je moet VT en VT-d (direct i/o oftewel dma met iommus) uit schakelen - dan krijgt ms zijn vbs (virtualization based security) niet van de grond - en dan werkt alles weer normaal

[astral spectre]

microsoft runs on trust

maar heel erg lang zaam

al ze je niet kunnen identificeren

[astral spectre]

tv.

[astral spectre]

sieg heil

[astral spectre]

ur.

[astral spectre]

md.

[astral spectre]

ca.

[astral spectre]

https://learn.microsoft.com/en-us/windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows

[astral spectre]

All Control Panel Item Commands (credits shawn ?)

Add a Device wizard
cmd> %windir%\System32\DevicePairingWizard.exe

Add Hardware wizard
cmd> %windir%\System32\hdwwiz.exe

Add a Printer wizard
cmd> rundll32.exe shell32.dll,SHHelpShortcuts_RunDLL AddPrinter

Additional Clocks
cmd> rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,1

Administrative Tools
cmd> control /name Microsoft.AdministrativeTools
cmd> control admintools

AutoPlay
cmd> control /name Microsoft.AutoPlay

Backup and Restore (Windows 7)
cmd> control /name Microsoft.BackupAndRestoreCenter

BitLocker Drive Encryption
cmd> control /name Microsoft.BitLockerDriveEncryption

Color and Appearance
cmd> explorer shell:::{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}
-Microsoft.Personalization\pageColorization

Color Management
cmd> control /name Microsoft.ColorManagement

Credential Manager
cmd> control /name Microsoft.CredentialManager

Date and Time (Date and Time)
cmd> control /name Microsoft.DateAndTime
cmd> control timedate.cpl
cmd> control date/time
cmd> rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,0

Date and Time (Additional Clocks)
cmd> rundll32.exe shell32.dll,Control_RunDLL timedate.cpl,,1

Default Programs
cmd> control /name Microsoft.DefaultPrograms

Desktop Background
cmd> explorer shell:::{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}
-Microsoft.Personalization\pageWallpaper

Desktop Icon Settings
cmd> rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,0

Device Manager
cmd> control /name Microsoft.DeviceManager
cmd> control hdwwiz.cpl
cmd> devmgmt.msc

Devices and Printers
cmd> control /name Microsoft.DevicesAndPrinters
cmd> control printers

Ease of Access Center
cmd> control /name Microsoft.EaseOfAccessCenter
cmd> control access.cpl

File Explorer Options (General tab)
cmd> control /name Microsoft.FolderOptions
cmd> control folders
cmd> rundll32.exe shell32.dll,Options_RunDLL 0

File Explorer Options (View tab)
cmd> rundll32.exe shell32.dll,Options_RunDLL 7

File Explorer Options (Search tab)
cmd> rundll32.exe shell32.dll,Options_RunDLL 2

File History
cmd> control /name Microsoft.FileHistory

Fonts
cmd> control /name Microsoft.Fonts
cmd> control fonts

Game Controllers
cmd> control /name Microsoft.GameControllers
cmd> control joy.cpl

Get Programs
cmd> control /name Microsoft.GetPrograms
cmd> rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,1

HomeGroup
cmd> control /name Microsoft.HomeGroup

Indexing Options
cmd> control /name Microsoft.IndexingOptions
cmd> rundll32.exe shell32.dll,Control_RunDLL srchadmin.dll

Infrared
cmd> control /name Microsoft.Infrared
cmd> control irprops.cpl
cmd> control /name Microsoft.InfraredOptions

Internet Properties (General tab)
cmd> control /name Microsoft.InternetOptions
cmd> control inetcpl.cpl
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,0

Internet Properties (Security tab)
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,1

Internet Properties (Privacy tab)
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,2

Internet Properties (Content tab)
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,3

Internet Properties (Connections tab)
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,4

Internet Properties (Programs tab)
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,5

Internet Properties (Advanced tab)
cmd> rundll32.exe shell32.dll,Control_RunDLL inetcpl.cpl,,6

iSCSI Initiator
cmd> control /name Microsoft.iSCSIInitiator

Keyboard
cmd> control /name Microsoft.Keyboard
cmd> control keyboard

Language
cmd> control /name Microsoft.Language

Mouse Properties (Buttons tab 0)
cmd> control /name Microsoft.Mouse
cmd> control main.cpl
cmd> control mouse
cmd> rundll32.exe shell32.dll,Control_RunDLL main.cpl,,0

Mouse Properties (Pointers tab 1)
cmd> control main.cpl,,1
cmd> rundll32.exe shell32.dll,Control_RunDLL main.cpl,,1

Mouse Properties (Pointer Options tab 2)
cmd> control main.cpl,,2
cmd> rundll32.exe shell32.dll,Control_RunDLL main.cpl,,2

Mouse Properties (Wheel tab 3)
cmd> control main.cpl,,3
cmd> rundll32.exe shell32.dll,Control_RunDLL main.cpl,,3

Mouse Properties (Hardware tab 4)
cmd> control main.cpl,,4
cmd> rundll32.exe shell32.dll,Control_RunDLL main.cpl,,4

Network and Sharing Center
cmd> control /name Microsoft.NetworkAndSharingCenter

Network Connections
cmd> control ncpa.cpl
cmd> control netconnections

Network Setup Wizard
cmd> control netsetup.cpl

Notification Area Icons
cmd> explorer shell:::{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}

ODBC Data Source Administrator
cmd> control odbccp32.cpl

Offline Files
cmd> control /name Microsoft.OfflineFiles

Performance Options (Visual Effects)
cmd> %windir%\system32\SystemPropertiesPerformance.exe

Performance Options (Data Execution Prevention)
cmd> %windir%\system32\SystemPropertiesDataExecutionPrevention.exe

Personalization
cmd> explorer shell:::{ED834ED6-4B5A-4bfe-8F11-A626DCB6A921}

Phone and Modem control /name Microsoft.PhoneAndModem
cmd> control telephon.cpl

Power Options
cmd> control /name Microsoft.PowerOptions
cmd> control powercfg.cpl

Power Options - Advanced settings
cmd> control powercfg.cpl,,1

Power Options - Create a Power Plan
cmd> control /name Microsoft.PowerOptions /page pageCreateNewPlan

Power Options - Edit Plan Settings
cmd> control /name Microsoft.PowerOptions /page pagePlanSettings

Power Options - System Settings
cmd> control /name Microsoft.PowerOptions /page pageGlobalSettings

Presentation Settings
cmd> %windir%\system32\PresentationSettings.exe

Programs and Features
cmd> control /name Microsoft.ProgramsAndFeatures
cmd> control appwiz.cpl

Recovery
cmd> control /name Microsoft.Recovery

Region (Formats tab)
cmd> control /name Microsoft.RegionAndLanguage
cmd> control /name Microsoft.RegionalAndLanguageOptions /page /p:"Formats"
cmd> control intl.cpl
cmd> control international

Region (Location tab)
cmd> control /name Microsoft.RegionalAndLanguageOptions /page /p:"Location"

Region (Administrative tab)
cmd> control /name Microsoft.RegionalAndLanguageOptions /page
/p:"Administrative"

RemoteApp and Desktop Connections
cmd> control /name Microsoft.RemoteAppAndDesktopConnections

Scanners and Cameras
cmd> control /name Microsoft.ScannersAndCameras
cmd> control sticpl.cpl

Screen Saver Settings
cmd> rundll32.exe shell32.dll,Control_RunDLL desk.cpl,,1

Security and Maintenance
cmd> control /name Microsoft.ActionCenter
cmd> control wscui.cpl

Set Associations
cmd> control /name Microsoft.DefaultPrograms /page pageFileAssoc

Set Default Programs
cmd> control /name Microsoft.DefaultPrograms /page pageDefaultProgram

Set Program Access and Computer Defaults
cmd> rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,3

Sound (Playback tab)
cmd> control /name Microsoft.Sound
cmd> control mmsys.cpl
cmd> %windir%\System32\rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,0

Sound (Recording tab)
cmd> %windir%\System32\rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,1

Sound (Sounds tab)
cmd> %windir%\System32\rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,2

Sound (Communications tab)
cmd> %windir%\System32\rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,,3

Speech Recognition
cmd> control /name Microsoft.SpeechRecognition

Storage Spaces
cmd> control /name Microsoft.StorageSpaces

Sync Center
cmd> control /name Microsoft.SyncCenter

System
cmd> control /name Microsoft.System
cmd> control sysdm.cpl

System Icons
cmd> explorer shell:::{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9} \SystemIcons,,0

System Properties (Computer Name)
cmd> %windir%\System32\SystemPropertiesComputerName.exe

System Properties (Hardware)
cmd> %windir%\System32\SystemPropertiesHardware.exe

System Properties (Advanced)
cmd> %windir%\System32\SystemPropertiesAdvanced.exe

System Properties (System Protection)
cmd> %windir%\System32\SystemPropertiesProtection.exe

System Properties (Remote)
cmd> %windir%\System32\SystemPropertiesRemote.exe

Tablet PC Settings
cmd> control /name Microsoft.TabletPCSettings

Text Services and Input Languages
cmd> rundll32.exe Shell32.dll,Control_RunDLL
input.dll,,{C07337D3-DB2C-4D0B-9A93-B722A6C106E2}

Text to Speech
cmd> control /name Microsoft.TextToSpeech

Troubleshooting
cmd> explorer
shell:::{26EE0668-A00A-44D7-9371-BEB064C98683}\0\::{C58C4893-3BE0-4B45-ABB5-A63E4B8C8651}

User Accounts
cmd> control /name Microsoft.UserAccounts
cmd> control userpasswords

User Accounts (netplwiz)
cmd> netplwiz
cmd> control userpasswords2

Windows Defender Firewall
cmd> control /name Microsoft.WindowsFirewall
cmd> control firewall.cpl

Windows Defender Firewall Allowed apps
cmd> explorer shell:::{4026492F-2F69-46B8-B9BF-5654FC07E423}
-Microsoft.WindowsFirewall\pageConfigureApps

Windows Defender Firewall Details
cmd> %WinDir%\System32\WF.msc

Windows Features
cmd> %windir%\System32\OptionalFeatures.exe
cmd> rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl,,2

Windows Mobility Center
cmd> control /name Microsoft.MobilityCenter

Work Folders
cmd> %windir%\System32\WorkFolders.exe



Virtualization Based Security (VBS)
Hyper Visor attested Code Integrity (HVCI)
Virtualization Technology (VT) for DMA (VT-d)
Secure Boot (SB) and Secure Launch
MS System, Credential and Device Guard (SG/CG/DG)
Volume Licence Agreement (VLA)

enable VT, VT-d, SB en DG in UEFI setup and install Windows 10
in Windows 10, go to control panel/programs and features/windows features
install hyper-V/hyper-V platform/hyper-V hypervisor
run gpedit.msc
in group policy, go to computer configuration/administrative
templates/system/device guard
in the right panel, open Turn on VBS and set it to Enabled
for platform security level select secure boot or secure boot with
DMA protection
DMA protection requires i/o memory management units or IOMMUs, i.e.
VT-d
for VBS of code integrity (HVCI) select Enabled with or without UEFI lock
for CG select Enabled with or without UEFI lock
with UEFI lock, HVCI/CG is both enabled in UEFI setup and in Group
Policy
without UEFI lock, HVCI/CG is just enabled in group policy, and can
therefore be remotely disabled
check Require UEFI memory attributes table, which is a firmware
compatibility requirement
for Secure launch select Enabled to secure the boot chain
to disable the policy, open Turn on VBS and set it to Not configured
or Disabled
to disable Device guard, you must manually disable DG in UEFI setup
run an elevated msinfo32.exe to check the results (Ctrl-Shift-OK)
Secure launch is only effective in Windows 10 Enterprise editions of a VLA
it cannot be individually bought
in the name of global peace tHPS recommends disabling DG, SB, VT-d and
VT in UEFI setup

[astral spectre]

https://igor-blue.github.io/2021/02/04/secure-boot.html

https://www.intel.com/content/dam/www/public/us/en/security-advisory/documents/intel-csme-security-white-paper.pdf



intel en microsoft konstrueren deze ultieme onkraakbare pc

onder de legitimatie dat onze wereld vrede en ekonomie

wordt bedreigd door kriminele hacker uit het oosten

die zoveel verstand hebben van de mazen van dit

systeem dat het al decennia minimaal verdacht is

waar ze precies hun opleiding en salaris betrekken



het is niet in microsoft's belang

dat onze data wordt gegijzeld

want ander hadden ze die legitimatie niet



wat opvalt

ja wat valt er eigenlijk op

is de vraag waarvoor je dat allemaal

en dan bedoel ik Secure Boot

voor nodig hebt



AL je misdadige hacker wilt bestrijden

die opzettelijk de wereld vrede bedreigen

dan vraag je je alleen niet af

wat er precies aan de hand is

al je dat zelf heel precies weet



dus wat weten microsoft

en zijn trabant intel

wat nog maal opvalt

al je nog maal hacker wilt bestijden

dan doe je dat normaliter ON THE RECEIVING END

oftewel bij de SLACHT OFFER



en DAT kun je gewoon op OS niveau regelen

met - evt. een virtuele - fire wall

die alle code verifieert die

VAN BUITEN

het systeem binnen komt

en dan heb je die hele Secure Boot of trust niet nodig



aan die onzinnige orientatie

heeft de Trusted Computing Group

niet maar een sekonde tijd verspild

daaren tegen zijn ze onmiddellijk begonnen

met het specificeren van die ultiem beveiligde

boot of trust - ook wel Secure Boot genoemd



in de gerede weten schap

dat het nadeel van elk wapen is

dat het tegen je kan worden gebruikt

en dat hacker niet met AMD computer

iNTEL computer kunnen attaqueren

want die smelten in de zomer

maar met iNTEL computer



en in dat specifieke geval

heb je niet te maken met klanten

die het slacht offer zijn van hacker

maar die DADER zijn middel jouw produkt

die fysiek aanwezig zijn bij het apparaat

en modifikatie aanbrengen in de hardware

en in dat - en alleen in dat geval

heb je CSME Secure Boot nodig

en dat weten microsoft en iNTEL



helaas

is CSME security

niet alleen verklaar baar

al een HUMONGOUS attempt

om hacker met power demonstratie

op andere gedachten te demotiveren

en humongous zo al in BETELGEUZE



er bestaat ook een lezing

dat ons collectieve intellect

als gauge wordt gebruikt

om de beveiliging graad

van deze machine te

specificeren



waarbij wij slecht fungeren

als miljarden grote test opstelling

niet tav. de human device interface

maar tav. de human pregnability

om deze machine te gebruiken

op betelgeuze



waarna wij vervolgen

integraal worden gegenocideerd

om te zorgen dat secure ook secure blijft

dus al je Secure Boot inschakelt

beken je jezelf niet al dader

maar al slacht offer

in aus witz

[astral spectre]

li.

[astral spectre]

overigens ben ik van mening

dat amsterdam oost, zwolle,

japan, china, sub saharan afrika

en de verenigde staten moeten worden verwoest

[astral spectre]

are you going to put on your mouth piece

or with a motherly smile am i

[astral spectre]

pu.

[astral spectre]

ok.

[astral spectre]

rb.

[astral spectre]

ah.

[astral spectre]

xn.

[astral spectre]

ok.

[astral spectre]

jm.

[astral spectre]

ok.

[astral spectre]

het is leven gevaarlijk

al het in je oog komt

ontstaat er een rode punt

die nooit meer weg gaat

[astral spectre]

nn.

[astral spectre]

fm.