Slashdot Mirror


No Known Ransomware Works Against Windows 10 S, Says Microsoft (betanews.com)

An anonymous reader shares a report: According to Microsoft, "no Windows 10 customers were known to be compromised by the recent WannaCry (WannaCrypt) global cyberattack." That's great news for anyone running the latest version of the OS, and the software giant says it is working to ensure Windows 10 remains safe from other future attacks. However, if you want to guarantee your safety from ransomware, then Microsoft points out there's an even more secure option to consider -- Windows 10 S. The new, hardened Windows 10 variant only runs apps from the Windows Store, which means it can't run programs from outside Microsoft's ecosystem, and that includes malware. Which is why, as Microsoft says, "No known ransomware works against Windows 10 S."

160 comments

  1. Oh yeah by ArchieBunker · · Score: 1, Insightful

    Jailbroken and rooted phones say otherwise.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
    1. Re:Oh yeah by Anonymous Coward · · Score: 0

      Shampoo is "safe for baby"? I made the little bastard drink the whole thing and he died. His corpse says otherwise.

    2. Re:Oh yeah by BozoForPresident · · Score: 1

      They prolly said the same thing about unreleased XP.

  2. Neither do the applications by Anonymous Coward · · Score: 2, Interesting

    None of the applications I regularly use are supported on Win10 S, so I guess it's as useless for me as it is for the ransomware developers.....

    1. Re:Neither do the applications by Anonymous Coward · · Score: 3, Insightful

      The most secure system is one that nobody can access

    2. Re:Neither do the applications by Darinbob · · Score: 2

      I have the most secure operating system ever. It does nothing but play minesweeper. Internet connections automatically fail to protect the system integrity. The OS and the single minesweeper application are stored in ROM and cannot be modified either with or without a password.

      This is more secure than Windows 10 S and slightly more useless.

    3. Re:Neither do the applications by LostMyBeaver · · Score: 1

      I'm with you on that... of course, I see this as a huge advantage. :)

      Here's my evil plan!

      1) Install Windows 10 S on the system
      2) Install Hyper-V on Windows 10 S (hopefully this is allowed)
      3) Configure RemoteFX graphics so I can run the Guest VM with good performance
      4) Setup a SMB share with an ACL only accessible by the Guest VM on the host
      5) Install Windows 10 Professional as the guest
      6) Run Windows Update.
      7) Install Office, Visual Studio, Docker, Linux Subsystem, some other crap as well.
      8) Snapshop the VM
      9) Configure Windows Backup and Restore to do "Time Machine" like backups of all my data to the host machine.

      Using a similar approach on corporate laptops will be awesome too. :)

      I already do 90% of my work over remote desktop anyway. My local PC is pretty much for nothing but entertainment. This way, the local machine is well protected and the "remote machine" is actually a local VM.

    4. Re: Neither do the applications by Anonymous Coward · · Score: 0

      "No known software works on Windows 10 S!"

      Which means we only have to worry about Intel AMT ME now. That's literally the only mal^H^H^Hsoftware left that works.

    5. Re:Neither do the applications by tigersha · · Score: 2

      Back in the day when MacOS 9 was still non-multitasking the US Army ran their webserver on it with the assumption that if you can't log in to the machine remotely (the server did not support SSH, telnet or anything else) you can't hack it. Apparently it worked for them.

      --
      The dangers of excessive individualism are nothing compared to the oppressiveness of excessive collectivism
    6. Re:Neither do the applications by butzwonker · · Score: 2

      Are you serious or joking? I honestly can't tell.

    7. Re:Neither do the applications by gtall · · Score: 1

      And the most useless.

    8. Re:Neither do the applications by jvanber · · Score: 1

      So you have absolutely no idea as to what your highest score was?

    9. Re:Neither do the applications by Flea+of+Pain · · Score: 3, Insightful

      I just assumed Microsoft deleted their database on known ransomware so they could claim that no KNOWN ransomware works.

      --
      Do not argue with an idiot. He will drag you down to his level and beat you with experience.
    10. Re:Neither do the applications by BronsCon · · Score: 1

      He's got a small amount of NVRAM for that.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    11. Re:Neither do the applications by tepples · · Score: 1

      I have the most secure operating system ever. It does nothing but play minesweeper.

      Let me guess: You run Luminesweeper.

    12. Re:Neither do the applications by Darinbob · · Score: 1

      Actually no. But reading that page it does sound much more secure than Windows 10 S while still providing a safe walled garden.

    13. Re:Neither do the applications by Darinbob · · Score: 1

      I write my high scores down on a pad of paper. To prevent others from reading it I regularly burn those papers and watch the smoke rise. I call this "synching with the cloud".

    14. Re: Neither do the applications by BronsCon · · Score: 1

      This right here is the shit that keeps me coming back.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  3. None? by Carnildo · · Score: 5, Insightful

    I believe the correct response to this is "Challenge Accepted".

    --
    "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    1. Re: None? by Anonymous Coward · · Score: 0

      It's only a matter of time. There's malware in the app store and the Google play store.

    2. Re:None? by Anonymous Coward · · Score: 0

      To be fair, all MS has to do is cover their ears and yell out "LALALA I can't hear you" when someone mentions any ransomware and they'll be technically correct. Technically correct is the best kind of correct.

    3. Re:None? by Moheeheeko · · Score: 1

      Seems to work for Apple just fine.

    4. Re:None? by Anonymous Coward · · Score: 0

      I can't wait for the first malware to come out for it. I'd almost consider donating to the inventor. Almost.

    5. Re: None? by thundercattt · · Score: 0

      I agree. I remember when Crapple came out and said that viruses n such were a Windows problem and tooted their horn. Week later all these viruses for Mac popped up and they began crying

    6. Re:None? by Anonymous Coward · · Score: 0

      So will this challenge be met as quickly or quicker than the gaming DRM crack that was news this week? My money is on quicker...

    7. Re: None? by UltraZelda64 · · Score: 2

      That would be easy enough. If it is ransomware the person writes, just get yourself infected by it and willfully pay the ransom.

    8. Re:None? by omnichad · · Score: 1

      They didn't actually say "known to them," so if it's known by anyone I think it counts.

    9. Re:None? by Aighearach · · Score: 2

      No known ransomware runs on my pet rock, either.

    10. Re:None? by dcollins117 · · Score: 1

      It's not much of a challenge. That's like betting someone you can buy a bag of chips from a vending machine.

    11. Re: None? by Anonymous Coward · · Score: 0

      There's malware in the app store and the Google play store.

      Yeah, but people actually use Google play and Apple's app store. Who uses Windows store to buy apps? A couple of thousand Windows phone users maybe? Not exactly a high value target for malware compared to iPhone or Android devices.

    12. Re: None? by Anonymous Coward · · Score: 0

      Ignorant. STILL no known self propagating virus for Mac. AlwYs have to trick the user into an admin password install if you used them ud know

    13. Re: None? by Anonymous Coward · · Score: 0

      I was gonna say that!!

    14. Re: None? by RotateLeftByte · · Score: 1

      When MS makes Windows 10S the Only OS that OEM's can install on their kit (don't forget the pay $$ to upgrade to 10-Pro option) then just about everyone who buys a PC from the likes of Best-Buy, PC-World etc.

      MS is aiming for a model where everyone pays for the upgrade and then pays daily/weekly/annually for updates and patches. Software rental is alive and kicking.

      --
      I'd rather be riding my '63 Triumph T120.
    15. Re:None? by Anonymous Coward · · Score: 0

      NO!

      The true response is that it's all bullshit lies as before, same every day since day one of Windows.

      The correct response to that is to write zeroes to your drives and install FreeBSD, TrueOS, or even that bloated Linux thing called a "distro".
      In fact, you should have done that ages ago.

    16. Re: None? by Anonymous Coward · · Score: 0

      ANYONE who gets suckered into this crippled windows version will *HAVE TO* use the 'windows store' to install ANYTHING.

      since this is essentially the new 'windows with bing', expect to see a lot of this windows 10 'shittier edition' across a wide variety of desktops, laptops and tablets; but not only at the low end as is the case with 'windows with bing', but mid and higher-end as well since microsoft is pushing the limitations as a 'feature' for volume markets (ed/ent).

    17. Re: None? by Anonymous Coward · · Score: 0

      Thanks for explaining jokes !

    18. Re:None? by Anonymous Coward · · Score: 0

      No known ransomware runs on my pet rock, either.

      And your pet rock also repels tigers AND terrorist attacks.

      Take that, Windows!!

    19. Re: None? by BronsCon · · Score: 1

      MS is aiming for a model where everyone pays for the upgrade and then pays daily/weekly/annually for updates and patches. Software rental is alive and kicking.

      Well, that will certainly shut the "Macs cost more" crowd right the hell up, won't it?

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    20. Re: None? by tepples · · Score: 1

      When MS makes Windows 10S the Only OS that OEM's can install on their kit

      "When"? Can you provide a source for announced or leaked plans to discontinue Home in favor of S?

    21. Re: None? by dl_sledding · · Score: 1

      Introducing: Captain Obvious! ;)

    22. Re: None? by sound+vision · · Score: 1

      Not unless the hardware manufacturers double their prices too.

    23. Re: None? by BronsCon · · Score: 1

      Howso? You don't pay an ongoing fee to use your Mac once you buy it; if Microsoft starts charging a subscription fee for Windows, a PC will eventually (and quickly) become more expensive than a Mac. Hell, within a handful of years, while a top-end Mac might still be useful, a $300 bottom-of-the-barrel PC might end up costing more.

      And that's precisely why I'm fairly certain Windows will never become a subscription "service".

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
    24. Re: None? by RotateLeftByte · · Score: 1

      No link but isn't it the obvious move? Doing this will make more money for MS and that is what it is all about isn't it.

      --
      I'd rather be riding my '63 Triumph T120.
    25. Re: None? by sound+vision · · Score: 1

      "How so" is that the cost of the initial purchase is an order of magnitude higher than what you'd pay for OS upgrades on either platform. While it's hard to predict an annual subscription fee that MS hasn't implemented yet, they'd be crazy to set it anywhere close to what they sell boxed OSes for. Something in the range of $20/year would be my wild guess. At that rate, it would take decades for you to break even on avoiding the Apple tax.

    26. Re: None? by BronsCon · · Score: 1

      You really think Microsoft only wants $20/yr from Windows users? You're a funny guy, buddy.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  4. No ransomware by Anonymous Coward · · Score: 0

    And also no Steam, no Firefox, no Chrome. Goodbye competition, hello walled garden!

    1. Re:No ransomware by Anonymous Coward · · Score: 0

      Google will be a walled garden too once they dump Android in the next 1 to 2 years so get used to it...

    2. Re: No ransomware by Anonymous Coward · · Score: 0

      Get used to it LOL.
      As if Windows 7, android and Linux are just going to stop working.
      And don't bother threatening me with malware you didn't even write. I know about all that crap and have had good defense since the 90's.

    3. Re:No ransomware by Anonymous Coward · · Score: 0

      Chrome *is* malware, well technically its a keylogger with browser functionality.

    4. Re:No ransomware by tepples · · Score: 1

      Does Chromium, the build of Chrome with all non-free parts stripped out, also log keys?

  5. Also.... by Groo+Wanderer · · Score: 5, Insightful

    Also, no known useful software works on Windows 10 S either. Quite the tradeoff.

    Before you scoff at this as random trolling, think about what the odds are that Adobe, Autocad, and any real software packages are going to take a 30% haircut required by the MS store to run on this turkey. Sure MS programs will be there but Steam worn't be, nor will much else useful other than a sub-section of Windows Phone apps.

    But no malware as of today will run. They said the same thing about Windows 8.x upon release. And Windows 7, and.....

    1. Re:Also.... by Anonymous Coward · · Score: 1

      Photoshop Elements 15 is already available on there

    2. Re:Also.... by rtb61 · · Score: 3, Insightful

      Windows 10S is ransomware, why would it let other ransomware run. It's like kidnappers, allowing other people who claim to be the kidnappers, getting the ranson and make no mistake, M$ is kidnapping your digital life with windows 10$ and holding it to ransom, pay or lose it.

      M$ knows most consumers dislike them, just buy their gear because of existing lock in and now seeing that it is their only source of customers, they are attempting to force more people into the XBox domain. Seriously gullible idiots, who are paying to hand over control of their computer and their digital life to one corruptly monopolistic corporation, how popular is M$, just look at the lose phone (calling a winphone would be a lie).

      Yet the moronic fuckwits, rather than reforming and trying to become a better supplier and regain popularity, is simply trying to force more lock in, to extort it's customer base, either sign and pay for life or be cut off. It looks like people are preferring to be cut off.

      --
      Chaos - everything, everywhere, everywhen
    3. Re: Also.... by Anonymous Coward · · Score: 0

      Companies have already been taking 30% haircut.

      It's pretty industry standard right now.

    4. Re:Also.... by omnichad · · Score: 0

      This is what Apple calls duplicating functionality in its own store rules.

    5. Re:Also.... by Anonymous Coward · · Score: 1

      Windows 10 S sounds about as useless as the Windows surface RT that I was given, for free, as payment for work done. I sold it for $100. Had a lovely screen, great battery life, and just SO much potential. But, at the end of the day, the ONLY useful program on it was OneNote. And I already have that on my phone and other devices.

      Useless. Useless. Useless. So much potential. Couldn't even run OpenVPN. Come on, Microsoft. You're trying to turn the world into a walled garden like iPhone and Android. The thing is, THEY actually have useful programs to run.

    6. Re:Also.... by Anonymous Coward · · Score: 0

      Adobe, Autocad, and any real software packages are going to take a 30% haircut required by the MS store to run on this turkey

      They get around this by selling only subscriptions from the store, not the stand-alone license if they have those anymore. I can't believe MS would take an annual cut from a subscription that is purchased only once from the store.

    7. Re: Also.... by Anonymous Coward · · Score: 1

      I only have 30% of my hair left.
      I can not afford that.
      On the plus side, I wouldn't have any overhead.

    8. Re:Also.... by Anonymous Coward · · Score: 1

      "M$ knows most consumers dislike them"
      Consumers don't give MS a second thought. They don't care about the OS they are running. They actually use their computer to run applications. They don't sit around nitpicking every perceived flaw in the underlying OS. MS discontinued their phone development because they are making more money from the patent licensing fees they receive on every Android device sold. And now they are doing something that is going to piss off the crusading MS haters. They are in the process of merging open source toolsets and API's to integrate and administer both Windows and Linux platforms. In essence MS is adding multi platform services to their OS that do not require a VM.

    9. Re:Also.... by thegarbz · · Score: 2

      Irrelevant when your entire customer base suffers from Stockholm syndrome.

    10. Re:Also.... by gl4ss · · Score: 1

      Before you scoff at this as random trolling, think about what the odds are that Adobe, Autocad, and any real software packages are going to take a 30% haircut required by the MS store to run on this turkey. Sure MS programs will be there but Steam worn't be, nor will much else useful other than a sub-section of Windows Phone apps.

      adobe and others already moved to subscription as a pre-emptive move during windows 8 launch. they saw it coming and did that.

      and that did put a little damper on MS. it wasn't a secret that all the pushing of the unfinished win8 store and metro apps was fueled by the hope that they could get 30 percent of all desktop sw.

      --
      world was created 5 seconds before this post as it is.
    11. Re: Also.... by sound+vision · · Score: 1

      What is stopping Microsoft from giving a special deal to Adobe et al.? They could let the big guys in free... Wouldn't even need to be all of them, just enough to jump start their app market. The little guys would often, I think, be willing to pay for the exposure, for access to that market. Why I think this hasn't happened is because stuff like Premier and AutoCAD isn't what the average computer runs. Those generally run on "workstations" in an office somewhere, where they are already paying MS directly for enterprise stuff. These guys arent going to go to an app store to get their CAD software. What MS wants to do is to bifurcate the PC ecosystem into business and consumer spheres. They already have businesses well-monetized, what they don't have is an app store where the masses can pay them for their digital baubles.

    12. Re:Also.... by david_thornley · · Score: 1

      Consumers will care when they can't run the same programs their friends are running.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  6. To quote... by l0n3s0m3phr34k · · Score: 1

    "Challenge accepted!" -PLA Unit 61398, Fancy Bear, Bureau 121

  7. S is for... by Anonymous Coward · · Score: 0

    Shit. Because nothing works on it unless you get it from the windows (cr)app store, including malware apparently.

    1. Re:S is for... by DontBeAMoran · · Score: 1

      Surely you mean the Windows (S)hit Store?

      --
      #DeleteFacebook
  8. Yeah but nobody wants to USE Windows 10 S! by Chas · · Score: 2

    Because the amount of software that works on Windows 10 S bites syphilitic camel wang.

    --


    Chas - The one, the only.
    THANK GOD!!!
  9. Whatever by swdave · · Score: 1

    S for S*** Commodore 64 was not affected either.

    1. Re:Whatever by mccalli · · Score: 1

      Not so - patch your kernals now!

  10. well.. by fluffernutter · · Score: 3, Insightful

    No known ransomware works on a TURD, either.

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    1. Re:well.. by Anonymous Coward · · Score: 0

      There are some dung beetles that say otherwise

    2. Re:well.. by Darinbob · · Score: 3, Funny

      Please submit 1 Bitcoin in order to get your shit back.

    3. Re: well.. by UltraZelda64 · · Score: 1

      I only have five Shitcoins. What's the current exchange rate?

  11. Malware doesn't go through official channels by Anonymous Coward · · Score: 0

    This was never the issue. Malware gets around these limitations by using exploits. They're basically saying no known exploits can work against Windows 10 S, I don't buy it

    1. Re:Malware doesn't go through official channels by Calydor · · Score: 1

      Maybe we'll get lucky and the malware writers find a bunch of "Install Anything" exploits on Windows S.

      --
      -=This sig has nothing to do with my comment. Move along now=-
    2. Re:Malware doesn't go through official channels by Anonymous Coward · · Score: 0

      Yeah basically just put a Linux disc in when you boot the PC

    3. Re:Malware doesn't go through official channels by tepples · · Score: 2

      The old wipe-and-Linux won't work if Windows 10 S devices come with Restricted Boot, which means UEFI Secure Boot that a device's owner cannot reconfigure. Microsoft licensed Windows RT only to OEMs who promised to configure all Windows RT devices with Restricted Boot.

      Even without Restricted Boot, wipe-and-Linux will fail if manufacturers of components of said devices fail to cooperate with driver developers. You'll likely end up with unaccelerated graphics, no audio, no network, and no suspend.

  12. Yes there is by Anonymous Coward · · Score: 1

    It's called Windows Update

  13. Ba dum tish by Neo-Rio-101 · · Score: 2

    No ransomware works on Windows 10S ...because nobody uses it.

    --
    READY.
    PRINT ""+-0
    1. Re:Ba dum tish by Anonymous Coward · · Score: 0

      Windows 10 is already ransomware.

    2. Re:Ba dum tish by Anonymous Coward · · Score: 0

      Nice.

    3. Re:Ba dum tish by Anonymous Coward · · Score: 0

      top kek

    4. Re:Ba dum tish by thegarbz · · Score: 1

      That was my first thought too. Linux has a fantastic protection scheme offered by the fact that it's different and that it is a small and not very valuable attack surface for desktop users.

      Windows 10S currently is the same. Will it still be the same this time next year? Well I hope so because the idea of locked down OSes should fail and die, but if it does become popular let's see how long it stays malware free.

  14. Key Word by amiga3D · · Score: 2

    Known is the key word here. It's not the problems you know about, it's the ones you don't that get you.

  15. So, let me get this straight... by Anubis+IV · · Score: 4, Interesting

    If the S version is supposedly better, why offer a $50 "upgrade" to the less secure non-S version? You can't have it both ways. Either you own your walled garden or you accept your open platform. You can't offer an upgrade to a version you're claiming is superior.

    Moreover, they're basically arguing that their software is more secure because it's hobbled by design. A rock is similarly secure against WannaCry, but that doesn't mean it's actually useful for everyday computing tasks.

    1. Re: So, let me get this straight... by Anonymous Coward · · Score: 0

      I'm pretty sure the scummy logic they use goes like this.
      "Windows 10 S, starter edition. It only runs apps from the app store which makes it more secure. More experienced users may upgrade to the full Windows 10 experience for $50."

      It's basically heroine economics.

    2. Re:So, let me get this straight... by aliquis · · Score: 1

      A rock is similarly secure against WannaCry

      Just as any liberal is secure against any counter-arguments, because <BLOCKED>

    3. Re:So, let me get this straight... by thegarbz · · Score: 1

      You can't offer an upgrade to a version you're claiming is superior

      Aside from the typo in that sentence, of course you can. "Superior" is not an absolute for an entire package. It depends highly on a use case. The most secure OS in the world can be free and I still won't consider it superior most likely because I won't be able to do anything with it.

    4. Re:So, let me get this straight... by Anonymous Coward · · Score: 0

      > why offer a $50 "upgrade"

      Windows 10S has two main functions for Microsoft:
      1. compete against ChromeOS
      2. Steal revenue and profit from OEMs.

      By giving 10S for free (or nearly) to OEMs and making them use it with 'Loyalty Discounts*' there will be inexpensive computers at the same price as Chromebooks. OEMs will only get revenue and profit (if any) for the hardware and will miss out on their current revenue and markup on Windows, Office and other software and also on payments to install shovelware and trialware.

      Microsoft will get all the additional revenue and profit for any software the user wants (and is in the store) and also the $50 'upgrade' that the OEM would have got if the machine was sold with Windows 10.

      The machines are also likely to be required to have secure boot without the option to turn it off, like RT had, to eliminate other OSes being installed.

      * If the OEM doesn't do as MS tell them then they are not being loyal and the discounts are removed on _all_ products.

  16. Safe by Anonymous Coward · · Score: 0

    To ensure your computer system stays clean of all malware and viruses please follow some basic tips.
    Never open the shipping box the unit came in.
    Never power on the unit.
    Never connect he unit to any network, including home, work or public.

    Thank you for your continued support.

  17. Meh by Anonymous Coward · · Score: 0

    It's not as though malware authors require the user to click a download button is it.

    Unless Windows S doesn't have an internet connection it's a pretty silly statement to make.

    1. Re: Meh by Anonymous Coward · · Score: 0

      The vast majority of malware cannot auto install. In most cases, you do have to click run or open.

    2. Re:Meh by Anonymous Coward · · Score: 0

      > It's not as though malware authors require the user to click a download button is it.

      Much of the malware _does_ require the user to click a 'download' or 'run' button, but this may be disguised as something that looks innocuous. Getting the user to click it is called 'social engineering'. Other malware can install itself without user interaction via faults in the system.

      However, that is not the issue, Windows 10S won't _run_ any program that has not been installed via the store. You can download from the internet, insert a DVD, or USB and click whatever you want and the programs, including the installers, won't run. The 'loader' won't load the program into memory, the 'scheduler' won't add them to the execution queue, unless they pass a test that can only be passed by software from the store. RT showed how this could be done.

      Of course this is likely to be broken, as RT was, but not as easily as standard Windows.

  18. Yeah right... by JoeDuncan · · Score: 1

    ... this is like Alberta claiming they "don't have any rats" LOL

  19. Fixed that for you... by Anonymous Coward · · Score: 0

    "No known software works on Windows 10 S."

  20. the other shoe drops by beckett · · Score: 2

    Windows 10S is the ransomware.

  21. No Known Software Works In Windows 10 S by Heir+Of+The+Mess · · Score: 1

    That's easy when No Known Software Works In Windows 10 S. Time will tell. However if no malware breaks into Windows 10 S in the future, will this end up being the most secure OS to run on the desktop?

    --
    Australian running a company that does C# / C++ / Java / SQL / Python / Mathematica
  22. No known malware cleaner works either by drinkypoo · · Score: 1

    I tried to convert back to Windows 7, but none of the tools would do that for me.

    Just kidding. I never changed to Windows 10 in the first place

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  23. A rock is just as useful.... by Anonymous Coward · · Score: 0

    Having an operating system that just works with applications that they pre-approved, and nothing else is a terrible idea. They tried this with Windows RT, look where they are now?

    Claiming this OS has "no known ransomware attack" is short sighted and arrogant. Hackers will usually focus their energy on something with a large install base, so they can cast a wide net and capture as much as possible. Also, after making such a ludicrous claim, hackers might even take this as a challenge, and start targeting Windows S!

    Making an operating system that can only run what the dictator...ahem...Microsoft wants is not that hard. We already have a name for that! They're called appliances. This is no better than a toaster. Or a lamp. Don't get me wrong, these items have their purposes in our lives, but is that really what a typical personal computer is? Just to use a small set of pre-vetted applications from the Microsoft store?

    Let's not fool ourselves. Microsoft saw how successful the Apple iTunes store, and they want in. This is just a propaganda piece to justify in further locking down our computer, and preventing any other competing product from eating into their turf.

    Microsoft Windows is their product. It is their responsibility to release updates and security patches to protect the users from issues such as ransomware. If they feel that locking the system down like this is a good idea, they must not be trying very hard, or think we are stupid.

    1. Re:A rock is just as useful.... by Anonymous Coward · · Score: 0

      ..seems like Microsoft has discovered 'whitelisting' as a solution to ransomware.

  24. No ransomware for... by The+Grim+Reefer · · Score: 1

    I've yet to encounter any ransomware on my stone tablets either. And the charge lasts a damn long time. I'm not sure when they were plugged in last, it was before I was born and I haven't had to charge them yet. They are kind of old, so a little dim to use in in the dark, but I never have issues with them being washed out in the sun, and there's never any glare on the screen. Plus they are fairly durable. I dropped large plate of spaghetti with tomato sauce on one, so I powered it down and put it in the dishwasher on light wash and it was as good as new the next day.

    1. Re:No ransomware for... by dl_sledding · · Score: 1

      Clever...

  25. 10S, a push to education, doomed to fail?? by labnet · · Score: 4, Interesting

    Windows 10 S is clearly a push into the education market: but google has has had Chrome For Education for several years now: and the big advantage of Chrome Management Console (CMC) is it being active directory in the cloud done right. CMC makes it super easy to lock down, manage and update education targeted computers (it's also great for digital signage)
    I haven't used Azure AD, so it would be interesting if any /.ers have a comparison of the two systems.

    Apple had an awesome opportunity here after they created a whole new locked to a store OS niche, but never capitalised on it by giving schools the tools to manage the platform.

    Now the only reason PC's are still selling, are office and legacy programs. Think custom business programs written in .NET and specialised CAD/CAM software. MS have lost the first mover advantage to chrome, and I doubt this move will get it back.

    --
    46137
    1. Re:10S, a push to education, doomed to fail?? by roc97007 · · Score: 2

      I regularly use exactly two programs for which I still need Windows. (I don't consider Apple a contender because of hardware lock-in and boutique pricing.) Neither of them are Office -- there are already reasonable alternatives for that. The moment Lightroom and Photoshop are available on Chrome or Mint, Microsoft has seen the last of me. (There are things called "lightroom" and "photoshop" on Android, but they're still mostly toys.) Apple saw the last of me some years ago, when I finally retired the G4.

      --
      Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
    2. Re:10S, a push to education, doomed to fail?? by Anonymous Coward · · Score: 0

      MS have lost the first mover advantage to chrome, and I doubt this move will get it back.

      Yeah, but Chromebooks are mass market cheap-o computers that Google probably doesn't make much money on directly. It's the razor and blades model. Google is trying to promote it's cloud services, apps and adwords businesses with Chrome. Also, consider the audience. Kids in schools have little or no money and they don't care if the school issues them an iPad or a Chromebook. I suppose you could argue that Google is investing in future customers, but that's pretty long term for an American public company when investors want short term results in the next three quarters or less.

    3. Re:10S, a push to education, doomed to fail?? by Anonymous Coward · · Score: 0

      It also has potential in the Chromebook dominated "relatives & in-laws"-market ;)

    4. Re:10S, a push to education, doomed to fail?? by Anonymous Coward · · Score: 0

      Photoshop runs fairly well on Wine. Lightroom doesn't though.

    5. Re:10S, a push to education, doomed to fail?? by Anonymous Coward · · Score: 0

      "Now the only reason PC's are still selling, are office and legacy programs."

      Forget about Office, the fact is that everyone who uses Windows now has a "legacy program" that's not going to run on Windows S. And, since we still have the full version of Windows, new "legacy programs" are being written / released / supported every day.

    6. Re:10S, a push to education, doomed to fail?? by roc97007 · · Score: 1

      I'm aware of that, thanks. I have a laptop running Mint on a silicon drive, and it's really fast and reliable. I wanted to get Lightroom working under Wine so I could have something handy in the field for post-processing. But there's something wrong with the way it does transparencies under Wine, making it generally unusable. This was version 5. I've read elsewhere that there are additional issues with Lightroom CC under Wine that Adobe has flatly refused to fix. So for now, I'm stuck with Windows.

      --
      Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  26. in other news by zlives · · Score: 0

    Apple says
    no mac is infected by wannacry

    1. Re: in other news by Anonymous Coward · · Score: 0

      Which is entirely true and a perk of being a Mac user.

    2. Re:in other news by Actually,+I+do+RTFA · · Score: 1

      Macs can dual boot. I'm sure there is at least one mac user who had WannaCry hit their Windows version, and it encrypted the data files on their OSX partition.

      --
      Your ad here. Ask me how!
  27. Found the LUDDITE! by Anonymous Coward · · Score: 0

    Appdows 10 S only runs appy app apps like Appy App Saga and Appy Text, NOT LUDDITE software like LUDDITE Visual Studio!

    Apps!

  28. "no known ransomware"... by roc97007 · · Score: 1

    "No known ransomware works against Windows 10 S."

    Until the moment ransomware gets snuck into the Windows Store. Which, if it hasn't happened already, will probably be next Thursday.

    --
    Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  29. Two ways this is believable by Anonymous Coward · · Score: 0

    1) M doesn't know much about what happens with W10 in the field, or
    2) M is responsible for WannaCry as a marketing exercise for W10

    Neither seems very credible so maybe
    3) W10 is not succeptable to virus

    Ok, historically that seems reallllly not credible, so
    4) They are clueless and just making random noise, or the bad guys don't think W10 is enough used to make it worth the attack

    Plausable, but how about
    5) The bad guys already have W10 under control, so they don't need to virus it, and not doing so moves more folks to the platform of choice (for the bad guys)

    Tin foil hat is going with #5
    That would make W10 a bad guys delight.

    Other options of votes?

    1. Re:Two ways this is believable by gl4ss · · Score: 1

      W10 S.

      not windows 10.. the whole point is that it can only run sw from the appstore.

      unless you jailbreak it or whatever. or just write malware for the browser.

      --
      world was created 5 seconds before this post as it is.
    2. Re:Two ways this is believable by Opportunist · · Score: 1

      Or just get their appstore to do the malware distribution for you.

      Or do you really think MS will check more about your software than whether its revenue stream is flowing?

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  30. As always... by Anonymous Coward · · Score: 0

    "this version of microsoft[tm] windows[r] is the bestest microsoft[tm] windows[r] evar"...

    but don't you dare compare it to anything but itself!

  31. Will the AV companies sue for this? by Anonymous Coward · · Score: 0

    Will the Whiney little bitches at the AC companies sue over this?

  32. Wow by Anonymous Coward · · Score: 0

    What a bunch of babies. I used to be able to come here for discussion that included all sides of an issue.

    Now it's just wah wah wah.

    1. Re: Wow by Anonymous Coward · · Score: 0

      Then provide an alternative argument instead of just bitching about it. For most of us, myself included, any alternative advantages of this approach are grossly overridden by the fact that Windows 10 turns your machine into a spyware node/eavesdropping device and Windows 10 S follows up by turning it into a slave to the Windows Store, if not just what might as well be a Microsoft dumb terminal. We are certainly not going to make your argument for you.

  33. Promise made and it will be kept. by 140Mandak262Jamuna · · Score: 1

    Microsoft has invested in technology to avoid knowing any thing about malware, ransomware etc. So it will not know any ransomware ever. So, for ever, it can honestly say, "No ransomware known to me will work in Windows 10"

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  34. The Microsoft Challenge by Anonymous Coward · · Score: 0

    And the prize is HUGE!!!!

  35. All it would take is a weakening of anti-trust law by rsilvergun · · Score: 1

    to change everybody's mind.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  36. Additional MS products that support this claim: by Anonymous Coward · · Score: 0

    MS-DOS

  37. There is no barrier for Steam by Anonymous Coward · · Score: 0

    Steam is allowed, it is the people behind Steam that pretend they are excluded.

    Look at EA, they provide their own Client for their titles and use their own pricing for their titles, as well as free subscription access to their titles, and they even do it all from within the Microsoft Store.

    1. Re:There is no barrier for Steam by 0123456 · · Score: 1

      Of course, all it takes is a change to the terms and conditions, and suddenly they're not allowed any more.

      This is Microsoft, FFS. You'd be safer sticking your head in a grizzly bear's mouth than trusting Microsoft not to kick you out of their ecosystem once they've hooked everyone into it.

    2. Re:There is no barrier for Steam by Anonymous Coward · · Score: 0

      Whatever, just trying to stop lies and FUD surrounding Steam on Windows App Store

  38. hey microsoft, dont worry by FudRucker · · Score: 1

    i am sure some clever hacker will make you eat those words, and win_10 will be dinner for the black_hats until you make a fix, but like with all your 20+ years of history with windows software it is always playing catch-up with the latest vulnerability

    --
    Politics is Treachery, Religion is Brainwashing
  39. Granular permissions by Anonymous Coward · · Score: 0

    Part of the ransomware problem is that software running as normal user has all kind of permissions. Much more than usually needed.
    MS/Windows could learn from the mobile phone market. Where apps, even after installation, have to request permissions to access files, the internet, camera etc.

    The impact of ransomware would be much reduced if it couldn't access (all) of the user's files. Or spread itself via the network. Or if the filesystem itself did decent versioning. etc etc. Of course they would try to circumvent such restrictions, but it's yet another obstacle to overcome.

    And imho, granting permissions after normal software installment would be just a minor nag to the user. And a big safety improvement on a complex computer system that the personal computer has become over the years.

    1. Re:Granular permissions by Opportunist · · Score: 1

      With other malware I'd agree, with ransomware this isn't the case. Ransomware doesn't actually require any elevated permissions, that's what makes it so successful. What does ransomware want to access? Local files in the user storage space. I.e. exactly the files that the user needs to be able to manipulate in his every day business. It needn't install a service, it needn't create files in non-user spaces, it has no reason to write into the registry.

      What ransomware needs to do, and I agree with you on that ground, is to run software from an "odd" place, like the download directory, the temp directory or the user directory, i.e. from places where there should be no executable file in a normal work environment. That can be dealt with via software policies and execution prevention of software from places other than whitelisted directories where executables are stored.

      At least as long as you don't have some harebrained copy protection mechanism that does some unpacking to /tmp to run from there.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  40. ummmmm by Anonymous Coward · · Score: 0

    https://it.slashdot.org/story/17/06/08/1754244/malware-uses-obscure-intel-cpu-feature-to-steal-data-and-avoid-firewalls#comments

    works on windows 10!!!! all versions enjoy asshats at redmond

    1. Re:ummmmm by ArmoredDragon · · Score: 1

      Microsoft also stupidly assumes that no zero-day exploit could ever rootkit the OS, whereupon it can execute any program it wants. Why do I say stupidly? Because in the last year alone, four exploits have done exactly this with Edge, which runs on Windows 10 S.

    2. Re:ummmmm by david_thornley · · Score: 1

      Of course, Microsoft doesn't know right now of existing malware that exploits an Edge vulnerability and works as ransomware, so they're correct in saying no known ransomware works.

      I'd be worried about unknown ransomware, but that's me.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    3. Re:ummmmm by ArmoredDragon · · Score: 1

      TFA isn't clear on whether this is a Microsoft statement, or their own, but it seems to say that ransomware won't work simply because it won't run on the OS without being signed.

    4. Re:ummmmm by david_thornley · · Score: 1

      Assuming that Microsoft is perfect in keeping malware out of their store,and there's no other way to get executable code in, this is true.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
    5. Re:ummmmm by ArmoredDragon · · Score: 1

      But there is another way to get executable code in, namely through exploits like the SMBv1 vulnerability that wannacrypt used, or the three Edge exploits found at the last pwn2own event.

      If you get executable code in that way, then signing is irrelevant, and so is the MS store. Sure, wannacrypt was written like shit and had to download its own executable separately, but a good hacker should be able to inject a proper malware payload.

  41. And? by Frosty+Piss · · Score: 1

    Jailbroken and rooted phones say otherwise.

    But jail-breaking and rooting, that's not "ransomwear".

    In any case there are significant differences between the phone OS and the desktop OS, just because they both share the same basic name doesn't mean one hack works on the other

    --
    If you want news from today, you have to come back tomorrow.
  42. Translation: by Zanadou · · Score: 1

    "No known ransomware works against Windows 10 S."

    Read: "No one can compete with us on our home turf."

  43. Throwing down the gauntlet by tigersha · · Score: 1

    MS likes to invite trouble??!!

    --
    The dangers of excessive individualism are nothing compared to the oppressiveness of excessive collectivism
  44. No Known *Software* Works on Windows 10 S by p91paul · · Score: 1

    FTFY

  45. It also doesn't work against Windows 15 by Anonymous Coward · · Score: 0

    ...and for the *same* reason.

  46. Arrogance.... by ogdenk · · Score: 1

    "Challenge accepted" ....said the 12 year old Lithuanian kid in his mom's basement. Expect ReallyWannaCry S Edition in weeks.

  47. So it is currently unknown. by Anonymous Coward · · Score: 0

    I guess possibly because there's a new type of vector for windows 10 s that doesn't work elsewhere,which indicates that there is going to be a lot of non-ransomware that will not possibly work, even with fiddling, with windows 10 s.

  48. Known vs unknown by Waccoon · · Score: 1

    Pretty much by default, if software is known to be ransomware, Microsoft will remove it from the store. Thus, no known ransomware is on the store.

    It's the unknown stuff that's the problem. It won't be known until after the timebomb has been released and the damage is done.

    Gotta love word salad and technicalities.

  49. Of course not by Opportunist · · Score: 1

    Malware is a business. For the same reason there is no malware working on some obscure NeXT clone OS, it doesn't work on Windows 10S: Why bother writing malware for a system nobody uses?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  50. can't run programs outside store? by sad_ · · Score: 2

    you can browse the web right? because it has the edge browser (you know, the most secure browser of the big 3).
    sure, edge might run in a container or something similar, and those are secure, right?
    better read up on the last pwn2own - https://arstechnica.com/securi...

    --
    On a long enough timeline, the survival rate for everyone drops to zero.
  51. Is this a challenge? by Anonymous Coward · · Score: 0

    I bet some folks are working on turning Microsoft into a liar.

  52. Great news by Anonymous Coward · · Score: 0

    This is great news! Only Microsoft can spy on you with Windows 10!

  53. Famous last words by Anonymous Coward · · Score: 0

    'nuff said.

  54. For now, maybe by Anonymous Coward · · Score: 0

    And that doesn't rectify the situation with the zillion OTHER forms of malware that eat it for a snack hourly. Whatever, Microsoft.

  55. i see a correlation here by Anonymous Coward · · Score: 0

    Somewhere in the dark a meeting of Risk Management & Internal Affairs meet with software sales pitchmen...

    ATT: needs your time
    HP: needs more ink
    Apple: needs more adaptors
    Google: needs your thoughts
    Microsoft: needs faster computers
    Intel: needs more customers

    Notice how their products are never satisfactory.

    so it is obvious, none of them have an original firewall and anti-virus division because they want to sell you the right to use your computer. A worldwide problem untraceable to them is their greatest heist if not servicecost.

    In all this, not one original American company like Digital Equipment Corp.

  56. Ransomeware avoidance technique #1 by Anonymous Coward · · Score: 0

    No known ransomware works on Linux.....that's my solution, but just to be sure, I also practice safe hex.

  57. of course it doesn't by ilsaloving · · Score: 1

    They made sure that no known *software* will run on Windows 10 S, so obviously Wannacry won't run.

    The next generation of Wannacry though, is another story. Someone just has to use a fraudulent code signing certificate or whatever else Microsoft does with their store apps, or somehow masquerades as another application, and we're back to status quo.

  58. Yet game console lockdown succeeded by tepples · · Score: 1

    Having an operating system that just works with applications that they pre-approved, and nothing else is a terrible idea. They tried this with Windows RT, look where they are now?

    Microsoft tried this successfully with Xbox, Xbox 360, and Xbox One. Apple tried this successfully with iPod classic 5, iPhone 3G, iPod touch 2, and iPad. Sony tried this successfully with PlayStation, PlayStation 2, PlayStation 3, and PlayStation 4. Nintendo tried this successfully with NES, Super NES, Nintendo 64, Nintendo GameCube, Wii, and (so far) Nintendo Switch. Nintendo also tried it with Wii U, but that platform was less successful for reasons other than the lockdown.

    So how did these other locked down platforms succeed where Windows Phone 7, Windows Phone 8, and Windows RT failed?

    1. Re:Yet game console lockdown succeeded by david_thornley · · Score: 1

      As examples, you named iOS devices and a bunch of gaming devices. Most people buy their game consoles for the purpose of running games that are released for that console. If they also want a computer, they typically buy a computer.

      iOS works because there's so many and so varied apps in the App Store that it isn't a practical problem for the most part.

      RT may have failed partly because Microsoft had no idea how to market it. Calling something Windows RT suggests that it will run Windows programs. It may also have failed because there weren't enough apps, and because it was something of a latecomer. The Surfaces that run real Windows are at least moderate successes.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  59. UWP enforces file-level permissions by tepples · · Score: 1

    What does ransomware want to access? Local files in the user storage space. I.e. exactly the files that the user needs to be able to manipulate in his every day business.

    The user's everyday business needs to access files that the user chose through the operating system's file chooser form. Ransomware, by contrast, needs to access the user's entire home directory. This is why modern sandboxed environments, such as OLPC Bitfrost, the Mac App Store Sandbox, and UWP, lock applications out of any file or directory that the user hasn't chosen through a file chooser form requested by that application.

    What ransomware needs to do, and I agree with you on that ground, is to run software from an "odd" place, like the download directory, the temp directory or the user directory, i.e. from places where there should be no executable file in a normal work environment. That can be dealt with via software policies and execution prevention of software from places other than whitelisted directories where executables are stored.

    Then watch ransomware install itself to Visual Studio's temporary directory, where executables are supposed to be stored during the normal course of operation. This is why Microsoft won't be able to bring Visual Studio to Windows 10 S.

  60. "According to Microsoft" by dl_sledding · · Score: 1

    Whichever M$ employee who wrote that press release will be looking for a new job when the "Challenge accepted" group goes berserk to prove him wrong. And they give the reason that M$ needed to be taught a lesson (again).

    Anyone looking for a cheap ex-M$ marketing person?

  61. so what by Anonymous Coward · · Score: 0

    no ransomware works on my pc when its turned off. A powered down pc is equally as useful as a windows 10S machine. both can be used as paperweights.

  62. "Not even God can sink the Titanic" by Anonymous Coward · · Score: 0

    Let's see... what is it that usually happens when people boast like my subject line or M$'s boast about Win$?

    I am betting it will not take long.

    I am old enough to remember when Autodesk was preparing to release 3ds MAX 2.0. During the months leading up the the release date they droned on and on about how this version of 3ds could not be pirated because of the new "uncrackable" exe/dongle combo they were using. I also remember that around 11:00PM (Eastern), the day before 3ds went retail the patched, dongle free version of the 3ds executable started showing up in usenet.

    If you were interested and had a fast enough connection you could have had a pirated version on your machine and running by 11:00PM release day.

    Many, myself included, considered it to be a form of advertising: tell the masses they can't have it, leak it and let them get used to it at home so they will tell their employers they need a copy at work.

    How many, out there, right now, are thinking, "...just wait until I get a copy of Win$..."