there was sharp corners until 7:12
0 likeswe need more cats in your videos
0 likesTurns out, its not very smart to use Windows, what a surprise
0 likesWhat if you put less questions ? Like 1 or 2 or none at all ?
0 likesEnderman, Danoct, Flytech, Olivers Tech, ZGuardian, Eric Parker
0 likesi just put "yes" for all of them
0 likesBro schools are going to be asking for ap math questions to reset the password
0 likeshow could someone get access though? like how can they open regedit (with trusted installer access) if they arent logged in
0 likesHow do you even skip the security questions then?
0 likesIf you manually delete the ResetData key, will that disable the feature?
0 likesIs this actually a problem tho? If you are on a system where you could read the security answers to reset the password, you could also replace the password hash itself on your own and it’d have the exact same effect, no?
0 likesReplies (2)
@@Endermanch right, but if you use the security answers you still have to reset the password right? Or does windows let you log in with just the security answers without resetting the password at the same time?
0 likesYou can replace the hash, but you cannot read the password without cracking it. The same can't be said about the security question answers.
0 likesSit back while Microsoft collects more of your data .. err .. updates itself =)
2 likesthen how we can remove the security questions ???
0 likes4:37 how did you get it to just be toggles? I've seen that UI before but always thought it was just early W10. It looks so much easier to decline than clicking No then Next over and over. Is it a GDPR thing where they can't have it pre-ckecked so have it as options instead?
0 likesI was talking my friend through bypassing the microsoft account and windows somehow managed to boot past the OOBE with a user named defaultuser0 with no password. a reboot fixed it but wtf microsoft, can't even get your spyware right
0 likesWhat code editor are you using
0 likes11:48 copilot moment:
0 likesso they couldnmt even hash it with an argon2 or even a sha256??
0 likesHello, what version of Windows 11 or what day and year is this edition because you can skip without the Internet to install the account locally, thank you
0 likeshow long i havent heard enderman's voice
0 likesWake up babe, new Enderman video dropped and he used his voice
0 likesDo you use ltsc version? (I tested normal and ltsc and only ltsc let me to create local account) I heard they patched the disable internet cmd
0 likesNoEscape 2 confirmed?
0 likesThis is why I force skip the oobe
0 likesNEW ENDERMAN VIDEO 🔥🔥🔥🗣🗣🗣
0 likesThe obby 😂
1 likeIm not stupid i know my password, why I am obligated to do this thing??? For real, it's like the "Your password is not strong enough" Yes i know that and its my problem!
1 likeBtw, bro are you using a wood switch? Man whats is this sound?
Oh come on I don't want to use a Microsoft Account!! Let me keep my local account!!!
0 likesWhat app do you use to run this? I'm trying to see my answers.
0 likesReplies (4)
@@lofty_craft okay
0 likes@@SOTP. so i can see what i put and change it if i need to
0 likeswhat do you need this for lol
0 likespython3 samreader.py
0 likeslowkey you should work for microsoft
0 likesI only type "1" as answer for these questions.
0 likesWhy I switched to Linux.....
1 likeDon't be a meanie buy windows beanie-
1 likeMicrosoft!
1 likestupid fact: windows 11 is not windows 11 at all because it's still freaking windows 10
0 likesMicrosoft, plaintext?
0 likesSeriously how old are you? 5?
local acout can be eaily reset , how secure s ms acount user ?
0 likesYou have to use it you cant skip or something
0 likesReplies (2)
@@luisl173 Thx for pro tip love you bro (no homo)
1 likedont set a password on oobe, then after oobe set a password and it will suggest using password hints instead
1 likeThey "fixed it" by forcing online account
0 likesReplies (1)
Microsoft's motto: If it ain't broke, fix it 'til it is!
0 likesWho even uses security questions in 2024? 💀🙏
1 likeElo guis!!!
2 likesNot showing how to remove those if you put them before? awww
0 likescute cats
1 likeWhat is that even at the start?
0 likesDon't tell me it's the windows installation requiring a internet connection...
Why would you use windows 11?
Security question: Why?
0 likeswow he can talk
0 likesSo happy I switched to Linux
0 likesYou have a voice??
1 likewe got rickrolled by AI before GTA VI 🤣🤣
0 likesOnly 10 seconds left
0 likesConclusion:don't trust sams
0 likesMicrosoft:Company worth a lot
3 likesWindows:Some 5$ shit from microsoft with 100 bloatware sold for 100$
Bro, I want to ask if you know how to make a virtual machine in a virtual machine. In VMWARE
0 likesReplies (2)
@@nullnull8310 how have I not seen it? I may be blind
0 likesHe has a video about this already
0 likesWindows, more like spydows
0 likes...or maybe don't use Windows at all!
0 likesname of the song in the outro?
0 likesWindows 11 oobe is unbelievably long,i did windows 7 in 30 secs
0 likesReplies (1)
skip the oobe entirely with autounattend. the longest part of oobe will be loading screens
0 likesDo more videos with voiceover please! It helps me focus on the content on screen, I don't have to take my eyes off the content to read the information being conveyed. That and I don't like the music you use.
0 likesReplies (1)
Yeah, I wish he did more voiceover videos too. I like to play games and watch youtobe, when he voiceovers his videos i can just listen and play games
0 likesI never use password in my pc, my little dinosaur brain forget it😂
0 likesglad im still on 10
0 likesI love this one
0 likesDont worry pc has no authentication to login at all
0 likesMake a video Destroying Windows 10 OOBE
0 likeshow did you get that cursor in the @echo.%0^|%0›$^_^.c^md&$_›nul vid
0 likesUnrelated, but you should consider making a Bluesky account! I'd love to follow you there since Twitter is so full of nazi shit.
0 likesBut nobody uses Microsoft account
1 likeReplies (2)
It isn't any worse than a Google account, I have my Microsoft account since it was called a Microsoft Passport (to hell? 🤣) and Adobe Acrobat Pro required it for some stupid reason, maybe to activate it, I don't remember, it was almost 20 years ago.
0 likesAn offline account REQUIRES you to set them
0 likesI used that in a vm but the user pass is 123 anw
0 likesreinstalled to windows 10 and im so fking glad i did wtf was microsoft thinking oh i forgot its microsoft their brain doesnt function properly.
0 likesReplies (1)
windows 10 has security questions that work in the exact same way
0 likeswait what how do i even disable them 💀
0 likesHi
1 likeHello yall
0 likesI just add the abcs
0 likesi one said my fav number is "uwu" in a security question
0 likesAlso keyboard noises are now not safe, bc AI nonsense.
0 likesMight as well not use one
0 likeswait you can talk?
0 likesLinks: later
0 likesHello!
0 likesOh boy...
0 likesThis is not a security flaw, you have to get all 3 security questions correct. Also someone would need to have your pc to answer them, which if someone had you would most likely be already signed in. Also nobody uses them and microsoft is probably the best company, they have made , Xbox Hotmail, Windows
2 likesReplies (6)
@@MuhammadDaniyal-wk3hp womp womp im on arch btw
0 likesglowie
0 likesmicrosoft spy agent detected
0 likes@@i_am_called_glitchy I just like Microsoft for everything that they have done, you are literally using windows right now.
0 likesmicrosoft employee detected, who are the two upvoters?
0 likesthe microsoft shilling is crazy
4 likeshi andrew
0 likesAndrew and Ashley
0 likesEnderman I'm your big fan ♥️♥️♥️
0 likesso secure 😂
0 likesbro u shared ur information keep that private pls
0 likesIt forces me to do it so
0 likesI'm glad I don't use a local account anyway.
2 likes3:27 music name pls
0 likesReplies (3)
@@xclemensxd I don’t hear any
0 likesOf course there is music
0 likesThere’s no music bro
0 likesENDERMAN VOICE💥💥💥💥💥💥💥💥💥💥💥💥
0 likesThey actually store it as text? LMAO
0 likesJust dont use windows?
0 likesDude Windows 10 is dying in a year
0 likesBro why don't you make minecraft shorts I do that
0 likesThe microsoft use apple id
0 likesDidn't know you're a Metallica fan.
0 likeshttps://en.wikipedia.org/wiki/Myanmar#History
0 likesKIBBY!
0 likesWindows haters ensemble! 🤣
1 likeGg security
0 likesNo One Cares™
0 likesEveryone Cares™
Omg i´m here
0 likesWindows security is poop...
0 likesHave a great day guyss!!!
1 likeUnder hour gang
0 likesI WAS HERE
0 likesWhy are you called Enderman while you don't do Minecraft stuff?
0 likesgood job micro$oft
0 likesGaiyat
1 likeNever mind
0 likesPog...
0 likesMeanwhile Bitlocker can brick your drive!!!!
2 likesOk
0 likesTokuo
0 likesim love cats
0 likesReplies (1)
i love cats too
1 like😢😢😢😢😢😢😢😢 u will be terminated its so sad 😢😢😢😢😢😢😢😢😢😢😢😢😢
0 likesTrusted◘◘◘◘◘◘◘◘◘ 2.0
0 likesThis is kinda fucked up, legit even a newer scriptkitty could break into this.. I know the .ISO is free but Pro costs $200 Canadian and paying that much just to get this easily hacked? I'm thinking of switching to Linux
3 likesReplies (1)
You are so dumb................ The person needs to have your computer to answer them, if the person has your computer then you would probably already be signed in 🤣Stop hating microsoft
0 likesanother microsoft L
0 likeshaii
0 likesno thanks, i use linux
0 likesFirst few minutes of you struggling with installing is not something I expected.
1 likeI always put 123 to the first 3 questions. I have a good password and a bootloader encrypted password. That’s enough of protection
0 likesпродам гараж
0 likesWah
0 likesJeros was here
2 likesReplies (2)
Hi Jeros
0 likesHi Jeros
2 likes48th!
0 likes4 march 2024
0 likesreally good live stream i recommend
0 likesReplies (2)
@@ProbablyCrispyBacon i know
0 likesits a premiere
0 likesWHAT IS YOUR INTRO SONG PLS IM DYING
1 likeReplies (1)
I think it's Landscaping by Windows 96
0 likesПривет эндермен! я твой друг из россии и я думаю то что ты умеешь говорить на русском
0 likes🤦♂️
0 likeslol
0 likesxddddddddddd
1 likeyippe
0 likes🤣🤣
0 likeswho came from the tiktok video?
0 likeswindows has bad security
0 likesI hate cats! Dogs are #1! 😆
0 likesUse code ANDREW in the Fortnite item shop
0 likes(dislike if you get the reference)
Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux
0 likesEven if it didn't store them in plaintext, "security" questions are still a source of insecurity. They are a big target for phishing attacks, especially on social media, where they offer these stupid games like "Find out your VIKING name! combine your oldest cousin's name with your mother's maiden name and your birth city" And people JUST KEEP ON FALLING FOR IT :(
0 likesŢ̵̛͈̜͈̪͕̺͕̥͕͍̺̊͒̌̎̈́̔͌͒̈́̀̊̋̈́̿͒̊̄̈͊̀̈́̃̿͂̏͆̈́͒̈̏̔͂̊̈́̃̈̇̃͆̈́̈́̌͛͑̀̒̑̋̽̆̐̈́̈̈̿͗̈̏̌̕͝͝H̷̡̧̨͔̭̤̹̬̯͎̼͕̮̘̳̻̺̲̯̙͉̩͇̣̖̞͚̜͚͚̲͈̱̺̭̹̤̤̮̩͚͐͂̇̌̑̋͘ͅͅE̴̛̊̽̉̄͐̒̏̐̎̈̅̅͗̒̍̾͐̽́̍̊͒̃̇̾͒͆́̃̉̾͒̐̋̅͛̾́̆̋͘̚͜͝͝͝͝Ŗ̷̡̧̧̨̛̙̝̰͔͍͕͔̰̮͎̫͓̟̹̜͚͍̲̍̊̏͐́̄̑͊͑̋̑̍͗̃̆̅̆̇̏͂͛͂̈́́̎͋̈́̿͆̈́̑̂̇͐̈́̈́̎̉͐̐̑̒̇̐̓̾͗̄̚̕͘̚͠͠͠͝͝Ȩ̸̨̨̧͓͈̮̺̱̩̼̦̭͕̫̻͖̲͎̞̹̹̳̭̮̱͈̳̮̰̗̪̤͈̞̭̲̥̘̰̰̼̜̲̣̯̪̝͕͉̮̖̬̣̣͔̗̥̙̠̫͇̞̟̣̖̗̪̒̈́̌̅͌̆̐̃̆͒̃́̽͐͋̕̕͜͜͝͝ ̴̢̧̧̨̧̡̘̯̭̬̤̲̘͔͇̬̦̜̥̟̮̫̫̳̜̯͚̤̘̫̬̜̰̺̜͍̹͔̭͓̞͖̝̺̭͓̣̗̝̙̹̖̱̺̟̮̟̲͉̤̼͓̺̰̺͓̣̳͇͍̭̘̾͑̔̃̃͊͂́́̅͑̃̈́̉͒̌̑̈́̅͘͝ͅͅͅI̵̛̛̛̛͖̩̬͙̥͕̳̗̠̣̥̟̱͋̓͒͛̈́̽͒̅̄͊͑̐͋̓̀̈́̆́́̃̉͌̍̓̓̾̈́̀͒̂̑̒̔̾̔̽̽͋̀̄͛͗͒̍͌̈́̌̐͋̊̆̈́̃͒̓̓̍͊̆̀̎̅̋͗͘̚̚͝͝͝͝Ś̴̢̧̨̧̛̛͖̫͔̥͇͓̹͎̜̟̻̼̤̫̖̺̞̩̤͙͕̺̰͎̙̣͔̫̠̲͍̝̪̬͍̦̫̙̝̫̪̮͉͙̃͆̈́͛̆̌̽̇̾̉̎̏̔͌̐̈́̊̐̃͌̏͑̄͐͌̋̀̐̒͆̈́̄͋̇͗̀̏͑̓̈̎̕̚̕̕͜͜͜͠͠͝͝͝͠ͅ ̵̢̢̧̡̢̧̡̨̧̨̛̯͉̪̝̜̘͔̺̜͎̰̥̘̯̳̖̥̥͔̠̘̲̻̩͇̫̲͙̘͕̱̝̝͓̰͖͔̠̱̥̘͚̦̟̫̜̗̟̜̮̼͉̳͚͇̭͍̳͈̦̱̪̣̬̝͙̦̟̂̒̈́͆̀̑͐̅͂̊̅̍̍̂͒͋̒̅̽̂̄̊̄̔̂̓̄̍͘͜͜͜͜͝͝͝ͅͅṊ̶̛̈͂̎̂͛͂͋̐͗̈́̈̏͒̔̓̈́͒͜͠Ǫ̷̢̧̙̣̳̖̮̝͕̱̬̖͓͇̞̼̼̭̺̘͎͕͎̙̬̙̝̖̰͔͓̖̘͖̻̻͚͇̺̯̲̅͂̇͋̂̂̐͋̑́̃̈́͑͐̎̅̌͊̐̿͜ͅ ̵̡̢̨̡̖̥̳̦̹̱̰͉͎̬̺̖̠͙͎̳̦̯̳̺̦͓̦͍̻̥̰̭̽̈́̔̾́̀̒́͗̅̑̔̃̈́́̀̅̎͘̕͜ͅͅĒ̴̢̢̠̯̜̗̣̻̥̝̭̱̹̦͈̇̂͋͗̽̀̃̓͑̀̌͑̇̓̒͌̊̍̀̏̒͗͗͂́͂͆͌͗̌͗̒̑͋̉̄̑͋̃͌̌̚͘̚͘͘͘͜͝͠͝͠͠ͅS̸̨̡̨̢̛͕̻̱̠̼͉̲̭̖͖͖̲̯̜̪͙͇̲͓͖̭̹̩͖͙͉͚̻̤̹̗̬͎̟̥͖̤͕̪̲̘̟̼͙̥̲̗̘̫̖͓̥̮̼̤̲̘͈̥̻̮̏͗̈́̏̌̍͗͆̇͐́͛͑̆́̈́̽̑͒̆͐͐̋̿̓́̍̂͒̓̈́͒̉̋͛̎̉́̿̄̏̈́̎̿̆̈́̕̚̚̚̚̚͜͝͠͠ͅͅC̷̡̡̨̘̞̪͔̗͍̙̭̘̮̩͙̱̭̳̭̰̟̘͙̝͌͛̉͐̽̿͋͋̌͊͋̋͋̂͋̆͒̈́̏̓͛͒͊̅̀̀̓̒̆̈́͐̈́̇͗̍͌͛͗͛̇̃̓̚̕̕͜͝͝͝Ą̶̛͔̭̣̠͈̯͈̭͓̫̤̟̹̙̫̜͖̆͛͐̂͂̎̑̽͑̈́͛̌̌̇̋̽͌̎̀͑̽̀̾̈́̈͑͐̓̏́̃̓̐͗̃̃̒͗̋̌̀̍͑́̓̇͗͋͐͋͌̌̅͑̀̚̚͘͘͜͠͝͠͠͠͝͝ͅP̷̨̢̢̧̧̢̟̪̖͓̭̦̺̭̹͔̲̻̜̪̰̖͚̣̭͇̥̺̪̙̞̪͚͓̻̜̩̮͔̼̖̘̬͛̇̊̽̎̌͆̍͐͌̆̂̾̊͂̍̓̌̂͌̆̓̅̽̏̀̄̆̾̏̐͑̈́̈́̏́̄̃̈́͂̓̓̄͌͂͆̊̇̐̈́̀̀́̊̒͐͘̚̕͜͝͠͝͝E̸̢̛͎̯͍̤͎̘̝̤͎̫̳̯̗͕̹̣̠̟̮̩̤̠̯̠͕̤̭̜̗̭̥̩̦̣̙̤͆͛͋͆͑̇̿͑̃̄̈͛̄͑̈̐̏̇͑͗͐̐͐̒͗͑̔̓̈́́̋̾̓̈́̈́͂̊̀̾̂̆͆͐͌̊̌̉̚̚̕̕͜͝͝͝͝͠͝͝ ̸̢̧̧̨̨̧̖̺̤͈̘͓͉̣̘̝͉͙͈̤̹̥̥̬̦̜̺̭͓̫̭͚̫̣̩͖̥̰̺̭̭̝̯͚̫̬̠̼͍̝̋͐͊͜S̴̨̡̢̢̧̢̢̨̢̛̲̭̞̝̰͓̗͓̮̼̖̬̘͈̥͖̭̭͚̖̜͉̺̙̹̱̩͔̭͙̪̗͎̻͇̗͎̟̝̫̫̙̱̭̫̺̟̖͔̯͒͆̒̄̉̉̄̒̐̉̔͆͆͂̉͌͊͗͑͗̃͗̀̇͊͌͛̀̀͑̈̃͐̍͐͑̑͆̕̕͘͜͜͠͠͝͠͝ͅͅͅŲ̵̻͓͈̠̜̠̤͎̠͉͈̭̥̳̞̀̄̀̀̈́̃͘͠͝S̵̢̨̡̡̢̢̨̨̢̨̛̖͚̠͖̻̣̤̠̲̥͖̜̰͍͍͉͔̣͔͙̞̙̳̟̟̠͙͈̞̙̤͔̝̞͍̹̜͍̪̜̹̘̣͕̩̱̦̥̮͉̟̭̤̞̥̹̤̠͇͇̩͎̤͎͔̯͎̏̓̔̔͐̈́̽̓̒̉̓͒́̓͛̄͊̉̏̆̈̉̾̈̀̌̾̽̍̃́̋̅̄̓̾̂̒͜͜͜͜͜͠͝͝͝ͅS̷̹̘̊̈́̀̈́̂̂̄̀̒̉́̐̀͌̉̾̉͛͊̓̇̍̇́͊̊͆͋̇̍̉̇̈́͂̓̍̐̎͋̂̏͘̚̕͝͝͝Y̷̨̡̫̟̣̞͇̳̺͖̲̤̹̯̩̣̫̬̳͕̲̘̠̮̘̳̜̘͎̜͙͇̹̞͉̝͔̻̦̳̜̜̝͙͔̰̓͋ͅ ̸̡̢̨̧̢̨̢̛̛͔̹͕̪̤̣͍̬̮̪̣̩̝̝̬̺̣̪̺͉͈͕̠̼͈̠͚̹͖̙̦̲̝̣̠̖̗̜̝͚̲̲̰̣͕̭̗͖̖̳̞̣͉̖͍̘̱̠̼͔̫̜̳̱͇̜̳̩̻̞̩̦̽͗̉̍̓̀̄̂́̔̿̉̏̅̽͐͒̈́͒̈͑̅͌͂̀̋̅̌̿͛̏̊̈́̀̐̀́̋͌̃̿̋͐̕̕͘̕͘͜͜͝͝͠͝͝͝ͅB̴̢̡̡̨̨̧̧̨̛̼̰̯̱̘̟̳̙̭̯̘̯̜̬̼̻͇͇͓̲̥͙͓͇̠͚͍̫͍̭̮̩͕̩͔̲̟̜͌̇̋̄̿̔̈́̇̃̀͐͑̈̆̀̄̿͐̆̇̆̅͂̎͌̌͑̒̈̀̇̒͛͘̚͘͜͜͝͝͝ͅA̵̧͚̭̝͒͆͗̌͛͗̀̉̈́̉̀̔̀ͅK̵̡̭͉̪̮̏̋̓̋̿͊̂̿͊̀̽̾̃͊̌̿̑͑͐̚͝͠A̷̡̢̡̞͈͇̝̘͇̙̘̦͔̥̹̲̯̼̤͓͙̘̯͇̳̙͇͍̖̟̹͎͕̙͔͖̳̬͚̙̯̺̦̮̖͇̲̦̰̕͘͜ͅͅͅ.̸̢̧̨̢̮̖̮̩͔̗͇͕̼͙̦͎̯̙̗̮̪̤̘͇̙̱̺̳͉͔̗̠̫͔̜͖̟̩̯̮̝̱̖̰̗̲̩̩̥̫̻̘̥͔̯͉̯̙̣̩̥͖̮͙̣͗̃̈́͒̇̈́̃̿̒͊̏̂̓͛͊̆́̿͑̕̕̚͘͜͝ͅ
0 likesŢ̵̧̯̫̭̆̅̍H̷̢̪̀̕E̸̼͍̗̙̋́̈́̚R̶̰̦̿̒Ę̴̖̹̹͊͂̑ ̸̤͉̟͊̿̉͘̕I̶͖̤̳̋̎̿͋̈́Ś̷̯͕̩͒̌͐́ ̵̘̼͋̉͘Ń̸͔̍̉͒͠O̸̢̱̙̟̪̓ ̷̝͖̪̻̈̈͌̓͜E̴̢͓̫̙̾S̵̢̝̊̚C̸͓͗̈́̌̾̃ͅA̷̗̘̳̍̇P̵̩͒̒̚E̵̳͖̊ ̵̟̗̳̞́̈Ş̷̱̳̘̉̉̕͜͝U̸̲͑̊͝S̵̛̮͎̀͛̽̑S̴͓͔̉̒͒Y̶͕̏̅̊̓̈́ ̶̡͒̽̌̀B̸̠̤̈́̔A̵͋͜K̵̘̉̍̀͝À̶̬̞͐̀̊́.̶̦̱̲͚͇̈
0 likesthey don't even encrypt it? probably a trick to make people using ms account.
0 likes2:20 Microsoft, in fact, gave up so hard they are killing NTLM entirely! Options to disable NTLM in a domain network were present some fifteen years ago already, but now they are realizing NTLM security is so bad they are phasing it out even for LOCAL accounts! They are experimenting with a "Local KDC" system in Windows 11, or, in other words - abandoned NTLM and just use Kerberos. Yes, for local authentication.
1 likeI'm not even sure which solution is worse....
Good to know that the leading operating system with billions of users can’t get basic security right 🫡
0 likesDon't worry, I use openSuSE Tumbleweed.
0 likesDont use that piece of shit of windows 11 at all
0 likesCan you go into the mechanics behind custom login processes? For example, SAASPASS allows you to literally have 2fa on your windows login. What does that look like on the backend? How does one set that up in the registry and in GPE? I'm curious about how that works!
0 likesCvbcv. Bgb gc
0 likesThe question is: have they always sucked or those fucks just changed it to discourage people from using security questions?
0 likesYour accent is so cringe, just as cringe as your English
0 likesReplies (2)
❌️
0 likesOk, Dick 👍
0 likes@Enderman
0 likesfunction RUSSIA(){
console.log('Going to make new channel!')
name = "EndermanRU"
username = "EndermanRUSSIAN"
ytAPI.createChannel({ repo.SECRETS ENDERMANS_PHONE } + {name} + {username})
make ENDERMAN do RUSSIA();
Microsoft doesnt give a shit about the security of their own products anyways. No matter if its a UAC bypass with thread injection or a null pointer deref in the kernel, unless its actually being exploited they dont care. I mean in the end im not complaining about microsoft making DSE bypassing a piece of cake.
0 likesbebebebrbrbrbdbdndjdjfkfnxjdnfbdnfb fhfhfhfhf
0 likes