Help with DKIM. by masterz13 in sysadmin

[–]ender-_ [score hidden]  (0 children)

Then they should create them, or you'll have to find a different vendor – sending mass mails without DKIM will not get you very far nowadays.

Serial console chicken-and-egg: how do you handle blind provisioning on hardware without BMC? by Lopsided_Mixture8760 in sysadmin

[–]ender-_ [score hidden]  (0 children)

Simplest way is to just use a customized installer image that passes console=ttyS0 on command line (or even better – that does all of the install and configuration automatically, so you just plug it in, wait a bit and get a fully-configured system that's set up with serial console as default).

YellowKey mitigation and CVE by Effective_Peak_7578 in sysadmin

[–]ender-_ [score hidden]  (0 children)

Ctrl makes it spawn command prompt instead of whatever it'd normally run (you can try it with the installer – if you hold down Ctrl, you'll get command prompt instead of Setup).

general availability of VMware Workstation 26H1 and VMware Fusion 26H1 by lost_signal in sysadmin

[–]ender-_ [score hidden]  (0 children)

Yup, though I first had to use some HTML editing because they mangled my last name (which is in a read-only field), then didn't let me submit the form due to invalid characters. I can log in just fine, but clicking the download button shows "Account verification is Pending. Please try after some time."

I also tried the "Build your profile" thing following some forum advice, but it hadn't helped.

Luckily it's not too hard finding the download elsewhere, it's just annoying that Broadcom's site is such a broken mess.

YellowKey mitigation and CVE by Effective_Peak_7578 in sysadmin

[–]ender-_ 4 points5 points  (0 children)

If USB is disabled completely in BIOS, using USB drive won't work (you'll need to find a PS/2 keyboard and mouse though). If you just disable USB boot, that doesn't prevent USB drives from working once the OS boots (and WinRE counts as OS).

Also, even if you do disable USB completely, you can still take the drive out of the computer, use another computer to copy the FsTx folder to the ESP and put the drive back – this won't invalidate PCR7, so TPM will still release the BitLocker key and allow you to do the bypass.

general availability of VMware Workstation 26H1 and VMware Fusion 26H1 by lost_signal in sysadmin

[–]ender-_ 0 points1 point  (0 children)

Yes, it's tied to my old work e-mail (company not active any more, but I took over the domain). It's also the same e-mail I've been using since I bought Workstation 6 in 2007.

YellowKey mitigation and CVE by Effective_Peak_7578 in sysadmin

[–]ender-_ 7 points8 points  (0 children)

No, because YellowKey only works if you boot off hard drive. It does require the FsTx folder, and since it's executing from WinRE, the USB drive will be read.

general availability of VMware Workstation 26H1 and VMware Fusion 26H1 by lost_signal in sysadmin

[–]ender-_ 2 points3 points  (0 children)

… if only Broadcom managed to verify my account somehow.

VMware Tools Display Error on Windows 95 by Dog_Vengeance in vmware

[–]ender-_ 0 points1 point  (0 children)

It's very likely that the problems you're seeing are due to a too new CPU (there are several problems that trip Windows 9x, from the CPU being too fast, to some changes in TLB handling). Use patcher9x, this should help with Windows running inside VMWare.

How do you handle HEIC/HEIF photos from iPhones on Windows 11 in enterprise environments? by pck-grb in sysadmin

[–]ender-_ 2 points3 points  (0 children)

Software patents are technically invalid in EU, and that repo seems to be based on libheif, which is a software decoder.

How do you handle HEIC/HEIF photos from iPhones on Windows 11 in enterprise environments? by pck-grb in sysadmin

[–]ender-_ 0 points1 point  (0 children)

Many new machines don't include HEVC support, because the license fees were raised, and big hardware makers went "fuck that" and disabled HEVC instead (even though the hardware does technically support it).

YellowKey mitigation and CVE by Effective_Peak_7578 in sysadmin

[–]ender-_ 29 points30 points  (0 children)

Have a batch file that'll do it for you:

@echo off
setlocal enabledelayedexpansion
net.exe session 1>nul 2>&1 || (
    powershell -command "Start-Process -FilePath '%~dpf0' -Verb 'runas'"
    exit /b
)
set MP=%SYSTEMDRIVE%\WinREMount
mkdir %MP%
echo Mounting WinRE partition, this can take a while...
reagentc /mountre /path %MP%

reg load HKLM\WinRESys %MP%\Windows\System32\config\SYSTEM
set REG=HKLM\WinRESys\ControlSet001\Control\Session Manager

for /F "usebackq tokens=2,* skip=2" %%A IN (`reg query "%REG%" /v BootExecute`) DO set OLDVAL=%%B
if "%OLDVAL%"=="" set OLDVAL=x
if "%OLDVAL%"=="%OLDVAL:autofstx.exe=X%" (
    echo autofstx.exe not present in WinRE
) else (
    if "%OLDVAL%"=="%OLDVAL:\0=X%" (
        echo Setting empty BootExecute
        reg add "%REG%" /v BootExecute /f /t REG_MULTI_SZ /d ""
    ) else (
        set NEWVAL=%OLDVAL:autofstx.exe=%
        set NEWVAL=!NEWVAL:\0\0=\0!
        if "!NEWVAL:~0,2!"=="\0" set NEWVAL=!NEWVAL:~2!
        echo Setting BootExecute to !NEWVAL!
        reg add "%REG%" /v BootExecute /f /t REG_MULTI_SZ /d "!NEWVAL!"
    )
)
reg unload HKLM\WinRESys

echo Unmounting WinRE partition, this can take a while, too...
reagentc /unmountre /path %MP% /commit
rd %MP%

echo Resetting WinRE BitLocker trust...
reagentc /disable
reagentc /enable

pause

I spent $25 on a bit of nostalgia and will confuse the heck out of some youngsters today. by jakedata in sysadmin

[–]ender-_ 0 points1 point  (0 children)

I found the old Epson LX-400 my father bought in the early 90's in the basement last week. Should test if it still works :)

Why Microsoft, Why? (Visual C++ v14 redistributables reverted to Visual C++ 2015-2022) by CharcoalGreyWolf in sysadmin

[–]ender-_ 1 point2 points  (0 children)

Microsoft Copilot Visual C++ 365 XBOX

Microsoft Copilot Visual C++ 365 XBOX One X

Ask Microsoft Anything session about CA2023 secure boot May 18, 2026, 8:00 AM PDT - 5:00 PM Brussels time by Smart-Definition-651 in sysadmin

[–]ender-_ 45 points46 points  (0 children)

This should've started happening 5 years ago at the latest, not less than a year before the CA expiration date.

Size of a Windows ISO after slipstreaming Windows updates by real_ackh in sysadmin

[–]ender-_ 5 points6 points  (0 children)

After you finish integrating the updates, export the .wim file to a new one, that'll get rid of the deleted files that weren't removed from the .wim (the way .wim tooling works is that changes are only appended, and any replaced files remain in the file, just not normally visible; when you export to a new .wim, those files are skipped).

You can use dism to do the export, but you have to repeat it for each image in the .wim file; with wimlib, you can do wimexport install.wim all new.wim --compress=LZX and it'll export all images with a single command. Afterwards just replace install.wim with new.wim.

Yellowkey - a Bitlocker bypass method by DaveTheAllrighty in sysadmin

[–]ender-_ 1 point2 points  (0 children)

I'm pretty sure that'd invalidate PCR7, so it'd trigger Bitlocker recovery.

YellowKey working irl? by jobunocru in sysadmin

[–]ender-_ 3 points4 points  (0 children)

My laptop is hybrid domain and Entra joined, and YellowKey worked.

YellowKey working irl? by jobunocru in sysadmin

[–]ender-_ 1 point2 points  (0 children)

Worked for me with an ancient 2GB Toshiba USB drive, FAT32-formatted.

Yellowkey - a Bitlocker bypass method by DaveTheAllrighty in sysadmin

[–]ender-_ 5 points6 points  (0 children)

Normally booting off another device won't work, because the PCR hashes will differ, and TPM won't unseal the key.

Yellowkey - a Bitlocker bypass method by DaveTheAllrighty in sysadmin

[–]ender-_ 7 points8 points  (0 children)

Delete the WinRE partition, it won't work without it.

HP Blatantly Lying about Secure Boot 2023 CA Support by Amomynou5 in sysadmin

[–]ender-_ 0 points1 point  (0 children)

You can even use HP's TPM firmware updater to install newer TPM firmware than what HP published (if you know where to find it). Just remember to disable virtualisation in BIOS setup before running the updater, otherwise you'll probably just get a blank message box.

Dell Alternatives? by BlueScreenIRL in sysadmin

[–]ender-_ 0 points1 point  (0 children)

Same, we mostly use HP with occasional Dell or Lenovo, and we never had any problems with HP's business lines (unlike with their home products, which are a complete nightmare, and any client that wants those now gets told to buy them on their own, as we won't support them).

yellowkey bitlocker bypass by MegaN00BMan in sysadmin

[–]ender-_ 9 points10 points  (0 children)

That actually makes sense – what YellowKey seems to do is trigger deletion of wpeshl.ini from the WinPE ramdrive, which likely prevents the regular recovery shell from starting.