michael/dotfiles
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add a registry key for disabling the Windows platform binary table

Browse Source
This commit is contained in:
Michael Campagnaro 2023-06-09 17:20:39 -04:00
parent 10c6e8e06c
commit 6df4a1e506
2 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
windows/disable-windows-platform-binary-table.reg Normal file
View File

@ -0,0 +1,4 @@
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"DisableWpbtExecution"=dword:00000001

11
windows/readme.md
View File

@ -1,6 +1,15 @@
# Windows Setup
* Make a system restore point after a fresh install
* Make a system restore point after a fresh install.
* Disable Windows Platform Binary Table
* This is a system Windows made for hardware vendors to inject firmware to the OS drive, running it at boot time.
It's a huge security hole! Vendors can do things like download software, auto update the mobo firmware, etc.
In 2023, Gigabyte was caught using this to download exe's from their server over an http connection! (keep in mind
that they're corporate systems have been hacked multiple times in the last year). Anyway, this feature is fucking
dumb and you can be sure that all mobo vendors are using this stupid shit. I don't blame them though since Microsoft
built this for them. There's no way to stop this from happening other than to disable the platform entirely.
* Run `disable-windows-platform-binary-table.reg` and reboot.
* Change PC name and reboot
* Open settings -> System -> About -> Rename this PC