Thoughts of a Little Sinchen

Category: Software

  • App Control for Business → Madness

    App Control for Business (WDAC – Windows Defender Application Control) is an extremely powerful function in Windows 10/11. When set up correctly this pretty much rules out that malware is able to start (or can easily achieve persistence). It can be configured in a way that even a user with local admin privileges becomes unable to change, remove or disable strict rules.

    This powerful kernel-mode feature comes at a price. The price is complexity and a steep learning curve. A steep learning curve has never discouraged me despite my serious concentration issues. Once I got into using Qubes OS I never really looked back. My real problem with WDAC lies in it’s complexity.

    (more…)

  • About 3DS Browser Requests

    Every now and then a request for a usable browser on 3DS, including old series consoles, pops up on GBAtemp. This usually gets quickly dismissed with condescending comments (“Impossible”, “Don’t you have a phone?”) based on half-knowledge (at best). No, I do not think I’m fully in the know. I’m not a developer and am well aware of my limits! All I can say is that I got a usable browser running on a machine with a way weaker processor (Mobile Celeron 433MHz from about 1998/1999) with only 192MB of RAM. Having the whole Windows XP SP3 running in the background leaves very little memory for the browser.

    (more…)

  • Sinchen Tried Using Chatbots

    Discussions about AI are everywhere since a few years. Enthusiastic supporters announcing the greatest breakthrough in human history as well as determined opponents proclaiming the end of the world. Both groups never get tired to repeat the ever same arguments.

    I gave chatbots a try in the last few weeks using Gemini, Copilot and mostly Lumo. You can’t comment on and can’t criticize what you don’t know. That’s why I also started looking into Android a few years ago. I finally made my peace with Android after getting used to GrapheneOS (and saw pretty much all my assumptions on stock Android versions confirmed from looking deeper into it).

    (more…)

  • Windows “Device Encryption” With Automatic Unlock Is Not Secure Enough

    An easy explanation avoiding technical terms (until the box at the very end)

    The Short Version​

    If your PC meets certain criteria Windows encrypts your files automatically. This is good! But the way it’s set up by default has a hidden problem: the computer unlocks itself without asking for a password, and a copy of the unlock key is stored online on Microsoft servers.

    (more…)

  • Windows XP Hardening?

    How about still using Windows XP? Simplicity, lack of bloat, lack of AI, support for old games. I’ve always loved XP. Of course it didn’t feel lightweight in 2002 when installing the first Windows NT version intended for home users. Way bigger than 98SE, more demanding than 2000 Professional and with a nauseating default theme that is as dysfunctional as the (then) newly introduced Start Menu. Over the years I’ve mastered switching off all crap on a fresh XP installation in very few minutes. Still in muscle memory to this day. Using XP gives me a nostalgic feeling just like the boot sound of a PlayStation 1 coming from the powerful speakers of a big CRT TV.

    In this entry I want to explore this classic OS from the perspective of security. This could be very short by saying, “There is no way to truly secure it.” Nevertheless I’ll try my best.

    (more…)