you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 months ago (23 children)

Just gonna keep using 10 and pass everything through a pfsense router. Strictly speaking it's the cheaper and safer option.

  • source
  • hideshow 23 child comments
  • [–] 8 points 2 months ago (3 children)

    keep using 10

    And make sure you convert your install to Windows 10 IoT Enterprise LTSC 2021. Security updates until January 2032.

    https://massgrave.dev/windows10_eol#windows-10-iot-enterprise-ltsc-2021

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 2 months ago (2 children)

    Is the Windows 10 IoT version actually meant to be running on "things"? Because why would such an operating system be able to be daily drivable. The last task my Windows drive had was to play VR games, crazy to think a IoT OS would have enough stuff in there to be able to do that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 months ago

    Yeah it sounds weird, right? Microsoft also has in the minimum requirements that it needs 20 GB of storage, which seems incredible to me. Maybe they are expecting companies to strip out more before embedding it in devices.

    Anyway, for our purposes it seems Windows 10 IoT Enterprise is missing only very few things. I believe the Microsoft Store, Xbox App and Cortana are not on there. Supposedly you can add them back if you need.

    But since I converted an existing Windows 10 Pro install, I even kept those (not that I want them...), and I'm still getting the security updates.

  • source
  • parent
  • [–] 8 points 2 months ago (10 children)

    Many attack vectors happen over your outbound connections. How would a router protect you against those?

  • source
  • parent
  • hideshow 10 child comments
  • [–] 3 points 2 months ago (9 children)

    Not at router, a firewall, and with rules of course. You're not making any real claims, but I assure you win10 behind a decent firewall setup is probably safer than 11 will ever be.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 3 points 2 months ago (2 children)

    That is an insane thing to say. Outbound connections can open you up to all kind of vulnerabilities which will be a lot better documented for Windows 10 than for 11.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 2 months ago* (5 children)

    Your initial comment implied that the default firewall rules of blocking all inbound connections was sufficient. Since you're the one who's making big claims I was hoping you would enlighten us with those firewall rules of yours.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 0 points 2 months ago (4 children)

    I think you're making some assumptions on my behalf. I said a firewall, not windows firewall.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 2 months ago* (2 children)

    Nobody was talking about Windows Firewall. You are clearly in the "fake it" phase of "fake it till you make it". Otherwise you'd post your magical custom outgoing NAT rules.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 31 points 2 months ago (3 children)

    "Just gonna keep using 10 and pass everything through a pfsense router. Strictly speaking it’s the cheaper and safer option."

    No.

    The pfsense router is fine but continuing to use an outdated OS that was riddled with vulnerabilities when it was current is not only the LEAST safe option it also means that you are ignoring vastly more secure and FREE options.

    Dump Windows 10 and install Linux Mint.

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (-1 replies)
  • [–] 10 points 2 months ago (3 children)

    Pretty sure Linux is cheaper...

  • source
  • parent
  • hideshow 3 child comments