Should OS makers, like Microsoft, be legally required to provide 15 years of security updates?

  • Hawk@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    33
    ·
    13 hours ago

    No, Windows 11 added extra, unneeded hardware requirements.

    Obsolete in this case actually means obsolete. Windows 11 literally blocks the update because you do not meet requirements, such as not having a TPM.

    Technically, there are ways to bypass this, but not for a casual user (and it probably breaks some ToS)

    • Smith6612@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      11 hours ago

      Yep, exactly this. You can bypass the TPM and Processor requirements, but at some point it will come back to bite someone in the butt.

      Microsoft with the 24H2 update broke Windows 11 for older systems (like Core2Duo, which are already ancient) due to a lack of required processor instructions. I’ve seen systems running under QEMU, and also on newer systems like the AMD Ryzen Zen1 platform experience “Unsupported Processor” BSODs preventing the system from booting.

      Even outside of that, Microsoft doesn’t deploy the yearly feature roll-ups to systems with unsupported hardware, even if Windows 11 is already installed. I’ve seen many unsupported systems end up stuck 1-2 builds behind, and they never see the update. They have to be manually updated using the same mechanisms that got Windows 11 installed in the first place.

      Microsoft I believe, expects Windows 11 to be running on a minimum set of hardware, and that’s all they are qualifying it for. So older systems are going to eat it at some point if they are used in production.

      The TPM checks are for security but, certainly not required if someone is willing to drop system security for some reason.

      • Buddahriffic@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        2 hours ago

        TPM is more about securing data from PC owners rather than for them. Since it’s there anyways, it is used to support bitlocker, but the reason they are pushing it so much is because it might (depending on whether it actually is secure) be able to allow content providers to allow users to view their content without needing to give them access to copy or edit it.

        And there isn’t any guarantee that the uses that do benefit the user’s security don’t have some backdoor for approved crackers to get in. Like doesn’t the MS account store a copy of the recovery key for bitlocker? Which is nice for when the user needs it, but also comes in handy if MS wants to grant access to anyone else.