One of my long-term goal of maximizing my computer security. Since roughly two years I went from better-than-average settings to seriously trying to harden my operating systems as good as possible.
As I mentioned previously, my Windows knowledge is pretty much stuck in the XP-era. XP isn’t quite representing the status of current Microsoft operating systems. When reading “Windows 11” many people instinctively think of telemetry, software bloat, Copilot, forced online accounts and all this rubbish. I’m more interested in the things under the hood. For example: Virtualization‑Based Security (VBS), Hypervisor‑Protected Code Integrity (HVCI) and App Control for Business. I needed a pretty recent device offering the hardware Windows 11 expects (TPM 2.0, CPU with IOMMU, Secure Boot using year 2023 certificates) to do experiments… without playing around with my mum’s computer.
(more…)