upvote
> It became way better when microsoft started tormenting the users of win11 instead of win10, and now that windows update doesn't bring new catastrophes and unexpected reboot, the OS is finally not interfering with usage anymore.

Yesterday when I booted my windows 10 desktop PC I got a bunch of popups (Win32 MessageBox) about errors in some O365 AI dll files.

Turns out some MS AI software was silently installed on my PC in late may.

I do not have MS Office or anything that should require any AI software.

reply
What you probably have is a component of O365 as an updater installed - check your programs and features because msft bundled this awhile back and once its removed it will stop the update treadmill.
reply
You are not worried about 0-days and other malware?
reply
The computer is not exposed to the WAN (behind a firewall), the main way it could get infected is via a vulnerability in a browser, but these do get updated. And OS updates don't really protect you from malware in executables you install anyway.
reply
The other potentially obvious question is why bother using an OS that’s out of support when Linux is so good?

I left Windows 11. The last straw wasn’t Microsoft accounts or Windows updates. I actually thought the OS was fine, most OS updates actually added great new features, and anything I considered an annoyance was easy to disable permanently.

Toss your Windows 11 ISO into Rufus and disabling things like Microsoft account requirements is a trivial process.

What I actually rage quit Windows over was AMD graphics drivers and a couple of my video games crashing.

What caught me by surprise is just how little I’d miss it. I thought I’d need to dual boot or run a Windows VM for little random things. Nope, I just don’t need them.

I didn’t expect to find an OS with more software that I tend to like better. Like my email client, where I moved from Thunderbird to Evolution and for the most part I find that to be a step up in user experience.

reply
I would guess because "so good" does not equate with 100% and presumably the user's needs fall in that 5%.

Linux has been usable for non proprietary software for decades now. The fact that people are refusing to jump ship even when Windows actively undermines them and itself speaks volumes of people's aversion (or inability) to switch OSes.

reply
There's always the next great kernel level font or scrollbar exploit.
reply
A simple trade off. Guaranteed malware from microsoft, or potential attacks that you can mitigate with firewalls, airgaps or Anti-Virus software.
reply
Just use mass grave scripts[1] and enable 5 years of security updates.

[1] https://massgrave.dev/

reply
Running Windows 10 Enterprise IoT LTSC still gives you updates until 2031 with the added benefit of no app store. I run it as my main OS since last October and have yet to encounter any issues.
reply
>Running Windows 10 Enterprise IoT LTSC [...] have yet to encounter any issues.

It depends on the type of software a user runs. I installed Windows 10 LTSC on a friend's computer last year thinking she could run it for at least 5 more years and just ignore the newer Windows 11/12/whatever.

But she needed Intuit TurboTax 2025 and it requires Windows 11 and it's a hard requirement. The installer aborts on Windows 10. It's not a soft requirement like Adobe where they only support Windows 11 but their installer still runs on Windows 10. Autodesk Fusion 360 is another example that requires Windows 11.

I'm guessing if there's a future Windows 12, Intuit TurboTax will be aggressive about making it a requirement that forces the issue even though nobody wants to upgrade to it.

reply
Fusion 360 complains about Windows 10, but it still runs fine.
reply
I'd say that comes down to the difference between requirements (i.e. will it run at all, does it use features only found in win11) and support, and the developer's decisions around that. I can appreciate not supporting win10 even if it runs as they have a written or implied burden to make sure it keeps operating correctly for the lifespan, and that may include keeping test systems around or handling bugs that turn up in the OS that's getting reduced support itself, or other factors like drivers. Then there's the question of whether people would be willing to pay for a "your mileage may vary" level of support on something commercial.
reply
Only downside I've encountered using W10 IoT LTSC is that I had the temporarily change the currentbuild key (HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion) in registry to 19045 to be able to install docker and WSL2.
reply
I thought it was 2032. I use IoT LTSC as well and I can second that this is a great OS and everything runs without issue.

I would add that I've also used Windows 11 IoT LTSC and that experience is very similar to Windows 10 IoT LTSC.

reply
I have Win11 Pro and have yet to encounter any issues
reply
I use Windows 10 with a relatively obscure firewall software with a per-process/per-service whitelist, and try to not be stupid on the Internet. I also do regular backups. This should cover most of the risk model applicable to me. Has worked so far.
reply
I don't suppose that you can share the setup with us? What firewall, how are the backups performed, how regular etc.
reply
Microsoft already handles infecting their users, how many times have they broken Windows 11 through patches?
reply
Why would they need to be any more worried about those now than before?

The same holes exists and have existed for some time already. If he was not worried about them before why be worried about them now? And if you're worried about security holes why not be worried about the ones that exist now?

In general I find it funny that some people think that system is "secure" when it's on the latest version. At time t0 version N is considered "secure" then an update is made at t1 with version N1 and suddenly N is no longer secure. But it didn't change... it's the same version it was before.

Fact is a computer system is never going to be 100% secure.

reply
Because the longer software is out in the wild, the more vulnerabilities are found. At least when they're found in windows 11 they should be patched
reply
ESU updates are free for private users.

So till november 2026 or so everything is fine. Then I will probably have to switch to Linux.

reply
Only if you accept signing in with a Microsoft account.
reply
Man 0-days are expensive stuff no one throws them at random people.
reply
Not really. The odds are way higher that an update will hose your system and data.
reply
From definition, a 0-day is not patched in any system because it's not known. But back to your real question.

The biggest attack vectors are the browser, the mail client and direct network access. I would never use outlook, edge or connect my computer directly without NAT or firewall to the open internet. And would never open a website without a add blocker.

You can count all other known big attacks(on unpatched Windows 7!!!) on one hand.

1) Remote execution via Wifi Stack

2) Remote execution via True Type Fonts

3) 0-Click code execution via USB Stick Icon processing

Windows update instead gives AT LEAST Microsoft a steady remote code execution on your and millions of other computers. It's a really interesting attack target when you go big. Why I should trust M$ to get the security there right?

reply
You mean Windows 11, or 10?

I joke

reply
lol. He’s using Windows in the first place so, clearly no.
reply
Note, there is a way to turn on extended support (updates). I'm getting updates on my w10. And random restarts, argh. Googling it should be enough to find it.
reply
They're hosted on GitHub [1], if that's not implicit support from Microsoft, I don't know what is.

[1] https://github.com/massgravel/Microsoft-Activation-Scripts

reply
It's still bugging me about windows 11
reply
Maybe disable Secure Boot/TPM in BIOS? No more nag screens when PC doesn't support Windows 11.
reply
I never had it enabled on that machine.
reply