The trick is you just press CTRL + ALT + DEL while you're on that screen and you sign back in :p much faster


i really like these casual less-edited videos where you just explain as you go its more natural i feel

I agree! I prefer to hear someone explaining than to just read subtitles.

Also helps that there isnt as much earrape music in this type of his videos


Thats great. Microsoft even forces you to select security questions

For real, i avoided it because it's unnecessary to even have at first place.

So annoying to have to sign up with no password and when you're in create one just to not make those.

Mine are A, A, and A, so now people can hack me 😱 wait.. they need physical access… my password already sucks! I don’t need to worry

at least for windows i just set them all to the same thing, not worth my time filling them out, not secure but i dont keep anything on my computer that need to be secured, especially with how easy it is to break it, and im not setting up bitlocker and AD credentials for a home network lol.

Edit: although i will probably share this with my companies SOC as they are always look for attack vectors and how to block them

Nope, skill issue.
Just choose no password at all and set one later (through [Ctrl]+[Alt]+[Del] for example). It only asks you to set them upon account creation if you choose a password.

Nope, skill issue.
Just choose no password at all and set one later (through [Ctrl]+[Alt]+[Del] for example). It only asks you to set them upon account _creation_ if you choose a password.

@@fuseegelee I did the same with my Password Hint

Microsoft really out here forcing you to be more vulnerable to being hacked 💀


Not even my gibberish keyboard mash security questions are safe! Thanks, Microsoft.

"What is your dog's name?"<br>"Wuuswh<@^-<&"

"What is your dog's name?"
"Wuuswh<@^-<&"


"security and privacy? whats that?" - michaelsoff


Microsoft: “We value your privacy”<br>Also Microsoft: “Not only is forcing windows recall (aka spyware) on us, but also stores Security Questions in plain text”

Microsoft: “We value your privacy”
Also Microsoft: “Not only is forcing windows recall (aka spyware) on us, but also stores Security Questions in plain text”

@@maddox5081 didn't they change it to be off my default lol

@@H3llfire320It still stands that they've baked it directly into Explorer - they certainly want to force it to be always on later.

@@H3llfire320 Yeah but they’re trying to make it mandatory now saying it was just a “bug” that you could disable it


Two more things that would be interesting to try:
* What happens if there are less than 3 questions in the list? Normally Windows never lets you select less, but can you do 2, 1, or even 0 questions?
* What if you use crazy UTF-16 text for the _answers_? Obviously it'll be impossible to type, but can the validation algorithm handle that correctly?

Two more things that would be interesting to try:
* What happens if there are _less_ than 3 questions in the list? Normally Windows never lets you select less, but can you do 2, 1, or even 0 questions?
* What if you use crazy UTF-16 text for the _answers_? Obviously it'll be impossible to type, but can the validation algorithm handle that correctly?

I think you can enter most things by using the Alt Gr key and some number combination ;)..


Microsoft Edge's password manager also stores all its passwords in plaintext (well, not really, they are encrpyted but with a key that's in the same directory as the database... whoops).

id be curious if its just edge or every chromium browser as well

if it's encrypted, but the key is stored in the same database, why even bother encrypting it?

@@tmc249TLDR: yes, always has been, google denied it as a security issue but recently added an option to encrypt them with a master password. Not sure if edge already has this or not, it's usually a few versions behind.

@@starleaf-lunathe key is encrypted with your windows user's password. So an offline disk dump is useless if you don't know the password. (In theory at least, like enderman said, windows password hashes are a joke)

@@tmc249 That's why you should never save any password in any browser, even if its Brave or Librewolf or whatever. The best password manager is your own head. :D

@@mjdxp5688 You should never store your password in a browser's password manager no matter which browser

Firefox and every Chromium based browsers do that too.

The only secure way of storing passwords is something like Bitwarden

Same with chrome and firefox, there isn't really a way unless you setup a separate password, which most users don't

And anyway, if you got system/physical access, why care? The game is already lost and you can do whatever

@@starleaf-luna it will be encrypted for user comfort.

@@mjdxp5688 Chromium does the same. Overall storing data safely is not possible on Windows because of bad app system / permission system (unlike Android / iOS where apps cannot steal passwords without cracked / fully rooted phone)

@@nezu_cc I see, so it's just an extra layer of annoyance that the theoretical bad actor would have to crack.


I remember years ago I just opened regedit using utilman on the lock screen and found all the security questions inside the sam folder in there lol


i feel like bad actors could use this to get personal information like what your real name is<br>also what happens if you set only 2 questions or a question that has no question prompt but an answer

i feel like bad actors could use this to get personal information like what your real name is
also what happens if you set only 2 questions or a question that has no question prompt but an answer


4:25 andrew and ashley is not a good idea

@@lmnk Look up the names on Google, you'll find out

@@lmnk it’s about the game the coffin of andy and leyley. That’s all I’m saying


11:44 bro got rickrolled by a code editor ☠☠☠


"only one of them are real, the rest are virtual"

Me who knows that you're using a virtual machine and that ALL of them are virtual:


So thats another reason to skip adding a password during oobe and setting it afterwards, I never liked security questions.<br>I wish there was also an option to disable the password hint, but you can write random gibberish to that at least.

So thats another reason to skip adding a password during oobe and setting it afterwards, I never liked security questions.
I wish there was also an option to disable the password hint, but you can write random gibberish to that at least.

@@ezequieldom641 Did youtube make oobe a clickable search automatically or did you make it? If the latter, how?

when the hell did YouTube add a search feature to comments? the word “oobe” was blue and had a search icon

@@kab43 finally YouTube adding something that sounds useful

@@ezequieldom641 it’s a youtube search, not a google search. so close yet so far

@@ezequieldom641 I just type space as the password hint, it works

@@ezequieldom641it's just the tik tok search button

@@kab43I've seen this tomorrow on other videos

Is there no option to disable security questions?

I thought there is... But I never set password to my PC as it's my home computer amd I don't have a laptop at all to think about setting password

@@ivancomp_inside Nope, there's not, at least during the setup phase<br>I can't tell if it could be disabled afterwards but knowing Microsoft it's unlikely

@@ivancomp_inside Nope, there's not, at least during the setup phase
I can't tell if it could be disabled afterwards but knowing Microsoft it's unlikely

Or, as a matter of fact, you can just leave the hint blank just by putting a regular space in it - literally hit your space bar!


I swear 90% of security issues in Windows can be solved by running your main account as a limited user and only elevating permissions when needed.

The problem is that most software can't be installed without admin. Linux solves that problem using package archives (.deb, .rpm) and trusted package repositories


That's why I on OOBE I make account without password, and add that then, on desktop.
But I'm considering use cmd/powershell instead of Settings app, so I can skip creating password hint as well.

Another dumb thing: forcing you to create less secure PIN when you add your fingerprint. Thank Microsoft I can include letters and symbols to PIN, effectively turning that into a password.

if you change/set you password on the security options screen (ctrl+alt+del) you don't have to put in an password hint

just put no password then instantly shift f10 and do net user "user" "password" and thats it@@msedgeundwinfan

@@tapafon_red The PIN is just as secure if not more secure because it can not be phished and/or bruteforced as easily


Its even worse. If you're using EFS (Encrypting file system), and have security questions enabled, the questions can decrypt the EFS private key, and gain access to encrypted files. This renders EFS completely useless. All an attacker needs to do, is extract the security question answers from registry, and ask windows to reset the password (in winlogon), and boom, suddenly they gain access to "encrypted" files. (btw, I tried this in a Windows 10 VM 21h1 but it might still work on newer versions).


@@DraidK yeah he almost got banned for making videos with trustedinstaller


Isn't this why Microsoft recommends you use a Microsoft account? You officially aren't really supposed to be able to make a local account on Windows 11 Home anyway... Wouldn't be surprised to see server and pro editions following suit.

Not saying this isn't bad though, honestly shocking how they don't encrypt this

you can make a local account just you have to do extra stuff to do it

@@SOTP. Exactly my point, it is a chore to create one - it isn't the intended method of account creation for a new user.

They HAD option to make local account on Windows 10. And they ALSO required to make security questions.<br>And they, most likely, also stored in plain text.

They HAD option to make local account on Windows 10. And they ALSO required to make security questions.
And they, most likely, also stored in plain text.


Screw the error-filled computer just this once. Embrace Cat.


loved the THERE IS NO ESCAPE tidbit, wow that took me back


Microsoft : We do things for your privacy. We care about it.<br>Also microsoft : Does not fixes RTLO attacks and hidden file extension attacks

Microsoft : We do things for your privacy. We care about it.
Also microsoft : Does not fixes RTLO attacks and hidden file extension attacks


Supposed to be researching on IoT but I'm gonna stay here

DUDE WHAT I WATCH YOUR VIDEOS NO WAY @@xpower7125

Same level of security. Hence probably a Majority connects to microsofts azure cloud servers or chinese tuya servers


16:22 Жду чтобы это было в NoEscape 🔥

16:22 Жду чтобы это было в NoEscape 🔥


Bro just hack windows in couple of minutes pov me:Trying to guess security questions in 10 hours

@АлександрДаньков-х2ь


you can also use a windows installer to gain access to trustedinstaller perms, so assuming the computer can boot into the installer, you can take whatever from wherever you want


Lol the obvious NoEscape reference was so funny to me


11:45 ain't no way you didn't hardcode that🤣

@@jajoothecoolman hardcoding is when something important like the main function is set in stone in the code instead of being something you input.

here enderman made the replacement q/a part of the code itself, meaning of this was compiled to a .exe it could only make one set of questions


why dors microsoft even force you to do these? makes me have to spam my keyboard, AND NOW THAT IS EVEN NOT SECURE?????


So I don't think this is as big a deal as you might think.

One scenario is where you have a local admin account on the system (which you need to access SAM anyway). In this case, you can just reset a user's password directly and take control of their account. Security questions don't matter here.

Another scenario is where you don't have access and try to guess the security question answers. In this case you can't see the values in the registry so it doesn't matter how they are stored. If you can get access that is a separate problem and how they are stored doesn't matter.

Last scenario is if you pull the hard drive or boot from an alternate OS from a CD or USB stick. In this case if the hard drive is unencrypted you can definitely get access which is a problem. Of course you also have access to all the user's data anyway that they haven't encrypted so that is a concern as well. BUT if they've used Bitlocker then you still can't view the security questions since they are encrypted with the rest of the drive, unless I'm mistaken about that. AFAIK Bitlocker should be enabled by default on new Windows installs now.

Should the security answers be better protected? Definitely.  Only other thing I have to say is there could be some dumb reason they can't (such as allowing partial string matches).

Exactly what I was thinking the whole video<br>Like it's not accessible, and when it is, everything is accessible

Exactly what I was thinking the whole video
Like it's not accessible, and when it is, everything is accessible


The reason why you couldn't see it at 3:45 is cause once you leave the textbox,it hides the eye button.if you want it back,you gotta remove the ENTIRE password and type it again. leaving even 1 character wont show it.


I haven't fooled around with security questions to know for sure. But maybe it's stored in plain text in order to be able to compare between the expected and given answer to pass even with small differences like punctuation?


I always hated them. I was thinking that why does M$ want to know these private details about me. Anyways, is there way not to enter them at all?

dont set it at oobe and set it after you go to desktop, it doesnt ask as ik

@@HAKANKOKCU Last time I installed it in VM it did not give me any option not to set it.

@@test-rj2vlwhen it asks for the password leave it blank


Maybe MS decided to keep them unencrypted so they could do some level of fuzzy matching? Like if you typed "Tokyo" in OOBE but tried to reset with "tokyo". Or removing extra whitespace from answers or something like that


2:40 oobe part that says "Hi" is also selectable


0:35 ngl i would be just as annoyed if i dropped my ice cream


SAM is protected by System permission. If a hacker already has System might as well not have any passwords at all because you're already pwned regardless. As to why experts recommend not using security questions, its because it's easier tu guess especially if you know that person. But you can just write gibberish as the answers. And psst hey here's a secret..You can disable security questions in group policy.


AIs in code editors are so funny when you do strings, sometimes i get random things like "you will be rewarded with a free robux" or "THERE IS NO ESCAPE
THERE IS NO ESCAPE
THERE IS NO ESCAPE
THERE IS NO ESCAPE
THERE IS N"
Aside from that, this remembers me of chromium storing password in plain text


I know English is already the language of the world and most Slavs including Russians are often fluent in it, but it makes me wonder if Interslavic will ever be a popular language.

Why would it go away?  I guess if he really made an effort to get rid of it but one would have to care a lot to bother to do that.

@@R1ch4rd you don't have to watch.  Plenty of other YouTubers.

@@mix3k818 Easy to speak, hard to remember. So, no.<br>Russian could've become an inter lingua on Post-soviet space potentially, nowadays it's in the past mostly

@@mix3k818 Easy to speak, hard to remember. So, no.
Russian could've become an inter lingua on Post-soviet space potentially, nowadays it's in the past mostly

@@Aeduo you don't get to tell me what to do.

@@R1ch4rd just a reasonable suggestion to avoid being annoyed by someone's accent.  Pretty silly thing to be bothered by though.

@@Aeduo nothing silly to be reasonably annoyed by a genuinely annoying thing.

@@wathuh7114 No, he's born in Kaluga, Russia

@@R1ch4rd you're probably the only person who finds it annoying in this reply chain (that said, I can't blame you for it either)

@@mix3k818 oh my guy, you're massively mistaken about Russians being “fluent” in English. Russia is one of, if not THE lowest English proficient country out there. And this Russian guy is tryna showoff and be "better than everybody" type of sh. When in reality he's not. So annoying and disgusting.

@@Bowling4986 go ahead and blame me, idgaf

Yep. His great Russian voice. Also... for the person saying the C-word (cringe), YOU ARE AN IDIOT.


I mean, I'm not sure this is a security hole. You need to be an administrator to perform this. You can already change anyone's password if you're an administrator. The only problem with not hashing the answers is that an administrator can read them - and your answers should probably not contain sensitive information. So while they don't increase security, I'm not sure that they decrease it at all.

Many people lose their passwords and get saved by security questions. Which only someone with your computer can answer.

@@MuhammadDaniyal-wk3hp Nonsense. If you lose your password just reset it. All you need is any usb drive with windows on it. You don't need security questions.


@@Checkm8ra1n for most work, yeah, none of the companies should use windows.. its so unsecure..

@@vrajb210 but its not good for warzone and fortnite. Anticheats dont work on linux, but if they did,bi would switch immediately

@@cruelcat870 nah use ms-dos. security through obscurity

@@cruelcat870 nah use ms-dos. security through obscurity

@АлександрДаньков-х2ь

Use x86 androi- oh i forgot about the google preinstalled shit ware

Use x86 androi- oh i forgot about the google preinstalled shit ware

@@cruelcat870i installed android x86 on my old laptop, super easy

@@cruelcat870i installed android x86 on my old laptop, super easy

@@noquality3587how to tell someone has never used linux:

@@noquality3587how to tell someone has never used linux:

Macos is a cheap mod of linux tbh@@vrajb210

Macos is a cheap mod of linux tbh@@vrajb210

@@u8_muser_official if you care about privacy then it's a good reason to switch, other than that it works fine

@@saveliyivanov9943 i WILL keep using windows

@@saveliyivanov9943 i WILL keep using windows

@@AblsmnIIRC BlissOS provides a microG edition, so at least that's an option to avoid Google.

EDIT: Looks like there's even vanilla builds which have neither GMS nor microG.

@@Checkm8ra1n I'd rather cut my dick off than do that

@@Checkm8ra1n I'd rather cut my dick off than do that

Use [insert other OS that is not linux, macos, windows, or templeOS]

Use [insert other OS that is not linux, macos, windows, or templeOS]

Me: Uses Windows 7 & 11 on the same computer, and a Ubuntu VM

Me: Uses Windows 7 & 11 on the same computer, and a Ubuntu VM

@ٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥ

A lot of games don't run on linux or run poorly on linux, the same goes for a lot of software, that's why I can't use it.

why is windows bad and why should I use alternatives (and what alternatives should I use)?

@ٴٴٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥۥٴٴٴٴۥ

Yeah use Linux and have it die on you while doing anything critical and it updates.

@@Checkm8ra1n I don't like Apple but I'd use anything but Windows

@@Checkm8ra1n I don't like Apple but I'd use anything but Windows

Stop making unrealistic comments. Linux is infact NOT for everyone. You may not think it is, but Linux is infact still a niche.

Holy shit from one Linux user to another THIS IS A WINDOWS VIDEO STFU

Holy shit from one Linux user to another THIS IS A WINDOWS VIDEO STFU

@@lynixfox6009 I think only people who need special tools that only work on MacOS or Windows can't use Linux as a daily driver. I think pretty much anyone could use something like ChromeOS and then escalate from there to something more "advanced" like Linux Mint and go from there.

As a Linux user THIS IS A WINDOWS VIDEO S T F U

As a Linux user THIS IS A WINDOWS VIDEO S T F U

I'm still using windows I'm <b>NEVER SWITCHING</b> to windows

I'm still using windows I'm *NEVER SWITCHING* to windows

@@vrajb210 true, but macOS is objectively better than Windows as well lol<br>Microsoft moment 🗿

@@vrajb210 true, but macOS is objectively better than Windows as well lol
Microsoft moment 🗿

@@noquality3587 only study things of Linux, before say thing you don't know only search on Google how to install or be your self and self learn

Why are Linux users make it feel like Linux is the best thing in the whole entire world without any problems or glitches

@@Mason219 you know no one using android

@@Mason219 you know no one using android

@@michaelepica3564look at the corporate tool defending the multinational

@@michaelepica3564look at the corporate tool defending the multinational

@@rin_reverie frr but linux is more optmized

@@rin_reverie frr but linux is more optmized

@@Phan1hsmillions of phones in the world.....

@@Phan1hsmillions of phones in the world.....

@@cedricsonaquevido1565

Simple, windows is bad (especially win11) because of spyware, adware, and bloatware that comes with it by microsoft
The alternatives, well you can use linux

Today's mission:
Mission: Install arch
Reward: gain "I use arch btw" title

Today's mission:
Mission: Install arch
Reward: gain "I use arch btw" title

@@Cart1416so underrated but  barely usuable

@@Cart1416so underrated but  barely usuable

When Windows 10 support stops working I will use directly Ubuntu or any good system for games and programming in Linux.

Windows 11 is shifty asf. Bad interface. Bad security. Stupid IRM obligatory (wich can be easily bypassed) Bad support. Simply a bad system in my opinion . I use Windows only for commodity of not using code almost all of the time using a system, but I think I will get really easy using Linux. And that would help in a future work

@@partedgemwhat is gaslighting  (I'm gen z and I'm terribly outdated xD)

@@partedgemwhat is gaslighting  (I'm gen z and I'm terribly outdated xD)

@@C00LSH4RKUbuntu is just about as bad as Windows. Use Mint or Zorin.

@@C00LSH4RKUbuntu is just about as bad as Windows. Use Mint or Zorin.

@@torn5278 The hardest question in programming

@@torn5278 The hardest question in programming

@@MinecraftGrassBlock 99% of gamed run and i dont think ppl should let kernel anticheats just on their pcs

@@Z_fentomFentom cod, fortnite, roblox, gta 5 and others don't run on linux, and also lots of software is unsupported

@@MinecraftGrassBlock i litterly said expect kernel anticheat games, and just cuz some software dosent run dosent mean there arent alternatives + if there are no good ones u can use a virtual machine for those so i dont see the isue

@@Z_fentomFentom why have a windows vm to run software instead of just running it on windows normally?

@@MinecraftGrassBlock cuz windows is bloat,spyware and unstable, i have had lots of expirence with windows for over 3 years and its really unstable compared to arch

Welp sadly i didn’t know at the time when I first got a window pc it was not good thing to use

@Z_fentomFentom  I have never had any issues on windows and removed all spyware/bloat, windows is the most stable os i have ever used

@@saveliyivanov9943 forgive me Luke smith,  but I must game.

@@saveliyivanov9943 forgive me Luke smith,  but I must game.

Bruh...
I am not using a PC...
Only Android...
...
🤣

Bruh...
I am not using a PC...
Only Android...
...
🤣

@@Marlon-fi6sb then they weren't talking to you

@@Marlon-fi6sb then they weren't talking to you

@saveliyivanov9943  I still using windows 11. 🫤

@saveliyivanov9943  I still using windows 11. 🫤

i don’t have a choice, playing vr without windows has been way too hard to do on linux for me especially with a nvidia card

@boogiehasfun  Sorry to hear it, that's why I still use windows.

@boogiehasfun  Sorry to hear it, that's why I still use windows.

@@SirPlaysDarkSoulsALot I agree with this Ralsei

@@SirPlaysDarkSoulsALot I agree with this Ralsei

im switching to linux... imma install playonlinux there to run my apps from windows

@@mrowlsss cuz doesnt matter if someone uses windows 11 while some "tech expert" says that theres a ton of security problems. "OoOh JuSt UsE lInUx!"<br>just let everyone use their computer smh

@@mrowlsss cuz doesnt matter if someone uses windows 11 while some "tech expert" says that theres a ton of security problems. "OoOh JuSt UsE lInUx!"
just let everyone use their computer smh

@@SirPlaysDarkSoulsALot absolutely bro. I personally use Ubuntu, but I'm not out here shilling Linux at every turn. This is shit is so annoying

@@mrowlsss i have a friend who uses arch linux who thinks hes better than everyone for using the "superior" alternative<br>i just use windows 10/11 for the convenience that it supports a ton of software that i use and that its pre installed most of the time

@@mrowlsss i have a friend who uses arch linux who thinks hes better than everyone for using the "superior" alternative
i just use windows 10/11 for the convenience that it supports a ton of software that i use and that its pre installed most of the time

I don't care. I will use windows because apps I need are only in windows.

I don't care. I will use windows because apps I need are only in windows.

I am not learning how to port programs just so i can use a better os. Also anticheat no likey linux

@@partedgem oh no, windows is bad sometimes, but stop shoving Linux in peoples faces.

Because everything in Linux is so secure and it also never breaks down and is so perfect

@@gamergod_yt3053 gaslighting isn't even a new term. It's basically tricking someone into thinking something happened when it didn't

@@cruelcat870 android is Linux btw. And I'm pretty sure android isn't a pc..

Linux = android

Ios = Mac

Windows... = window's....

Linux = android

Ios = Mac

Windows... = window's....

Another thing is using windows AND linux or whatever you want through dualbooting

Базанул, но большинство фанатиков эндермена - виндузоиды

Базанул, но большинство фанатиков эндермена - виндузоиды


Kitties! You should do a video just showing off your cats.


I love joining early to the premieres, the description is like: Links? Later


oobe is so scared of Enderman it just breaks without him doing anything


i rlly like these more casual styled videos, pls do more


Video idea: bricking a windows system by flipping a single bit of


yo what? You dont get the option to skip it?

@@themen3ace yup. That's why this is so bad.

You can only skip these questions if you use command prompt to create the user account (or I think you can also use computer management in Pro editions) and then delete the previous one which has the security questions<br>Edit: or you can just leave the password empty during the OOBE ;)

You can only skip these questions if you use command prompt to create the user account (or I think you can also use computer management in Pro editions) and then delete the previous one which has the security questions
Edit: or you can just leave the password empty during the OOBE ;)

just setup the oobe like normal but in the password field don’t field anything just press to skip the password field because on windows you can go to control panel and create a password it will not ask for security questions


That was a great video. Good thing I never setup the security questions for my windows account anyway.

Even worse, your password isn't secure either..

@@jynz_l hello Roblox guy who made windows 10 in boblox

@@thepenguinbird sorry, i only made windows 11 not windows 10.


2:49 you definitely dont want magic to happen when you are an sorcerer on your own


Remember guys, password in the system without any encryption is the password to prevent your toddler accessing the PC or to prevent your random classmates from googling black-orange YouTube when you don’t look at the laptop


14:00 I love how Windows doesn't even warn you, when you've reused the same or older password. Which is usually a Microsoft thing. 😅🤣

#BrokenW11


7:45 i love how he accidentally says "or 3 и (russian for and) 9"

Nice catch! Though I was referring to the hex number 3E9...

It was literally "3E9" if you see on the far left, but that would be an interesting mistake.

hold on hold on, he's got a point. It does sound close to the slavic word for "and" (literally just 'i' spelled the slav way)

@@Aeduo trying to gaslight the author of the video that he made a mistake when the "3E9" hex is literally on the screen

@@Ginto_O Oh, yeah.  I dunno if I'd say "gaslighting", at least not very effectively.

@@Endermanch oh, I couldn't really watch the video much, so mostly I just listened


"Don't use Windows security questions"<br>"Don't use windows" was enough for me

"Don't use Windows security questions"
"Don't use windows" was enough for me


Omg Enderman uploading more videos!! 🎉🎉 You're awesome buddy you really explain in detail ❤


Can you do full Command prompt guide I think its cool and I don’t feel like searching every single detail and I would not even know what to search


These experiments are always great lol, just like bashing MS outright.<br>They really seem to be a security vulnerability in themselves, but oh well. Anyway, hope you have fun with your other projects as well

These experiments are always great lol, just like bashing MS outright.
They really seem to be a security vulnerability in themselves, but oh well. Anyway, hope you have fun with your other projects as well


That first zaglo one may be useful to outright dissble the questions


Wait.. people actually answer those questions accurately? I've put bogus answers for like 15 years.


I mean, if any service uses system rights to compromise your user account, they would already have access to the whole system...


It's crazy all the content you make, I love it! I've been following you for a while now, I never get tired of your videos!<br>PS: Not bad cats 😺

It's crazy all the content you make, I love it! I've been following you for a while now, I never get tired of your videos!
PS: Not bad cats 😺


This really surpass all the security breach with generic questions easy to decrypt

Now with this is more hard find these questions


jokes on windows back when it tried to make me use security questions i skipped making a password and made a password/passcode instead through control panel so it wouldnt give me the option to use security questions


The internet would be fixed if
A : They let you make a local account
Or
B : They let you make a local account


For anyone saying windows 11 is bad  i didnt got the telemetry thing and i didnt get aerformance drop,i guess thats good


Darn... This is quite cool from malware standpoint I must say... not for usual user, though! :D <br>Thanks for the video!

Darn... This is quite cool from malware standpoint I must say... not for usual user, though! :D
Thanks for the video!


Windows Security Questions: Hi
Enderman: GO AWAY YOUR USELESS
Windows Security Questions: 😭😭😭


Oh! Watching during premiere and it’s a video where my adhd ass will actually watch it because it’s a voiceover


Love your voice man, where are you from?


You can always use a Nokia 6303i Classic and watch your videos by encoding them in H264, making them 240x320 and 10fps at 3gp format. Trust me it is more fascinating than you think.


Same OOBE error happened to me, the date was correct though

Probably an ambiguous region was selected during initial ISO setup, like English Europe.

@@R1ch4rdworked eventually though? I didn’t do anything at all and it just did

@@jam06 it eventually works, that's correct, but the error still persists.


You can find owner email of a MacBook with diagnostic logs bruh


Actually, my dads friend (The guy who made my pc) didn't answer the security questions becuase he said "It's useless"


Here before the Enderman gets restricted by Google once again


Reminds me of how GD stores your password in your save file in plain text

you still have to decrypt ur save file ig lol

@@SOTP. It's not encrypted, just compressed with gzip

@@9vlc pretty sure it also uses xor and uses base64


What I've done for the last year or so is keyboard-spammed 30 or 40 random characters and used them as my security answers


I didn't test it because I always set my password in a way which bypasses the security question screen, but I assume they store it in plain text to make the matching case insensitive, also allow double space or whatever... Not that I would call that a good idea and say that there aren't other ways to do that like e.g., Facebook handles the password validation (checks with a few iterations)

They are probably stored in plain text to make it REALLY EASY for the NSA !


Imagine using windows in 2024 when proton lunches most windows apps anyway


i can now troll my friends with security questions


honestly these security questions are insanely stupid, like you can't even ask yourself a question that only you would know the answer to, you only get 5 or 6 very specific questions that make you have to make up stuff

heck, even if they just stored a hash or there were procedurally generated salts, people could figure out what hashing salts were used and then they could just brute force through a list of names or cities, so they gotta do better than that


That's why they are forcing ms accounts and windows hello lmao<br>Still wouldn't trust it

That's why they are forcing ms accounts and windows hello lmao
Still wouldn't trust it


Yet another case of "If you are admin, you can do admin things".

If you have the ability to read HKLM/SAM or HKLM/Security, then you must have already gained admin privileges, if so then why stop there? As admin you can just override any user's passwords, or just read/execute whatever files/programs you want, why bother with security questions?

Go on, try stealing other user's security problems with, lets say the builtin Guest account.


Hey enderman! I have a question, will you make a video about ULTRAXP again?

I will... I wish I had time to do something cool with it


Just from the information from the thumbnail, I honestly thought they would have been hashed as well.


i dont even have a password on my windows user


I never wanted to use them, it was oobe windows that forced me to do so


If you've got admin access to the system and wanted to change the password you could. You don't need to security questions to do that as you have system or admin powers. Seems kind of redundant to probe security question answers with a process that accesses the registry with admin privileges.

Should they store as plain text? Probably not... but would someone use this vector of attack when they already have access enough to do what they want? Not likely. Probably easier to scrape their system for browser sessions or something else.


The reason this is mega-mega bad: An attacker could use malware to get your security questions and their answers, and there's a decent chance some people will use the same security questions, and same answers, on different services. They can use that to gain access to those accounts.

what kind of hacker would hack secret questions if they can just steal cookies and not bother at all

@@mazellovvv for sites that force you to login every time, like some banks (mine does on the website)

@@mazellovvv because sometimes sites do log you out all the time, or some do it properly and invalidate the token when someone suddenly logs in with the same session token from across the fucking planet.

@@mazellovvv true but some people don't technically know about cookie logging soo they do this

@@mazellovvv Nah, its still good to steal just in case the cookies get invalidated. It's also more information, and more info never hurts


This is social engineering questions more than security questions


"Don't use Security question." What do we do if we are forced to put them ?


Приятно слышать тебя в добром здравии. Успехов!


someone at microsoft got lazy

does it really matter when NTLM is already easy to crack?
this also requires file/registry access. if someone has that level of access, I think there are more important things to worry about than the answers to the questions


security that doesn't even act like security


I watched this on the student transportation van on the way home from school during the instant premier


wasn't the password itself stored in plain text pre nt 6.0?


Microsoft just gave up on local security. Ig they just want you to use a Microsoft account.


First. Love you endermanch ur videos are amazing >3 My security answers are:

Afagdhetif
shfiafh we
duagdifen

Thats how I stay safe ;)


Process Hacker is now System Informer btw


Windows hasn't a security focused OS since never. Windows 8 started it all really.


hey dude, hi, two years ago I wrote a program to reset the password just through the registry, I was just thinking about how to decrypt it or, for example, make the user an administrator, maybe we should talk somewhere


You should report this to microsoft officially if you haven't. This is a major security flaw that could cause people's bank accounts (and other services) to get stolen if they use the same security questions on multiple services.

a normal user doesn't have access to sam, so this attack vector is very ineffective and targeted at a specific user. but storing the responses as a hash is worth it

not really, if you can access the data in the hard disk it's over anyway

@@thepwrtank18 not necessarily, not everything is accessible with access to the hard disk, especially with Microsoft pushing disk encryption so hard.

@@Boxersteavee Fair point, but the average user that bothered to force a local account still wouldn't turn BitLocker on. Of course, all MS accounts force BitLocker on by default, but those don't have security questions so they're a different subject.

This is not a security flaw, you have to get all 3 security questions correct. Also someone would need  to have your pc to answer them, which if someone had you would most likely be already signed in

@@MuhammadDaniyal-wk3hp i'm not even gonna bother with you, here's an answer from artificial stupidity:
Yes, storing security information in plaintext is a significant security flaw.

@@MuhammadDaniyal-wk3hp i'm not even gonna bother with you, here's an answer from artificial stupidity:
*Yes, storing security information in plaintext is a significant security flaw.*


you would think the security question answers would be secure...


What were those command prompts labeled "Select" instead of "Administrator"?

Would these questions be usable outside of a machine that you already have some elevated privilege on?  Resetting the password wouldn't unlock any encrypted files, and you already have free access to everything.  Would they be relevant to accessing the person's microsoft account if they had used a microsoft account login or is this just a separate mechanism only used in the case of a local only account?

Oh jeez, the art of war.  Could certainly be useful I guess depending what you're doing, but it's also the classic self-help book for dominant jerks.

It's labelled select if you click on something in the command prompt, nothing special


This is why linux is getting more popular and if you want to use a better windows then use react os


and this is the reason why i am still with windows 10

You think you're safe, but this is present in Windows 10 as well 🤦

@@invalescent I mean for the errors but ok

windows 10 is equally crap, nope it's more crap, enjoy ig

@@charginginprogresss Газ на баварецаааа


I'm glad I make my password after the install process is over with


Ok, you should not use security questions, because someone else who knows this person, could be able answer them, so far so good, but that is true for ANY platform that offers that, has nothing to do with Windows.

But why are unencrypted questions and answers in a part of the registry, that are only accessible by an administrator, a security risk for Windows? I mean if you are an admin, you can get direct access to that person, you don't need the questions then.


Windows isnt as secure as MS promised it is how pathethic


While this is obviously problematic, you can also just boot into Windows PE and reset the admin password (easier as you don’t need to have access to another admin account on the machine).

issue is you get answers to security questions that could also be used elsewhere


Try uninstalling edge and instal chrome and see after windows update


4:00
are the security questions really optional?? iirc, you are forced to include that stupid garbage no matter what.


Bro I didn't even know windows still had em


What if I enable bitlocker? Would it be safer? Or is windows hello safe(face recognition, fingerprint)? Or is a Ms account safe


THIS IS THE FUNNIEST THING IVE SEEN TODAY


I Like Your Videos, Enderman. It is Interesting


I wonder how many people after this video switched to Linux xd


okay i thought there was sharp corners until 7:12


Turns out, its not very smart to use Windows, what a surprise


What if you put less questions ? Like 1 or 2 or none at all ?


Enderman, Danoct, Flytech, Olivers Tech, ZGuardian, Eric Parker


Bro schools are going to be asking for ap math questions to reset the password


how could someone get access though? like how can they open regedit (with trusted installer access) if they arent logged in


How do you even skip the security questions then?


If you manually delete the ResetData key, will that disable the feature?


Is this actually a problem tho? If you are on a system where you could read the security answers to reset the password, you could also replace the password hash itself on your own and it’d have the exact same effect, no?

You can replace the hash, but you cannot read the password without cracking it. The same can't be said about the security question answers.

@@Endermanch right, but if you use the security answers you still have to reset the password right? Or does windows let you log in with just the security answers without resetting the password at the same time?


Sit back while Microsoft collects more of your data .. err .. updates itself =)


then how we can remove the security questions ???


4:37 how did you get it to just be toggles? I've seen that UI before but always thought it was just early W10. It looks so much easier to decline than clicking No then Next over and over. Is it a GDPR thing where they can't have it pre-ckecked so have it as options instead?


I was talking my friend through bypassing the microsoft account and windows somehow managed to boot past the OOBE with a user named defaultuser0 with no password. a reboot fixed it but wtf microsoft, can't even get your spyware right


so they couldnmt even hash it with an argon2 or even a sha256??


Hello, what version of Windows 11 or what day and year is this edition because you can skip without the Internet to install the account locally, thank you


how long i havent heard enderman's voice


Wake up babe, new Enderman video dropped and he used his voice


Do you use ltsc version? (I tested normal and ltsc and only ltsc let me to create local account) I heard they patched the disable internet cmd


Im not stupid i know my password, why I am obligated to do this thing??? For real, it's like the "Your password is not strong enough" Yes i know that and its my problem!<br>Btw, bro are you using a wood switch? Man whats is this sound?

Im not stupid i know my password, why I am obligated to do this thing??? For real, it's like the "Your password is not strong enough" Yes i know that and its my problem!
Btw, bro are you using a wood switch? Man whats is this sound?


Oh come on I don't want to use a Microsoft Account!! Let me keep my local account!!!


What app do you use to run this? I'm trying to see my answers.

@@SOTP. so i can see what i put and change it if i need to


I only type "1" as answer for these questions.


stupid fact: windows 11 is not windows 11 at all because it's still freaking windows 10


Microsoft, plaintext?<br>Seriously how old are you? 5?

Microsoft, plaintext?
Seriously how old are you? 5?


local acout can be eaily reset , how secure s  ms acount user ?


You have to use it you cant skip or something

dont set a password on oobe, then after oobe set a password and it will suggest using password hints instead

@@luisl173 Thx for pro tip love you bro (no homo)


They "fixed it" by forcing online account

Microsoft's motto: If it ain't broke, fix it 'til it is!


Who even uses security questions in 2024? 💀🙏


Not showing how to remove those if you put them before? awww


What is that even at the start?
Don't tell me it's the windows installation requiring a internet connection...
Why would you use windows 11?


we got rickrolled by AI before GTA VI 🤣🤣


Microsoft:Company worth a lot

Windows:Some 5$ shit from microsoft with 100 bloatware sold for 100$


Bro, I want to ask if you know how to make a virtual machine in a virtual machine. In VMWARE

@@nullnull8310 how have I not seen it? I may be blind


Windows 11 oobe is unbelievably long,i did windows 7 in 30 secs

skip the oobe entirely with autounattend. the longest part of oobe will be loading screens


Do more videos with voiceover please! It helps me focus on the content on screen, I don't have to take my eyes off the content to read the information being conveyed. That and I don't like the music you use.

Yeah, I wish he did more voiceover videos too. I like to play games and watch youtobe, when he voiceovers his videos i can just listen and play games


I never use password in my pc, my little dinosaur brain forget it😂


Dont worry pc has no authentication to login at all


how did you get that cursor in the @echo.%0^|%0›$^_^.c^md&$_›nul vid


Unrelated, but you should consider making a Bluesky account! I'd love to follow you there since Twitter is so full of nazi shit.


An offline account REQUIRES you to set them

It isn't any worse than a Google account, I have my Microsoft account since it was called a <b>Microsoft Passport</b> (to hell? 🤣) and Adobe Acrobat Pro required it for some stupid reason, maybe to activate it, I don't remember, it was almost 20 years ago.

It isn't any worse than a Google account, I have my Microsoft account since it was called a *Microsoft Passport* (to hell? 🤣) and Adobe Acrobat Pro required it for some stupid reason, maybe to activate it, I don't remember, it was almost 20 years ago.


I used that in a vm but the user pass is 123 anw


reinstalled to windows 10 and im so fking glad i did wtf was microsoft thinking oh i forgot its microsoft their brain doesnt function properly.

windows 10 has security questions that work in the exact same way


i one said my fav number is "uwu" in a security question


Also keyboard noises are now <i>not</i> safe, bc AI nonsense.

Also keyboard noises are now _not_ safe, bc AI nonsense.


This is not a security flaw, you have to get all 3 security questions correct. Also someone would need  to have your pc to answer them, which if someone had you would most likely be already signed in. Also nobody uses them and microsoft is probably the best company, they have made , Xbox Hotmail, Windows

microsoft employee detected, who are the two upvoters?

@@i_am_called_glitchy I just like Microsoft for everything that they have done, you are literally using windows right now.

@@MuhammadDaniyal-wk3hp womp womp im on arch btw


bro u shared ur information keep that private pls


I'm glad I don't use a local account anyway.


Bro why don't you make minecraft shorts I do that


Why are you called Enderman while you don't do Minecraft stuff?


Meanwhile Bitlocker can brick your drive!!!!


😢😢😢😢😢😢😢😢 u will be terminated its so sad 😢😢😢😢😢😢😢😢😢😢😢😢😢


This is kinda fucked up, legit even a newer scriptkitty could break into this.. I know the .ISO is free but Pro costs $200 Canadian and paying that much just to get this easily hacked? I'm thinking of switching to Linux

You are so dumb................ The person needs to have your computer to answer them, if the person has your computer then you would probably already be signed in 🤣Stop hating microsoft


First few minutes of you struggling with installing is not something I expected.


I always put 123 to the first 3 questions. I have a good password and a bootloader encrypted password. That’s enough of protection


продам гараж

продам гараж


Привет эндермен! я твой друг из россии и я думаю то что ты умеешь говорить на русском


Use code ANDREW in the Fortnite item shop <br>(dislike if you get the reference)

Use code ANDREW in the Fortnite item shop
(dislike if you get the reference)


Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux Linux


Even if it didn't store them in plaintext, "security" questions are still a source of insecurity.  They are a big target for phishing attacks, especially on social media, where they offer these stupid games like "Find out your VIKING name!  combine your oldest cousin's name with your mother's maiden name and your birth city"  And people JUST KEEP ON FALLING FOR IT :(


Ţ̵̛͈̜͈̪͕̺͕̥͕͍̺̊͒̌̎̈́̔͌͒̈́̀̊̋̈́̿͒̊̄̈͊̀̈́̃̿͂̏͆̈́͒̈̏̔͂̊̈́̃̈̇̃͆̈́̈́̌͛͑̀̒̑̋̽̆̐̈́̈̈̿͗̈̏̌̕͝͝H̷̡̧̨͔̭̤̹̬̯͎̼͕̮̘̳̻̺̲̯̙͉̩͇̣̖̞͚̜͚͚̲͈̱̺̭̹̤̤̮̩͚͐͂̇̌̑̋͘ͅͅE̴̛̊̽̉̄͐̒̏̐̎̈̅̅͗̒̍̾͐̽́̍̊͒̃̇̾͒͆́̃̉̾͒̐̋̅͛̾́̆̋͘̚͜͝͝͝͝Ŗ̷̡̧̧̨̛̙̝̰͔͍͕͔̰̮͎̫͓̟̹̜͚͍̲̍̊̏͐́̄̑͊͑̋̑̍͗̃̆̅̆̇̏͂͛͂̈́́̎͋̈́̿͆̈́̑̂̇͐̈́̈́̎̉͐̐̑̒̇̐̓̾͗̄̚̕͘̚͠͠͠͝͝Ȩ̸̨̨̧͓͈̮̺̱̩̼̦̭͕̫̻͖̲͎̞̹̹̳̭̮̱͈̳̮̰̗̪̤͈̞̭̲̥̘̰̰̼̜̲̣̯̪̝͕͉̮̖̬̣̣͔̗̥̙̠̫͇̞̟̣̖̗̪̒̈́̌̅͌̆̐̃̆͒̃́̽͐͋̕̕͜͜͝͝ ̴̢̧̧̨̧̡̘̯̭̬̤̲̘͔͇̬̦̜̥̟̮̫̫̳̜̯͚̤̘̫̬̜̰̺̜͍̹͔̭͓̞͖̝̺̭͓̣̗̝̙̹̖̱̺̟̮̟̲͉̤̼͓̺̰̺͓̣̳͇͍̭̘̾͑̔̃̃͊͂́́̅͑̃̈́̉͒̌̑̈́̅͘͝ͅͅͅI̵̛̛̛̛͖̩̬͙̥͕̳̗̠̣̥̟̱͋̓͒͛̈́̽͒̅̄͊͑̐͋̓̀̈́̆́́̃̉͌̍̓̓̾̈́̀͒̂̑̒̔̾̔̽̽͋̀̄͛͗͒̍͌̈́̌̐͋̊̆̈́̃͒̓̓̍͊̆̀̎̅̋͗͘̚̚͝͝͝͝Ś̴̢̧̨̧̛̛͖̫͔̥͇͓̹͎̜̟̻̼̤̫̖̺̞̩̤͙͕̺̰͎̙̣͔̫̠̲͍̝̪̬͍̦̫̙̝̫̪̮͉͙̃͆̈́͛̆̌̽̇̾̉̎̏̔͌̐̈́̊̐̃͌̏͑̄͐͌̋̀̐̒͆̈́̄͋̇͗̀̏͑̓̈̎̕̚̕̕͜͜͜͠͠͝͝͝͠ͅ ̵̢̢̧̡̢̧̡̨̧̨̛̯͉̪̝̜̘͔̺̜͎̰̥̘̯̳̖̥̥͔̠̘̲̻̩͇̫̲͙̘͕̱̝̝͓̰͖͔̠̱̥̘͚̦̟̫̜̗̟̜̮̼͉̳͚͇̭͍̳͈̦̱̪̣̬̝͙̦̟̂̒̈́͆̀̑͐̅͂̊̅̍̍̂͒͋̒̅̽̂̄̊̄̔̂̓̄̍͘͜͜͜͜͝͝͝ͅͅṊ̶̛̈͂̎̂͛͂͋̐͗̈́̈̏͒̔̓̈́͒͜͠Ǫ̷̢̧̙̣̳̖̮̝͕̱̬̖͓͇̞̼̼̭̺̘͎͕͎̙̬̙̝̖̰͔͓̖̘͖̻̻͚͇̺̯̲̅͂̇͋̂̂̐͋̑́̃̈́͑͐̎̅̌͊̐̿͜ͅ ̵̡̢̨̡̖̥̳̦̹̱̰͉͎̬̺̖̠͙͎̳̦̯̳̺̦͓̦͍̻̥̰̭̽̈́̔̾́̀̒́͗̅̑̔̃̈́́̀̅̎͘̕͜ͅͅĒ̴̢̢̠̯̜̗̣̻̥̝̭̱̹̦͈̇̂͋͗̽̀̃̓͑̀̌͑̇̓̒͌̊̍̀̏̒͗͗͂́͂͆͌͗̌͗̒̑͋̉̄̑͋̃͌̌̚͘̚͘͘͘͜͝͠͝͠͠ͅS̸̨̡̨̢̛͕̻̱̠̼͉̲̭̖͖͖̲̯̜̪͙͇̲͓͖̭̹̩͖͙͉͚̻̤̹̗̬͎̟̥͖̤͕̪̲̘̟̼͙̥̲̗̘̫̖͓̥̮̼̤̲̘͈̥̻̮̏͗̈́̏̌̍͗͆̇͐́͛͑̆́̈́̽̑͒̆͐͐̋̿̓́̍̂͒̓̈́͒̉̋͛̎̉́̿̄̏̈́̎̿̆̈́̕̚̚̚̚̚͜͝͠͠ͅͅC̷̡̡̨̘̞̪͔̗͍̙̭̘̮̩͙̱̭̳̭̰̟̘͙̝͌͛̉͐̽̿͋͋̌͊͋̋͋̂͋̆͒̈́̏̓͛͒͊̅̀̀̓̒̆̈́͐̈́̇͗̍͌͛͗͛̇̃̓̚̕̕͜͝͝͝Ą̶̛͔̭̣̠͈̯͈̭͓̫̤̟̹̙̫̜͖̆͛͐̂͂̎̑̽͑̈́͛̌̌̇̋̽͌̎̀͑̽̀̾̈́̈͑͐̓̏́̃̓̐͗̃̃̒͗̋̌̀̍͑́̓̇͗͋͐͋͌̌̅͑̀̚̚͘͘͜͠͝͠͠͠͝͝ͅP̷̨̢̢̧̧̢̟̪̖͓̭̦̺̭̹͔̲̻̜̪̰̖͚̣̭͇̥̺̪̙̞̪͚͓̻̜̩̮͔̼̖̘̬͛̇̊̽̎̌͆̍͐͌̆̂̾̊͂̍̓̌̂͌̆̓̅̽̏̀̄̆̾̏̐͑̈́̈́̏́̄̃̈́͂̓̓̄͌͂͆̊̇̐̈́̀̀́̊̒͐͘̚̕͜͝͠͝͝E̸̢̛͎̯͍̤͎̘̝̤͎̫̳̯̗͕̹̣̠̟̮̩̤̠̯̠͕̤̭̜̗̭̥̩̦̣̙̤͆͛͋͆͑̇̿͑̃̄̈͛̄͑̈̐̏̇͑͗͐̐͐̒͗͑̔̓̈́́̋̾̓̈́̈́͂̊̀̾̂̆͆͐͌̊̌̉̚̚̕̕͜͝͝͝͝͠͝͝ ̸̢̧̧̨̨̧̖̺̤͈̘͓͉̣̘̝͉͙͈̤̹̥̥̬̦̜̺̭͓̫̭͚̫̣̩͖̥̰̺̭̭̝̯͚̫̬̠̼͍̝̋͐͊͜S̴̨̡̢̢̧̢̢̨̢̛̲̭̞̝̰͓̗͓̮̼̖̬̘͈̥͖̭̭͚̖̜͉̺̙̹̱̩͔̭͙̪̗͎̻͇̗͎̟̝̫̫̙̱̭̫̺̟̖͔̯͒͆̒̄̉̉̄̒̐̉̔͆͆͂̉͌͊͗͑͗̃͗̀̇͊͌͛̀̀͑̈̃͐̍͐͑̑͆̕̕͘͜͜͠͠͝͠͝ͅͅͅŲ̵̻͓͈̠̜̠̤͎̠͉͈̭̥̳̞̀̄̀̀̈́̃͘͠͝S̵̢̨̡̡̢̢̨̨̢̨̛̖͚̠͖̻̣̤̠̲̥͖̜̰͍͍͉͔̣͔͙̞̙̳̟̟̠͙͈̞̙̤͔̝̞͍̹̜͍̪̜̹̘̣͕̩̱̦̥̮͉̟̭̤̞̥̹̤̠͇͇̩͎̤͎͔̯͎̏̓̔̔͐̈́̽̓̒̉̓͒́̓͛̄͊̉̏̆̈̉̾̈̀̌̾̽̍̃́̋̅̄̓̾̂̒͜͜͜͜͜͠͝͝͝ͅS̷̹̘̊̈́̀̈́̂̂̄̀̒̉́̐̀͌̉̾̉͛͊̓̇̍̇́͊̊͆͋̇̍̉̇̈́͂̓̍̐̎͋̂̏͘̚̕͝͝͝Y̷̨̡̫̟̣̞͇̳̺͖̲̤̹̯̩̣̫̬̳͕̲̘̠̮̘̳̜̘͎̜͙͇̹̞͉̝͔̻̦̳̜̜̝͙͔̰̓͋ͅ ̸̡̢̨̧̢̨̢̛̛͔̹͕̪̤̣͍̬̮̪̣̩̝̝̬̺̣̪̺͉͈͕̠̼͈̠͚̹͖̙̦̲̝̣̠̖̗̜̝͚̲̲̰̣͕̭̗͖̖̳̞̣͉̖͍̘̱̠̼͔̫̜̳̱͇̜̳̩̻̞̩̦̽͗̉̍̓̀̄̂́̔̿̉̏̅̽͐͒̈́͒̈͑̅͌͂̀̋̅̌̿͛̏̊̈́̀̐̀́̋͌̃̿̋͐̕̕͘̕͘͜͜͝͝͠͝͝͝ͅB̴̢̡̡̨̨̧̧̨̛̼̰̯̱̘̟̳̙̭̯̘̯̜̬̼̻͇͇͓̲̥͙͓͇̠͚͍̫͍̭̮̩͕̩͔̲̟̜͌̇̋̄̿̔̈́̇̃̀͐͑̈̆̀̄̿͐̆̇̆̅͂̎͌̌͑̒̈̀̇̒͛͘̚͘͜͜͝͝͝ͅA̵̧͚̭̝͒͆͗̌͛͗̀̉̈́̉̀̔̀ͅK̵̡̭͉̪̮̏̋̓̋̿͊̂̿͊̀̽̾̃͊̌̿̑͑͐̚͝͠A̷̡̢̡̞͈͇̝̘͇̙̘̦͔̥̹̲̯̼̤͓͙̘̯͇̳̙͇͍̖̟̹͎͕̙͔͖̳̬͚̙̯̺̦̮̖͇̲̦̰̕͘͜ͅͅͅ.̸̢̧̨̢̮̖̮̩͔̗͇͕̼͙̦͎̯̙̗̮̪̤̘͇̙̱̺̳͉͔̗̠̫͔̜͖̟̩̯̮̝̱̖̰̗̲̩̩̥̫̻̘̥͔̯͉̯̙̣̩̥͖̮͙̣͗̃̈́͒̇̈́̃̿̒͊̏̂̓͛͊̆́̿͑̕̕̚͘͜͝ͅ


Ţ̵̧̯̫̭̆̅̍H̷̢̪̀̕E̸̼͍̗̙̋́̈́̚R̶̰̦̿̒Ę̴̖̹̹͊͂̑ ̸̤͉̟͊̿̉͘̕I̶͖̤̳̋̎̿͋̈́Ś̷̯͕̩͒̌͐́ ̵̘̼͋̉͘Ń̸͔̍̉͒͠O̸̢̱̙̟̪̓ ̷̝͖̪̻̈̈͌̓͜E̴̢͓̫̙̾S̵̢̝̊̚C̸͓͗̈́̌̾̃ͅA̷̗̘̳̍̇P̵̩͒̒̚E̵̳͖̊ ̵̟̗̳̞́̈Ş̷̱̳̘̉̉̕͜͝U̸̲͑̊͝S̵̛̮͎̀͛̽̑S̴͓͔̉̒͒Y̶͕̏̅̊̓̈́ ̶̡͒̽̌̀B̸̠̤̈́̔A̵͋͜K̵̘̉̍̀͝À̶̬̞͐̀̊́.̶̦̱̲͚͇̈


they don't even encrypt it? probably a trick to make people using ms account.


2:20 Microsoft, in fact, gave up so hard they are killing NTLM entirely! Options to disable NTLM in a domain network were present some fifteen years ago already, but now they are realizing NTLM security is so bad they are phasing it out even for LOCAL accounts! They are experimenting with a "Local KDC" system in Windows 11, or, in other words - abandoned NTLM and just use Kerberos. Yes, for local authentication.

I'm not even sure which solution is worse....


Good to know that the leading operating system with billions of users can’t get basic security right 🫡


Dont use that piece of shit of windows 11 at all


Can you go into the mechanics behind custom login processes? For example, SAASPASS allows you to literally have 2fa on your windows login. What does that look like on the backend? How does one set that up in the registry and in GPE? I'm curious about how that works!


The question is: have they always sucked or those fucks just changed it to discourage people from using security questions?


Your accent is so cringe, just as cringe as your English


@Enderman
function RUSSIA(){
  console.log('Going to make new channel!')
  name = "EndermanRU"
  username = "EndermanRUSSIAN"
  ytAPI.createChannel({ repo.SECRETS ENDERMANS_PHONE } + {name} + {username})
make ENDERMAN do RUSSIA();


Microsoft doesnt give a shit about the security of their own products anyways. No matter if its a UAC bypass with thread injection or a null pointer deref in the kernel, unless its actually being exploited they dont care. I mean in the end im not complaining about microsoft making DSE bypassing a piece of cake.