1
0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-09 09:41:46 -05:00
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-11-05 04:52:45 -07:00
parent ea0e2db901
commit 9fe5cfb684
No known key found for this signature in database
GPG Key ID: D30DEC268D3FEB17

View File

@ -56,3 +56,15 @@ Probably same as SmartScreen for Microsoft Edge. Might not be as egregious thoug
### Exploit protection
Turn Force randomization for images (Mandatory ALSR) to "On by default".
# Device Security
## Security Processor & Secure Boot
If theres aren't on, check the firmware settings. On Parallels, both should pass by default.
## Data encryption
Poor man's Bitlocker. Unless you are using Home edition, turn this off and use Bitlocker proper.
If you sign in with a Microsoft account, "Data Encryption" will submit the key protector to Microsoft (which means that Microsoft can decrypt your device should they get physical access to it). Not sure what happens when you do not login with a Microsoft account, but it is worse than a proper Bitlocker setup anyways (no TPM + PIN/USB drive etc), so just disable it.