MS: I want to make Windows 11 require motherboard features that make ransomware attacks more difficult so I can say it’s more secure, even though it’s merely a feature of the motherboard.
Also MS: Sadly, if your tech doesn’t have these features you cannot upgrade and it will be insecure because I will not make updates for it.
Are you talking about TPM 2? Because I don’t think that makes classic ransomware more difficult. Also it doesn’t have to be strictly a motherboard feature, e.g mine comes without a fixed hardware TPM, but my processor supports fTPM, which has up- and downsides. But it works as a TPM.
Also MS: Sadly, if your tech doesn’t have these features you cannot upgrade and it will be insecure because I will not make updates for it.
Not that I’m in favor of what they’re doing, I think they should rather support older hardware with Win 11 and require modern features only on modern systems. But from a security standpoint, their decision is actually good, as it builds a secure foundation. Most private users will just do whatever on that foundation (e.g. run random stuff from the Internet), but I think going forward, this is the right choice, though probably for the wrong reason of doing Intel a favor.
/cdn.vox-cdn.com/uploads/chorus_asset/file/25745083/copilotplusprompt.jpeg)
MS: I want to make Windows 11 require motherboard features that make ransomware attacks more difficult so I can say it’s more secure, even though it’s merely a feature of the motherboard.
Also MS: Sadly, if your tech doesn’t have these features you cannot upgrade and it will be insecure because I will not make updates for it.
Are you talking about TPM 2? Because I don’t think that makes classic ransomware more difficult. Also it doesn’t have to be strictly a motherboard feature, e.g mine comes without a fixed hardware TPM, but my processor supports fTPM, which has up- and downsides. But it works as a TPM.
Technically, this isn’t true, MS will continue to update Windows 10 and even individual users can receive these officially through the Windows 10 ESU program: https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates
Not that I’m in favor of what they’re doing, I think they should rather support older hardware with Win 11 and require modern features only on modern systems. But from a security standpoint, their decision is actually good, as it builds a secure foundation. Most private users will just do whatever on that foundation (e.g. run random stuff from the Internet), but I think going forward, this is the right choice, though probably for the wrong reason of doing Intel a favor.
SecureBoot.