noinsight

> don't connect it to WiFi or Ethernet

This is not sufficient (for some of these devices) - they will automatically connect to an unsecured hotspot.

The drives to read them (Blu-rays) will be the problem. Pioneer stopped manufacturing them in 2024, only LG drives are available now.

Coincidentally I just bought one, they’ve doubled in price now recently.

Also bought some M-Discs to try. They’re half the price in Japan (Amazon) compared to Germany.

It’s funny… In Finland they went with hightrust.id (Indonesia) too.

Like the fabulous Windows UAC dialog. Perhaps the worst dialog in history.

If you’re at all serious about security and not user convenience, you deploy BitLocker with a PIN instead of TPM only. And then a whole class of vulnerabilities goes away.

> Put the phone in their pocket and it felt a press and went into edit mode and edited the lock screen.

This is why I hate the flashlight and camera buttons on the lock screen - which you can activate without unlocking. When you have your hands in your pockets during cold weather you’ll suddenly be ”filming”… I never use the camera on my phone anyway. Thankfully at some point they added support for removing them.

> Kate

So install Kate? There's a Windows build.

It is preinstalled. Server 2025 (even Core Edition) and Windows 11 24H2 (or 25H2, not sure)...

> bypasses the TPM check

The caveat with this is that it will fail the check on subsequent version upgrades too and will refuse to upgrade.

Non-Enterprise editions are only supported for 2 years so your 25H2 (or whatever it is) installation will go sour in 2027.

This was probably added by/for Tuxera to increase Tuxera Fusion SMB performance.

Windows is not limited to accessing partitions through drive letters either, it's just the existing convention.

You can mount partitions under directories just like you can in Linux/Unix.

PowerShell has Add-PartitionAccessPath for this:

> mkdir C:\Disk

> Add-PartitionAccessPath -DiskNumber 1 -PartitionNumber 2 -AccessPath "C:\Disk"

> ls C:\Disk

It will persist through reboots too.

> We are also entering the age of "hey AI, take this repo, reimplement the same functionality".

Wouldn't you do this just against the/an API documentation? Interesting thought.

You can just use Unbound for DNS.

Bamboo isn’t even wood, it’s grass.