Brink said:

Tweet

— Twitter API (@user) View on Twitter

Read more: Key Windows 10 defense is 'worthless' and bug dates back to Windows 8 | ZDNet

Hi there.

This is just basically "Fake News".

Most Fraud is done with the purpose of scamming individuals and it's the way users open themselves to scamming has NOTHING WHATSOEVER TO DO with this type of security leak.

Believe me if you need a Phd. in computer science to hack into some home computer with zero "Scam value" then it's just a waste of time.

90% or more of computer Fraud comes from people opening emails with dubious attachments, opening Fake web sites, or giving away too much personal data on social media and elsewhere.

Even if you download Music / Video from a Torrent site it's unlikely the virus if any could affect your machine (so long as files are NOT .exe,.zip,.rar etc.)

Standard mkv/mp3/flac/mp4 etc just won't play if there's a "hidden payload".

I'm not saying don't install AV software but worrying about this type of stuff brings Paranoia to a whole new level - especially for Home users -- what's a hacker got to gain by attempting a Dos (Denial of Service) attack say against a simple single user with a Slow internet speed.

I agree for Enterprise servers and the like -- important here but it's a different ball game.

For Home users - just ignore --especially since people like ZDNET don't have any decent provenance.

Cheers
jimbo

Microsoft says Win 8/10's weak randomisation is 'working as intended'

This bug is a feature in 11 out of 12 scenarios

https://www.theregister.co.uk/2017/1...ure_not_a_bug/

cereberus said:

Zero entropy - what utter garbage. Any scientist or engineer know ms what entropy is, and that overall it inrxorably increases until the end of time when universe finally dies due to heat death!

You are thinking of the schoolboy concept of entropy. You should be thinking of this Entropic security - Wikipedia

This is not the same thing at all - just the "random" number is always exactly the same in Win10 and was not in earlier EMET versions. Therefore (as it is always the same number) how would you define the entropy? Zero seems a pretty fair description.

It isn't ASLR is wrong it was just incorporated wrong in Win 10 apparently.

Just read the OP - it links to it.

Actually, with Windows 7 and EMET System-wide ASLR, the loaded address for eqnedt32.exe is different on every reboot. But with Windows 10 with either EMET or WDEG, the base for eqnedt32.exe is 0x10000 EVERY TIME.
Conclusion: Win10 cannot be enforce ASLR as well as Win7!

Will Dormann on Twitter:

cereberus said:

Entropy is not a schoolboy concept! It underpins the whole of thermodynamics.

It is bs using term for anything else.

Best you update Wikipedia then and make sure anyone using cryptography uses a different word.

Best make sure there is not more than one meaning of the word "word" either. Word up!