Distopian Nightmare is Here: Win11, Secure Boot, TPM, BitLocker, Copilot+

[Reno-Kid]

On one of my old computers I have hot swapable SATA bays which I could easily do what you are describing. That will work for certain setups but will be a pain for most. Opening up my laptop to swap out the NVME SSD is not exactly convenient. On my latest desktop computer I would have to also remove the GPU to get to the SSD mounted under it.

Actually it's a switch on the exterior. No need open case.
Master drive
Drive 1...Windows v7
Drive 2...Windows v10
Drive 3...Windows v11
Drive 4...Linux
Slave Drive
Single Shared Data Drive.

All 4 drives were connected to the switch, and the switch connected to the Motherboard. When power off, select which which Drive to boot. Power on to boot to selected OS. They all share same components.

This might be obsolete now days, but it worked.

https://youtu.be/fF8q0imd0Lk?si=G6GR2y3D6v7BaqOV

[Reno-Kid]

I didn’t like the idea of windows sharing a drive so I just installed a second drive, installed Mint, and made that the default boot volume in bios. When it boots the Linux boot manager (grub) sees any bootable volumes and gives the option to select one or wait and it selects the default.
Windows is still available but only gets used for minimal applications.
I’ve been a Mac user since system 6 but Linux is growing on me. Micr$oft quit trying back at Win 7. 11 is a blight.

Mint is pretty good!

[freedom-lover]

Should I disable TPM on my WIN10 system?

[remusrm]

i've been using debian since 2010s since hate the activation with win7 and their telemetry bs!

[remusrm]

I knew that each separate thing was bad for privacy. I did not know how they all interact with each other. It is much worse than I thought. Rob Braxman goes into detail on all of this in the video linked below.

Windows 11 and any software that has admin access on the computer can use the TPM's API. Each TPM has a unique Endorsement Key(EK) which can be used to identify the computer. Microsoft runs the Platform Crypto Provider (PCP) which is a cloud based provider which interacts with the TPM. Every piece of software that wants to verify the computer, user, etc. through the TPM is using the PCP. This is going over Microsoft's servers. This means Microsoft has the data in addition to the 3rd party software vendor that is calling up the TPM services in the first place.

Tie this in with Windows requiring a MS cloud account by default. Now the specific computer is tied to a person's true identity. MS is really pushing Windows Recall and Copilot. Recall takes screen shots every 3 seconds. Copilot has access to everything on the computer and may be listening to the microphone at all times.

This creates the very real scenario where your behavior on your computer is logged. The AI could be ordered by either MS or a government entity to report any suspicious behavior. If someone does not like what you are doing, you could be completely locked out of your computer or the authorities could be sent to your door. When hackers eventually compromise the system, they will be able to order the AI to send them all of your accounts, passwords, financial information, blackmail material, etc.

https://www.youtube.com/watch?v=t1eX_vvAlUc

rufus saves the day! send pm for more info

[arrix]

Skip VM and use a Harddrive switch. Boot into different drives and OS...linux, w10, w11, ? Complete separation and no dependent on VM.

I'd still use a VM as you can disable TPM support (and thus universal tracking).

[hermosabeach]

I'm not sure we can disable anything in Win 11.... you might check a box

It's almost like we need a piehole - Hardware and software that blocks outgoing traffic until the user approves

[arrix]

I'm not sure we can disable anything in Win 11.... you might check a box

It's almost like we need a piehole - Hardware and software that blocks outgoing traffic until the user approves

It's possible but it's getting more difficult to get around Windows cloud account reqs.

[remusrm]

how many stopped using it? Whats scary is that even if you dont use it a business might use it and you are a customer of it and all your **** is out there without you even knowing!