Skip to content
0:00 / 0:00

#windows11#kernel#tpm

BlueHat IL 2023 - David Weston - Default Security

Microsoft Israel R&D Center

3.7K subscribers • 2 videos on Hallway

YouTube
  • Recommended by 3 people: 3 on Hacker News.
  • Presented by David Weston, Vice President of Enterprise and OS Security at Microsoft
  • Made by the vendor. The company whose product it covers made or sponsored it.

Advanced. Deep dive for people who know the field.

46K views3 years ago3 recommendations

SecuritySystems programmingOperating systemsRustWeb and application security

David Weston outlines the evolution of Windows security, detailing hardware-backed mitigations and the integration of Rust into the Windows kernel.

The journey towards default security This talk will take the audience through the evolution of Windows security and provide insight into the latest advances. This will include a technical overview of the some of the recent capabilities in the Windows 11 OS as well as hardware. Finally the audience will also get a view of future changes in Windows that will have a large impact in preventing attacks and the exploitation of vulnerabilities.

Why it's here

3 people recommend this

What people say. Recommended for its insights into Microsoft's adoption of Rust for core Windows libraries and kernel components.

senectus1on Hacker News • Recommends

On “Microsoft is busy rewriting core Windows library code in memory-safe Rust”

link to this video This is the announcement video. its about an hour long but much of it is very interesting. "Adminless windows" sounds very interesting.

nindalfon Hacker News • Recommends

On “Microsoft is to enable Rust use for Windows 11 kernel”

Link to the talk - link to this video (timestamped to the part about Rust) The speaker covers a bunch of areas and the final part of the talk (around 10 minutes) is about Microsoft introducing Rust in some self-contained areas in Windows. Some highlights: - Their focus is on "killing bug classes". More context in this post by Microsoft Research from 2019 - A proactive approach to more secure code. - They want to do this with memory safe languages, CPU architectural changes and safer language subsets. This talk focussed on memory safe languages, specifically Rust. - First area they've introduced Rust in - a cross platform rewrite of a font parser called DWriteCore. The team reported that parsing was "in…

Hawxyon Hacker News • Recommends

On “Microsoft quietly supported legislation to make it easier to fix devices”

> just to make existing CPUs obsolete and keep Intel in business. Bizarre take. It's not random, it's specifically CPUs that support modern hardware security mitigations. There's a pretty great talk from Bluehat a few days ago that goes into why Microsoft is doing this: link to this video

Hawxyon Hacker News • Recommends

On “Microsoft deletes official Windows 11 CPU/TPM bypass for unsupported PCs”

> Security There's a pretty interesting video from 2023 that goes through much of Microsoft's thoughts around Windows security. It flew under the radar unfortunately: link to this video

mustache_kimonoon Hacker News • Mentions

On “BlueHat IL 2023: Microsoft rewriting core Windows libraries in Rust”

Rust discussion starts at: link to this video Highlights: * 2 projects: dwrite and Win32k * 2 devs, 6 months to rewrite 152KLOC C++ to 90KLOC Rust re dwrite * Performance increases of 5-15% re dwrite * Only about 10% of Win32k code is unsafe * No perf regressions re Win32k * Syscall in the Windows kernel now written in Rust

pohlon Hacker News • Mentions

On “Microsoft is busy rewriting core Windows library code in memory-safe Rust”

Listen to them talking about it. This isn’t the sound of rogue group of developers focused on creating job security for themselves link to this video

pjmlpon Hacker News • Mentions

On “Microsoft is to enable Rust use for Windows 11 kernel”

Which is why if you watch the talk where this was announced, Windows is in the process of requiring signed binaries, and two admin levels like on macOS. link to this video

mustache_kimonoon Hacker News • Mentions

On “Microsoft is to enable Rust use for Windows 11 kernel”

> BlueHat IL 2023: Microsoft rewriting core Windows libraries in Rust (youtube.com) 89 points by mustache_kimono 23 hours ago | past | 45 comments The primary source material is this talk: link to this video

pl4ntyon Hacker News • Mentions

On “Microsoft quietly supported legislation to make it easier to fix devices”

David Weston was very involved in the TPM decision, and spoke about it here: link to this video After msft's experiences with Win10, they decided Windows wouldn't become more secure unless they enabled features by default. And the majority of high-impact features depend on a TPM. I'd argue that home users do need these features in the current security environment. TPMs have been required in new devices since 2016, so people are more likely to have thrown out incompatible devices already (CPU/RAM if not disk)

pjmlpon Hacker News • Mentions

On “Win32 App Isolation”

This is the continuation of bringing UWP security model into Win32, and make Windows security features all enabled by default. See BlueHat IL talk on the matter, link to this video There are no plans for Windows 10, beyond security fixes until 2025, it is done. EDIT: There is a BUILD 2023 talk on the matter as well. link

pjmlpon Hacker News • Mentions

On “The Windows installer of ImageMagick will no longer be signed”

Security is coming anyway, unless you stay on old Windows versions. "BlueHat IL 2023 - Default Security" link to this video "Modernize your Win32 application for security and privacy" link

shortsunblackon Hacker News • Mentions

On “Bitwarden Heist – How to break into password vaults without using passwords”

Microsoft is trying to do that with msix and a new filesystem driver that transparently restricts file system access to app. Should land into Windows 11 this year. See link to this video for the functionality explaination.