DO NOT use Windows Security Questions #windows #endermanch

they are optional?! last time i installed windows it didnt give me a choice..

It got cut off to "DO NOT use Windows" lol
still true

I just found this short 4 minutes after it released lol.

You forgot to mention one thing, to access the SAM key, you need higher permission level, a regular administrator account isn't enough, You can access it in two ways, either by using Windows PE, or by executing regedit with the NT AUTORITY/SYSTEM account (you can do that with a tool called "Process Hacker"), then you're good to go lol

Arent you obligated to add them if you use an offline windows account?

Microsoft marketing so much about "security". Looks very secure to me!

Last thing I expected was for them to be stored in plaintext

Have you reported this security issue to microsoft?

If bitlocker isn't enabled you can just load the SAM file through an recovery stick and do stuff like enabling the admin account which has at default no password.

ooh, you should make a new creepypasta malware with this script combined with whatever you've already done

If you make an account, set it up without a password and Windows will not ask for the security questions! Then after you first install, immediately set a password using command prompt as admin and type “net “your_user_name” password” and there you go! Of course remove the quotations. That’s how I’ve been doing it for years.

I forgot what it was called but those “there is no escape” security questions were a reference to an older video I think.

The most insulting part is you're forced to use security questions in the OOBE, and the only way out of it is to not create a password until you get out of OOBE.

"Don't use Windows" fixed that for you.

The second short ever made on this channel

The way you can avoid the security questions is by adding a password to your user AFTER you installed Windows. If you do this, you will only have a password hint.

When any password or security text is in plaintext you know there’s an issue

rare footage of enderman posting shorts

bold of you to assume i actually use security questions at all

Unfortunately Windows security is not designed to support "tech-savvy" people, just a little privacy in homes and offices.

I didn't have the option when buying a new PC, it wouldn't let me connect to wify and I had to ask questions if or if, then I already added Microsoft account when I had wifi.

Hey so how about you update no escape to have the security questions as THERES NO ESCAPE?

Alright but then what security settings do you recommend

oh I'm gonna have a lot of fun with this

So what? Why should an attacker do that? That would be atupid from an attacker perspective, making a bat that logs the user out at startup does the same, with less hassle, not rly a problem

what is the site for process hacker

my security questions are just “1” “2” and “3” so it doesn’t matter

could they maybe be randomized with a random string on each boot so that a attacker has a harder time if also using bitlocker?
but why bother the cmd trick is still not patched.

Can we avoid using them? OOBE\BYPASSHIT
Otherwise can't i simply delete this key? Or is it going to leave blink valid since the json is null

I just used security questions when setting up windows 10, and yet I don't think there is a way to bypass it.




I'm stupid

Just input 1, 2, 3

That's why i am using CMD to set the password

Really shouldn't even have it stored at all like that

Gotta tell my mum she has to remove it 😂

Are you from Lithuania?

Bruh, why should I need to skip this OOBE Setup??

voice revel here yay

"Good" "security" MICROSOFTTT

Don't know what else to say or if it means much but thanks for showing this Andrew

What? This is the dumbest way to save answers to a security questions. The answers need to be save as a hash, like a password.

YOU HAVE A VOICE , LIKE A DANIEL MYSLIVETS?

All it takes is someone with enough time to look in the registry and copy down the security answers. Assuming the managed to log in or it was left logged in. With this and Microsoft trying so hard to force us to the cloud I think it i time to ditch them! They were lazy or sloppy with the security in Windows and now they also have that Recall that they want to use to see everything that was ever on our screen. It becomes obvious to me that this is no good at all! Who in their right mind would give up system resources like CPU time and disk space just so that someone could spy on us? Those who actually accept it knowingly are the ones who I imagine are the easiest to brainwash and gaslight and for their heresies they probably deserve the misery!!

I just spammed something random to it.. LOL

bro this shit is NOT optional

noespace mentioned?!?!

how to skip them in oobe

wow a short

i have my hint set to " " :^)

i didn't know you sausages to use your voice in videos!

I use uefi passwords mate

Video zu 20/28 geschaut... Wo ist das gottlose Gespräch?

i was there in the stream

that's crazy

hey can you help me with something

i just enter random stuff or "a" so who cares

I dont enjoy using Linux at all but is Windows made by complete morons?! It's the only OS that just works but underneath it it's such a Frankenstein build.

Uhm my password hint is too ez

Windows has never been a secure os, I'm not surprised. This doesn't really matter though, if you are going through the effort to do this, you can just change the password hash to a new one and log in. I hope this is patched in active directory though, even though important businesses probably use bit locker.

Cool :O

It doesn't really matter since you can bypass a users passwords in ~10 minutes anyways

Better yet if you are able to:
Don’t ever use windows
Period

hello

Nice

Hello

Waduhek?
First 15 mins

Unfortunately you're forced to set them when configuring an account password. The best solution is to just set them to long random strings that nobody will ever be abge to guess.

Don't use Windows period, use Linux lol

This is the main reason that I am going to go through tiny 11 just because of this reason security

dont tell us that the last part of the vid was a no escape update

Dude stop posting videos in the wrong format, don't use portrait mode

Even "security" is not secured

Windows is too much garbage through the years being held by cheap tape trying to not fall into hundred pieces.

And when somebody will tell them this they'll just answer "well, you should've made an online account"

Honestly at this point just don’t use windows 😂

Nah i just dont use windows altogether

Linux is best

But what if Windows won't let continue without setting the security questions when setting a password?! 🤨

Today’s lesson is ‘don’t use Windows’

Here's a better lesson we learned. Don't use windows at any cost.

28 minutes old video

Looks like theresnoesape.exe virus remade or homemade

- BitLocker joins this group
- Enderman left the chat

although i don't really know what's the risk here, yes sure it's in plain text, but it's not exactly "right there", it's sort of hidden and if you know howwhere it is and how to compile a program to extract them, why are you wasting time on something that can be changed or disabled when you can spend it on, idk, getting saved passwords from browsers. if you're a hacker and and want to break in in someone's pc, you need either physical access or the password, even if you knew where to find the security questions, you still need to access the system to access and it's not an issue if the attack is from inside the system because if they want your passwrd, they would use a keylogger or whatever, and then encrypt it to lock you out. why would you need to know where the person's parents first met if you can just access the computer in other ways. this is also something that was basically just discovered recently and now we might actually have a bit more hackers trying to get people's security questions, instead of keeping this a sort of a secret and reporting it to MS like you should. let's go back to when no one knew that you could steal kias with a usb lead, you're the first person to discover that, you wouldn't just film a video on how to do it and then go back to doing whatever you were doing, no, you contact kia and tell them like a proper, normal, likeable person

Todays lesson! Don’t use Windows! (Is joke pls don’t cancel me on every platform)

Oh fucking shit