All the "things" being talked about windows 11. Security, spyware, and etc.

ultrajv · Oct 30, 2025

TraderGary said:
Website cookies stored on your local computer do not directly affect the Windows 11 operating system itself—they only influence your web browsing experience.

Not true. Look into Cookie poisoning.

Buddywh · Oct 30, 2025

TraderGary said:
they only influence your web browsing experience

But I think there's a concern for privacy: what can someone learn of you and your private life simply by examining the cookies on your computer?

TraderGary · Oct 30, 2025

ultrajv said:
Not true. Look into Cookie poisoning.

I know what Cookie Poisoning is, but my statement remains. Cookies do not affect the Windows 11 operating system itself.

andrew129260 · Oct 30, 2025

I'll save you all the trouble.

Are you on the internet? You have no privacy.

Do you own a smartphone? You have no privacy.

Do the people around you have a smartphone? You have no privacy.

Do you have wifi anywhere? You have no privacy.

That's it. Privacy hasn't been a thing for a long time.

If your targeted by anyone, it is only a matter of time until they get what they need.

Anyone worried about the privacy and telemetry of any operating system, regardless of what or how much it sends, that ship has long since sailed.

It isn't a defeatist mentality either, there is nothing you can do it about it unless you want to be a hermit in a bunker.

There's a lot more out there you should be worried about, and can actually make change on while time still allows. But this isn't one of them.

SlicEnDicE · Oct 30, 2025

TraderGary said:
I know what Cookie Poisoning is, but my statement remains. Cookies do not affect the Windows 11 operating system itself.

Nor any other OS for that matter

ultrajv · Oct 30, 2025

TraderGary said:
I know what Cookie Poisoning is, but my statement remains. Cookies do not affect the Windows 11 operating system itself.

They are scripts that can be made to do anything. If you look at some of them. They contain code. Purpose obscured. Saying it only affects web browsing is minimising things. That's most users online data,,,

TraderGary · Oct 30, 2025

ultrajv said:
They are scripts that can be made to do anything. If you look at some of them. They contain code. Purpose obscured. Saying it only affects web browsing is minimising things. That's most users online data,,,

No, cookies do not contain scripts and cannot execute code. They are passive text files used for storing data—not active programs.

SlicEnDicE · Oct 30, 2025

ultrajv said:
They are scripts that can be made to do anything. If you look at some of them. They contain code. Purpose obscured. Saying it only affects web browsing is minimising things. That's most users online data,,,

Cookie Poisoning is pretty much impossible these days, unless you already have other malware on your system.

neemobeer · Oct 30, 2025

I mean if you wanted to be really technically correct, yes you could put a script into a cookie and execute it, but you would have to...

Have control of the code rendering and access the cookie and execute it
If you have a good content-security-policy in place that code won't work
If you have SRI in won't execute
The script will only execute in the scope of the browser (javascript) and will only have access to the DOM in most cases
If you have secure and httponly attributes on your cookies can't be easily tampered with

HarleyQuinn · Oct 30, 2025

HarleyQuinn said:
Then how the greyed out section (Core isolation) in my laptop suddenly became visible after the update? My system is unsupported. I got a bit paranoid and revert back to 23h2. Now core isolation shows off. Any possibility of this being a bug?

Hi again sorry for bothering you guys. Seems like you guys do know a lot of stuff. Virtualization on my bios is OFF but i just figured out my (intel)CPU virtualization status is ON.

In 23h2 I don't see any option under Security > Device security , but in 25h2 version I see core isolation, memory integrity, local security authority protection.

I want to ask is this anything to do with spying? like microsoft silently enabled HypervisorEnforcedCodeIntegrity(HVCI) in my machine with latest update? Or this is totally normal even tho i haven't set any tpm or secure boot

neemobeer · Oct 30, 2025

No, they are features to harden the operating system against attacks. VBS is a good thing

Rollback_Jockey · Oct 30, 2025

Buddywh said:
But I do wonder why motherboard mfr's semi-secretly download and install Windows services if you don't disable it in BIOS settings, and include their own secure boot "Chain of Trust" certificates (not just PK, but KEK and DB too) in recent motherboard BIOS updates. Just how much "ownership, oversight and control" of your system and it's useage does that have potential to give them?

I think that they believe that you having bought their product would want it running to spec's so will configure it as so.

SlicEnDicE · Oct 30, 2025

Yeah, it reduce the attack surface drastically. A malicious actor can't get further than the current attack vector which is just a tiny fraction of the OS. That part might just hang, then reset and restart, and the OS will carry on happily like nothing happened but the malicious actor has to start from scratch.

TraderGary · Oct 30, 2025

neemobeer said:
I mean if you wanted to be really technically correct, yes you could put a script into a cookie and execute it, but you would have to...

Have control of the code rendering and access the cookie and execute it

If you have a good content-security-policy in place that code won't work

If you have SRI in won't execute

The script will only execute in the scope of the browser (javascript) and will only have access to the DOM in most cases

If you have secure and httponly attributes on your cookies can't be easily tampered with

Yes, technically: A cookie is just a string of text, so you can store JavaScript code in it.

But it won't execute on its own: Cookies are passive. They don’t run code. They just sit there until something—usually a script on the web page—reads them.

neemobeer · Oct 30, 2025

Hence why I said you have to control the serrver in order to pull the data from the cookie and execute it

ultrajv · Oct 30, 2025

TraderGary said:
No, cookies do not contain scripts and cannot execute code. They are passive text files used for storing data—not active programs.

I suggest you look at the data if you can. It's not easy. it's not just text files. There is code that you can't read. It's proprietary. As for a comment saying it's impossible to do Cookie poisoning, not true. Have a look what's on your PC rather than theoretically saying it's just text.

HarleyQuinn · Oct 30, 2025

neemobeer said:
No, they are features to harden the operating system against attacks. VBS is a good thing

yeah earlier i wanted to install some old AMD graphic driver and system gave me error, when i checked code on google, found reddit page suggesting me to close memory integrity under device security. I did and was able to install driver.

What i understand from here 25h2 is more secure than 23h2. What worried me is that how system able to turn ON virtualization status without taking my approval first? I also found this built in feature of my CPU means intel been doing this for years? Or is it microsoft's latest update?

DJNelson · Oct 30, 2025

It's all a racket. The holes in Windows security are a feature, not a bug. There's less profit for Anti-Malware scammers and hardware manufacturers if MS ever built a stable, secure OS that never needs to be "updated." Otherwise it would have been done decades ago.

Josey Wales · Oct 30, 2025

DJNelson said:
It's all a racket. The holes in Windows security are a feature, not a bug. There's less profit for Anti-Malware scammers and hardware manufacturers if MS ever built a stable, secure OS that never needs to be "updated." Otherwise it would have been done decades ago.

If I really believed this, I would get off of Windows period.

TraderGary · Oct 30, 2025

ultrajv said:
I suggest you look at the data if you can. It's not easy. it's not just text files. There is code that you can't read. It's proprietary. As for a comment saying it's impossible to do Cookie poisoning, not true. Have a look what's on your PC rather than theoretically saying it's just text.

"So much misinformation on this." was your first sentence in your original post. Be careful you're not posting misinformation yourself. Cookie Poisoning IS just text until it is read and executed by the original web site.

All the "things" being talked about windows 11. Security, spyware, and etc.

New member

My Computer

Well-known member

My Computers

Stock Market Wizard

My Computers

Well-known member

My Computers

Well-known member

My Computers

New member

My Computer

Stock Market Wizard

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Stock Market Wizard

My Computers

Well-known member

My Computer

New member

My Computer

Well-known member

Attachments

My Computers

Well-known member

My Computer

Endeavor to Persevere

My Computers

Stock Market Wizard

My Computers