Microsoft Defines Standards For "Highly Secure Windows 10 Devices"

Microsoft has released a set of hardware and firmware standards for secure Windows 10 devices in an effort to encourage PC manufacturers to ship more secure Windows 10 computers and increase demand for such devices from consumers. Only Intel and AMD processors from generation seven and up comply with its standards: these chips support the Mode Based Execution Control (MBEC) feature, which is supposed to stop malicious changes to a guest kernel.

/me grabs popcorn and waits for the "does it turn off telemetry?" comments

Seriously, one of the ways you make a device more secure is by reducing attack surface and minimizing how much sensitive data is stored. Close ports, only run stuff that's actually essential, don't record or store stuff that's not needed...

Oh, wait, that would disqualify a lot of "features" of Windows 10!

"The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards - and even then I have my doubts."
Eugene "Gene" Howard Spafford

So how does having a minimum of 8GB of RAM make a system more secure?

stops companies from taking min specs to literary (2GB ram and ATOM or horrible type E/A/FX cpu, hope they made min storage at least 120GB as 32GB for a boot drive is a joke on windows 10)

edit for get that they do allow he poor man cpus

• (A Series Ax-9xxx, E-Series Ex-9xxx, FX-9xxx)

Mohonri said:

/me grabs popcorn and waits for the "does it turn off telemetry?" comments

Seriously, one of the ways you make a device more secure is by reducing attack surface and minimizing how much sensitive data is stored. Close ports, only run stuff that's actually essential, don't record or store stuff that's not needed...

Oh, wait, that would disqualify a lot of "features" of Windows 10!

Click to expand...

i do agree with you but forget about the new stuff they add. what about all the 15 + year old code still in windows that are used by next to no one. I know there are a lot of specialized machines/software that needs some old code but you cant tell me microsoft couldnt cut it out and if you need it download it like a module. Really wish microsoft would stop adding things for once and start removing some of the bloat. OH and also finally unify the damn windows settings/control panel!!. pretty tired of having to remember which setting is where and having to jump back and forth