Microsoft SSH agent persistently stores your unencrypted private keys in the registry. They’re still there unlocked and usable after you reboot.
God, the final comment in that thread makes my blood boil.
Right there in the name, it says Secure She’ll Hades
does this company intentionally want users to stop using it? cuz day by day either theres a new windows bug or just shittier softwares
I think it’s more than they just don’t care. Microsoft cornered the business world decades ago because they’ve got wot C-levels crave…or something. End users have no say in it.
The AI tells them this is fine, and we are not to question the AI.
deleted by creator
trust is multiplicative, not additive
Our lives are in the hands of morons. What the fuck.
Theres an AI for that.
Our lives are in the hands of product managers driving programming decisions.
Oh, sorry. I just realized I repeated what you said.
HOLY @#%^ WHAT IN THE @#%^ DO THEY MEAN “NOT TO WORRY”???
They mean that it won’t affect them.
2026 is gonna be the year I finally move to Linux. I have huge concerns about many aspects of switching, but they’re being overtaken by concerns about staying with Windows. I don’t even mind if my overall user experience is a bit worse on Linux (I am trying to have reasonable expectations that it won’t be the walk in the park Linux advocates on Lemmy like to claim), I just have much more faith in its security, privacy, customisability and - most importantly - the motivations and intentions of its developers.
Best of luck! If you’ve got questions or problems feel free to DM me (or reply here) and I’ll try to help as best I can. I’ve been using linux since the mid 90s, so I have a decent idea of how it all works :)
I switched my mom to Linux because teaching her how to use Linux as her daily driver was easier than trying to unfuck windows on her computer.
Back up your data and then go nuts.
deleted by creator
Access to browser data as described in the reported scenario would require the device to already be compromised.
Yes you can open our safe with just a good yank but if a thief can do that they’re already in your house.
If the thief is already in your house, he can also eat your meal and steal your furniture.
Microsoft - So secure we ROT13 encode everything… TWICE!
“Yeah totally secure! Just trust me!..” basically
This is LITERALLY isn’t secure; they should atleast make it encrypted. This is just the same as using your notes app as password manager! But it’s microsoft, and they’re willingly giving your bitlocker encryption key to the FBIs for your drives. So I’m not surprised…
They say not to worry because they know nobody uses that dumpster fire of a browser so there’s no actual risk of your passwords being leaked since you’re not using it anyways.
Corporate has entered the chat.
Unless you’re like me and the websites you use for work require it and don’t work in literally any other browser (I have tried everything)
Hey. Hey. I got some PS scripts
Eh. To be honest it indeed does not matter much. Scanning your RAM for passwords is much harder than simply reading them off the browsers files. Sure, it is encrypted and the key is not necessarily on your computer, but remember that if the software can decrypt your passwords without you inputting a password or similar, then anything with access to your device can as well.
Don’t use your browser’s password manager.
For real. Like why isn’t that a plugin? I feel like security best practices have advised against using the baked-in password manager in the browser for near a decade now, so any browser claiming an interest in security could score a big win by literally just removing that functionality.
Its a disservice that they even exist st all at this point.
Or simply… Make it encrypted with a password. That simple.
This is why gamers should reject kernel anti cheats. A single dev at a single company that requires one could read them as easily as any other file. I’m not exaggerating, unless I’m misinformed
Just use a separate boot for games
I think instead I will choose to both A) not install a rootkit on my desktop B) avoid an OS that handles passwords in plaintext
How will the NSA spy on you if Microsoft doesn’t hand them your passwords?
Nothing in this timeline surprises me any more.
