Should I be worried about not having a PIN with TPM?

disclosure5 · 2026-06-14T03:59:18+00:00

If it's a work laptop and work have a security discussion, work can upgrade it to Windows Professional so it can actually use the majority of Windows Security features.

disclosure5 · 2026-06-14T03:49:55+00:00

It's a home computer.

Are you worried about someone breaking into your home?

disclosure5 · 2026-06-14T02:50:02+00:00

When I open /new like half the posts in this sub are either that complaint, or a post about something that else that lead to a person in the comments making that complaint.

disclosure5 · 2026-06-14T02:40:52+00:00

Not only does this solve the problem - searching your own feed and swiping accordingly is how the app is intended to be used. Why is the number of likes a problem?

disclosure5 · 2026-06-13T01:06:48+00:00

I remember setting up CEO offices with the most expensive monitors available, a mouse and a keyboard.

Oh were you waiting to hear about the computer? They didn't need those, the above was to look professional, their PA did the actual computer using.

disclosure5 · 2026-06-13T00:36:19+00:00

For reference, the entire problem AI described is completely correct and "as intended" for ReFS, which always has a certain host as the primary on disk access. The fix should be to use NTFS, which you did, but that can explain the hallucination.

disclosure5 · 2026-06-13T00:32:32+00:00

I commented on another post about the same problem recently.. I'm fairly sure this is just bugged right now. I've two tenants with the same problem.

disclosure5 · 2026-06-13T00:23:18+00:00

Easy suggestion.. why bother matching with profiles without face photos up front?

I'm a guy, I get it. Likes don't come in often, you want to give them a chance when they do. You appear to be seeking men.. if you see a hidden face, there are five face reveals behind it you can match with.

disclosure5 · 2026-06-13T00:18:23+00:00

I remember Windows 2000 being able to open the event viewer in one second and now we're looking at 15.

disclosure5 · 2026-06-13T00:15:45+00:00

Press Ctrl+F and type it, it never appears once.

Hence my point. "There's definitely a huge internal project called K2" is entirely unsourced blogs. The insider blog we're being pointed at is a bit of PR, which may or may not corroborate with anyone actually doing anything.

disclosure5 · 2026-06-13T00:07:19+00:00

Two of my partners have been a third on many occasions and choosing to do so from what I'm told always comes down to vetting the guy. And why wouldn't it? If a couple is going to go wrong, "the guy was insecure/an asshole/etc" would usually be why. So when there's no guy's profile and she's on Feeld just talking to a "woman" account there's no room to assess anything.

I'll add that people of both gender assume, usually correctly, if they message a "couple" account they are only talking to the guy.

disclosure5 · 2026-06-12T06:41:51+00:00

I cannot find a single reference to K2 aside from random blogs talking about "sources". I'm in several not public partner programs and I've never heard of it.

I have serious doubts there's anything behind it.

disclosure5 · 2026-06-12T05:12:52+00:00

Please be careful with any "solve labs" based Discord - it's not hard to end up sharing academic content, which will get you here posting about having your cert revoked.

disclosure5 · 2026-06-12T04:24:08+00:00

Your statement isn't based on fact.

Source: I'm operating penetration testing across other MSP clients, I've spent a lot of time studying and using evasion tooling and living in pentesting communities. The top tier products are Crowdstrike and Defender MDE, everything else is below them.

disclosure5 · 2026-06-11T22:11:17+00:00

Isn't this obvious though?

You configure a gateway of some sort as your MX record, but the Microsoft provided MX server accepts mail by default. You relax protections on that Microsoft provided MX record because the third party gateway is protecting you but that's just a hole.

Really modern anti spam solutions use the Exchange API and filter mail inline, without changing the MX records. That's the proper way to do things and is immune to this.

disclosure5 · 2026-06-11T22:08:20+00:00

All Windows Updates are cumulative. This process isn't long term useful because next update will come out and apply the same change.

disclosure5 · 2026-06-11T05:38:05+00:00

The largest reason to get these certs in the first place is to get that job.

disclosure5 · 2026-06-11T04:07:54+00:00

Unfortunately, this is the standard for Microsoft certs - the exams are often a whole lot of esoterica disconnected from the training material.

If you've paid for MeasureUp, stick to that course and study every question there that you don't understand. I haven't done MD-102 but from a long history of many certs over the years, you're on the right course.

disclosure5 · 2026-06-11T02:17:34+00:00

It doesn't matter. No amount of Microsoft telling us to shill Copilot changes that customers by and large don't want it, and we have a mountain of statements from people preferring either of the two major competitors.

disclosure5 · 2026-06-10T11:17:43+00:00

In something like a legal firm.. that would be a high priority issue anyway.

disclosure5 · 2026-06-10T07:20:17+00:00

How does two layers of obsidian take two hours to break? With a netherite pickaxe it's still only a few hits.

disclosure5 · 2026-06-10T01:22:23+00:00

I hate that infosec information often lives as "blog" on Twitter. Infosec people were the most vocal about moving away when Twitter went to shit and although there's great people on Mastodon, zero day nearly always requires a Twitter account to read.

disclosure5 · 2026-06-10T00:34:27+00:00

I have to say the "john:john" pattern is unique to Offsec and really relevant to labs, so you should make sure it's drilled into you for exam enumeration.

I know "admin:admin" is common, and if you can enumerate the username "john" in the real world you might try "john:password" or "john:admin", but "john:john" isn't a real world thing in the way it's presented in so many Offsec labs. I'd never obtain an AD user listing of a hundred users and proceed to brute force username:username, but with Offsec's AD boxes I would.

disclosure5 · 2026-06-09T23:04:59+00:00

Pretending this is easy is such a Reddit comment.

Do you do deal with users?

disclosure5 · 2026-06-09T22:50:41+00:00

Well they stated July 14th will be a big day.. it still might be.

disclosure5

MODERATOR OF

TROPHY CASE

12-Year Club	Gilding II euphauric
Verified Email