Chipp.in Tech News and Reviews

Windows, Security & Privacy, Open Source and more

Menu
  • Home
  • Windows
  • Security & Privacy
  • Gaming
  • Guides
  • Windows 11 Book
  • Contact
  • RSS Feed
Menu

Tag: windows 10

Patch

0Patch patches Windows vulnerability that Microsoft did not consider “patchworthy”

Posted on February 1, 2024February 1, 2024 by Martin Brinkmann

Not every Windows vulnerability requires patching according to Microsoft. When Microsoft analyses reported vulnerabilities, it may conclude that a vulnerability does not meet the bar for servicing.

Exactly this happened to a security researcher recently who reported a Windows Event Log vulnerability to Microsoft. Successful exploitation of the vulnerability results in a crash of the Windows Event Log service. The vulnerability requires authentication but no special user privileges. Attacks may crash the service on local or remote devices.

The vulnerability affects Windows 10 and Windows Server 2022 devices according to the researcher. 0Patch discovered later that it affects more Windows systems. On the client side, all Windows operating systems starting with Windows 7. On the server side, all Windows server operating systems starting with Windows Server 2008 R2.

The researcher published a proof of concept of the vulnerability on GitHub. A short demo GIF is also available there.

0Patch steps in, creates free micro-patch

Micro-patching service 0Patch analyzed the issue. It discovered that the proof of concept was “remarkably simple” and that attacks did not take more than a second to execute.

The Windows Event Log service restarts if it stops, but this happens only twice according to 0Patch. Attackers may run the attack multiple times to stop it for the session.

No events are logged when the service is not running. This means that events cannot be read either while the service is down. 0Patch notes on its website that Windows keeps a separate record of security and system events when the logging service is down.

These are added to the log when it is up again. Company engineers discovered that the information persists across sessions, but that it gets lost when the system crashes.

To sum it up: a successful attack, which includes a crash of the system in the end, may prevent the logging of any events on the system. This makes forensic work difficult on attacked systems and may be exploited by malicious actors to cover their tracks even better.

0Patch writes:

During the service downtime, any detection mechanisms ingesting Windows logs will be blind, allowing the attacker to take time for further attacks – password brute-forcing, exploiting remote services with unreliable exploits that often crash them, or running every attacker’s favorite whoami – without being noticed.

0Patch created a free micro-patch that addresses the vulnerability in all affected versions of Windows.

The patch requires the installation of 0Patch Agent on affected systems. 0Patch continues to support some Windows systems that Microsoft does not support anymore. Windows 10 will also receive extended support by 0Patch, but also by Microsoft through its Extended Security Updates program.

Additional information, including vulnerability and patch details, are available on the 0Patch website.

Closing Words

Whether it is necessary to patch the vulnerability depends on risk assessment. Most home users are not targeted by sophisticated attacks, but this may be different for organizations.

The patch is free at the moment and it will stay that way. Only the release of an official patch by Microsoft may change that in the future.

video

Vividl: download videos from hundreds of sites on Windows

Posted on January 28, 2024January 28, 2024 by Martin Brinkmann

Vividl – Video Downloader is an open source tool for Microsoft Windows devices to download videos from hundreds of websites. The app uses the popular downloader youtube-dl / yt-dlp in the background. It supports downloads of video or audio files from hundreds of sites.

Most video streaming sites do not want you to download videos. Prime reason for this is monetization as offline videos cannot be monetized. Some services support video downloads, but often only as premium features. Google’s YouTube, for example, supports downloads, but restricts them to YouTube Premium subscribers.

There are quite a few reasons why you may want to download videos. Here is a short list:

  • To watch the video (later) when there is no Internet connection or no reliable Internet connection.
  • To watch a higher quality version of the video, which the Internet connection is incapable of streaming.
  • To watch videos without ads. Tip: you may bypass YouTube video ads without adblockers.
  • To listen to the audio of a video only.
  • For backup purposes.

Vividl: the basics

Vividl Video Downloader interface

You may download the latest version of the video downloader from its GitHub project website. The app runs on Windows 7 and newer versions of the operating system.

The developer lists two dependencies: .NET Framework 4.8 or higher, and Microsoft Visual C++ 2010 Redistributable Package. Downloads for both are linked on the project website, if needed.

Windows may throw a SmartScreen error when you try to install it. The app checked out fine on Virustotal, which suggests that this is thrown only because it is a new version.

The main program interface looks basic, but that is not necessarily a bad thing. Add a video by pasting its URL into the interface or through drag & drop. An auto import from Clipboard option is provided.

Vividl picks it up and displays information about it after a brief moment.

The main interface acts as the download queue but also download list. There is no option to separate these, which would help manage larger lists of videos.

Downloading videos

Vividl video and audio quality

All videos added to the video downloader are listed in the queue by default. Several download-related options are displayed there.

The default output format is mp4 video and a default quality is selected. Both options are customizable. Vividl supports webm, avi and mkv formats on the video site next to mp4.

A click on the tool icon, which is adjacent to the format button, displays all available video and audio qualities. Here you may select the desired output format and quality manually. You may need to scroll to find specific options, as the lists are not necessarily sorted by size or resolution.

There are options to download video and audio files separately, or just one of the two formats.

The downloading happens in the background. Vividl downloads three files simultaneously by default. You can change this in the program settings.

The settings list several interesting options, some of which automate the experience. Here is a short list of important options:

  • Change the default video resolution and video format. The defaults are mp4 and 1080p.
  • Always download the best quality.
  • Enable GPU acceleration for video encoding, if supported.
  • Instead of overwriting existing media, skip it or rename it.

Verdict

Vividl is a straightforward video downloader for Windows. It supports hundreds of video sites and works really well. Both manual and automatic options work reliable.

To conclude, if you need a well-designed video downloader, this is a program that you may want to test. I still prefer Internet Download Manager, but this is a commercial program that supports video downloads and also other file downloads.

Glow

Glow: open source Windows system analysis software

Posted on January 27, 2024January 27, 2024 by Martin Brinkmann

Glow is an open source program for Microsoft Windows devices that displays a wealth of information about the system it is run on.

What are the features that it offers and how does it compare to popular alternatives such as Speccy? Read on to find out.

Glow: a system analyzer

Glow Windows System information

Windows displays some information about a system’s hardware and software. The information is scattered all over the place. Even the System Information tool lacks some information that third-party tools offer.

Glow is a free portable app hosted on GitHub. You may run it right after extracting the ZIP archive on the local system. The developer says that it is compatible with Windows 10 and 11 only. The app does require the .NET Framework 4.8.1, which should be installed on most devices.

The left pane of the program lists the various sections, the right pane the information. Operating system information displays important information about the Windows system. This ranges from the operating system build and architecture to the user account, Windows edition and lots more. Scroll down to find information about the system’s uptime, last shutdown time and date, or the system and boot partitions.

Select another section on the left, e.g., motherboard, processor or graphics card, and Glow displays information about immediately.

To name just a few important bits of information: motherboard model and BIOS version, whether a TPM chip is available, the model of the graphics card and the driver date, the RAM type and amount, number of RAM slots, and information about all connected hard drives.

There is a lot to explore, especially for users new to these kind of tools. The sections function as entry points. There is no search, which might help find information quickly.

Glow supports exporting information to txt or html files. The tools section lists a few options:

Other Tools

  • SFC and DISM Automation Tool — this uses built-in Windows tools to find and repair corrupt system files. Microsoft plans to introduce a Windows Update repair feature in future versions of Windows.
  • Cache Cleanup Tool — clean several memory caches to free up RAM.
  • TRIM Audit Tool — this tool checks the TRIM status, on or off, and allows users to enable TRIM if off. TRIM is used to free blocks on Solid State Drives, which opens them up for writing.
  • System Software Tool — links to 10 system tools, including Autoruns, Display Driver Uninstaller, and graphics cards driver download repositories.

How Glow compares to Speccy

The free version of Speccy displays information about the system. There is a professional version, which includes automatic updates and priority support.

Speccy needs to be installed before it is ready for use. There used to be an official portable version, but it has been removed by the developer.

Speccy displays information about the computer’s hardware on launch. This includes key information, but some is missing. As an example; while Speccy lists the operating system and edition, it does not list the build number. The tool focuses on hardware and devices only. Glow, on the other hand, displays installed drivers. Temperature readings are supported by Speccy, but not by Glow.

In closing, both programs offer features that the other does not support. Speaking of support, the developer of Glow announced that Glow is feature complete. There won’t be any future updates of the app anymore. It is possible that the project gets forked, as it is open source, but it is unclear at this point.

Verdict

Glow is a powerful system information tool for Windows. It is excellent for looking up information, e.g., to find out if you can put more RAM into the system or can replace the existing graphics card with a new one.

Summing up, there is little not to like about the tool. The missing temperature information is probably the main feature missing from it. Consequently, it is an excellent program for Windows users to look up system information. Nevertheless, the end of development announcement may cause issues in the future.

Now You: do you use system information tools?

Windows 10

KB5034203 prepares Windows 10 for the EU’s Digital Markets Act

Posted on January 24, 2024January 24, 2024 by Martin Brinkmann

Microsoft published KB5034203 on January 23, 2024. The preview update for Windows 10 is an optional update. All of its changes will be included in the February 2024 cumulative update for the operating system.

Most Windows 10 users may not want to install the update, as it should be considered beta. The update addresses several issues that users may experience. This includes a bug that causes Windows to recognize some “single-function printers” as scanners. Another issue may bring back the Internet Explorer shortcut from the dead.

Digital Markets Act changes in Windows 10

Microsoft’s Windows 10 operating system is a core platform service of a gatekeeper according to the European Union. The Digital Markets Act (DMA) defines gatekeepers as companies that “provide an important gateway between businesses and consumers in relation to core platform services”.

In other words, services that give companies control and an unfair advantage.

Microsoft revealed in November 2023 that it would implement certain changes in its Windows operating system to “comply with the Digital Markets Act in the European Economic Area”.

These changes included the ability to remove “all apps in Windows”, remove Web Search from Microsoft Bing, and feeds in the Windows Widgets Board.

It is important to understand that the changes are in response to the DMA, but not coordinated with the EU. It is possible that Microsoft may need to introduce other changes to Windows in the coming months.

KB5034203 for Windows 10

The changelog includes the following paragraph that confirms these changes for Windows 10 version 22H2.

Microsoft has been working to ensure compliance with the Digital Markets Act (DMA) in the European Economic Area (EEA). To learn more, see Previewing changes in Windows to comply with the Digital Markets Act in the European Economic Area. These changes will gradually roll out to Windows 10, version 22H2 PCs in the EEA to be compliant by March 6, 2024.

The update introduces the changes in Windows 10 version 22H2, but it does not enable them at this point. Microsoft plans enable the functionality in the coming weeks using staged rollouts.

Windows 10 users who are not on Windows 10 version 22H2 won’t benefit from these changes. Updates to Windows 10 version 22H2 are available.

Closing Words

The changes that Microsoft rolls out are welcome ones. The ability to uninstall Edge or Bing Search will give users more choice. Most may not remove the browser or Bing Search, but users who want to do so, may do so after the change lands.

Whether the changes are enough to get EU approval remains to be seen. It is certainly possible that the EU is asking Microsoft to make additional changes to its operating system.-

Other companies identified as gatekeepers have also announced changes. Google is blocking data sharing between some of its services by default, and Meta announced changes to Facebook, Instagram and Messenger. All these changes are only available to users from the EEA, the European Economic Area.

Computers

How to back up Windows user profiles

Posted on January 20, 2024January 20, 2024 by Martin Brinkmann

Each Windows user has a user profile that holds customizations and personal files. Users may install software, download files or change the look and feel of Windows.

Backing up user profiles may not be something that most users are familiar with. There are full system backups after all, which include user profile data.

User backups may come in handy in some cases, however. Here are the two main cases:

  1. To migrate a user profile from one Windows device or installation to another.
  2. To back up a user profile for safekeeping.

Windows users who use a Microsoft account may have some of their customizations and files synced between devices. Not all data is synced on the other hand, including Win32 software installations or customizations of installed programs.

A backup of the user profile and the restoration of it on another device takes care of that.

Note that there are also specialized programs for copying settings. Appcopier is a free tool that does that. Note that Windows Backup backs up user data as well, but not much more.

Super Grate: back up Windows user profiles

Back up Windows user profiles

Super Grate is a free open source tool for Windows to back up Windows user profiles and to restore the backups. Its main purpose is migrations from one device to another. It runs on Windows 7 to Windows 11 devices.

The program requires no installation. Just run the program after download to get started. Windows may throw a SmartScreen error, which you can skip. The application is safe to use. Note that Super Grate requires elevation.

The interface looks simple enough, but there is a roadblock for users who never worked with computer names and domains.

Backing up profiles

To back up a profile, it is necessary to enter the name, and optional domain, of the computer. Open Settings > System to get the name of the computer. It is listed at the top of the page.

Name of Computer

Type the name of the computer into the source computer field and activate the “list source” button. The program will return all user-created profiles but no standard profiles.

The name, creation date and last modification date of each profile is listed by the app.

Select one or multiple profiles and activate the start button to back up these profiles. It may take some time to back up profiles. Much of it depends on the size of the profile. There is a progress bar that reveals the progress of the entire process.

Restoring profiles

Restoring a Windows user profile works similar to the backup process. Type the computer name into the destination computer field and hit the “list store” button afterwards. To restore on the same computer, type the computer name again.

Super Grate should return all backed up profiles. Select the profile that you want to restore and then Start to restore the user profile on the device.

Tip: you may rename a Windows user profile by right-clicking on it and selecting the “set destination user name” option from the context menu.

Full migrations

To migrate a user profile from one computer to another, it is necessary to fill out both the source and destination computer fields. These need to be different and connected to the same network.

Consult the official documentation for additional guidance. It includes information about using Active Directory, deleting profiles and more.

Verdict

Creating a backup of a Windows user profile is a simple task with Super Grate. It is a useful when you want to migrate the profile from one device to another, or for back up purposes.

User profiles may become corrupt, for instance after a virus attack or accidental deletions of important files.

A review of UCheck, a Windows software updater

Posted on December 27, 2023December 27, 2023 by Martin Brinkmann

UCheck is a software updates checker for Windows. It is a freemium product, which means that it is available as a free, limited version, and a commercial version. The price of the commercial version starts at $12 per year.

Earlier this week, I reviewed WingetUI, an open source program to install, uninstall and update software programs on Windows. UCheck promises similar functionality, but the free version is limited to updating and uninstalling software on the system.

The Premium version, available for $12 per year, adds the installation of software, scheduled scans, email support and Enterprise use to the mix. There is also a Technician’s version, which adds scripting, portable configs and license.

The free version of UCheck was used for this review.

UCheck Free overview

UCheck interface

The program is available as a portable and setup version. The interface displays the three main sections, updates, installed, and download, on start. Free version users see several “upgrade” links and offers there as well.

You may want to visit the program settings before you run a scan. The General section reveals that Telemetry data is send by default and that the program is configured to run on startup. You may disable both options there. There is also an option to scan apps that start on Windows automatically, which is an interesting feature.

The settings are also home to exclusions, which accepts folders and files, and custom locations, which can be used to include portable software programs in the scanning.

Activate the Scan button in the main interface to find out which installed (and portable) programs have updates.

UCheck Free updates

The program lists the number of programs with updates, as well as the number of installed programs after the scan.

Select “pending updates” to take a look at the list of outdated programs UCheck discovered during its scan.

Programs are listed with their name, company / developer, location on the local system, and the current and latest version. Filters and a search are supported to display only some results.

The Action menu lists options to update individual programs, to skip this update, and to add them to the list of exclusions. The free version supports batch updates, but you need to start UCheck Free with elevated rights for that. There is a button in the interface that does that.

You may now check one or multiple programs and activate the “update selected” button to download and install updates for the selected applications in one operation. Note that there is no “select all” checkbox, which would make things comfortable.

It is unclear where the downloads come from, as this is not revealed by the application. The database is community powered, which explains why it is large and well maintained.

Comparison to winget and WingetUI

When you compare UCheck to winget, you will notice that UCheck supports more programs than the default winget database. Winget detected about 20 programs with updates on a test system while UCheck over 140.

One reason for that is that UCheck includes the Downloads folder of Windows by default. Depending on use, it may store a large number of applications.

WingetUI is easier to use, there is no doubt about that. It suffers from the same lack of a larger software database though. Another difference is that both “wingets” support the installation of portable programs, which is reserved to paid versions of UCheck.

UCheck does include information about available Windows Updates though.

Closing Words

The end of SUMO, probably the best software updates monitor for Windows, has left a hole. UCheck comes close to what SUMO offered, but you may need the commercial version to really take advantage of some of its features.

The program could use a few usability features, such as an option to check all / uncheck all programs in the updates listing. Nothing major, but these would improve usability for some users.

All in all, UCheck is a well designed program that delivers exactly what it promises. The Premium version is worth a subscription, as it adds scheduled scans and some other features to the app.

Now You: do you use software updaters?

Package

WingetUI review: install, uninstall and update Windows programs

Posted on December 26, 2023December 26, 2023 by Martin Brinkmann

This is a review of WingetUI, an open source program for Windows that many users will find useful.

I wrote an article on the package manager winget for Windows yesterday on Ghacks. It is an integrated command line tool in newer versions of Windows to uninstall, install or update programs.

WingetUI takes the capabilities of winget and puts a shiny user interface around them. If you prefer to use a graphical user interface, WingetUI is a great option.

First the basics. WingetUI is an open source application for Windows. You can download the latest version from its GitHub respository and install it or run a portable version.

WingetUI supports winget but also other package manager and tools. These include Scoop, Chocolatey, Pip, Npm and PowerShell Gallery. Advanced users may configure the client to do their bidding exactly, but it works well without any advanced configuring.

WingetUI: core functionality

The main WingetUI interface is divided into three tabs: discover packages, software updates, and installed packages.

  • Discover packages — This tab features a search to find programs and options to install one or multiple apps at once.
  • Software updates — This tab checks for updates of installed programs. You may update all or some programs using it.
  • Installed packages — The tab lists the installed programs of the system.

Discover Packages

WingetUI interface

Use this to find applications to install. Just type an application name or part of it in the search field and wait for the results to show up.

The program lists package names and IDs, the available version and the source. Note that you may change sources in the preferences. If you just want to use winget, you need to disable all other sources. Some sources, for instance Scoop, are disabled by default.

A double-click on a file display additional information about it. This may include a list of features, a short description and tags.

WingetUI lists package parameters as well, which may be used to change installation parameters.

Check one or multiple programs and select “install selected packages” to download and install them on the system. Several options are available at the top:

  • Install selected packages with administrative rights.
  • Skip the hash check when installing the selected packages.
  • Do an interactive install for the selected packages.

Unless you activate the interactive install option, you may notice that most installations happen silently in the background for the most part.

Software Updates in WingetUI

The Software Updater lists all installed applications that are not up to date. It lists names and IDs, as well as the installed version and the latest version.

You may use it to update all out of date apps in one swift operation. Just activate the “update selected packages” button to download and install updates for the selected Windows programs.

It is a quick and easy process. Note that you may still get UAC prompts to allow updates, but it is definitely quicker than updating programs manually.

A right-click displays some options. You may ignore certain updates using the right-click menu. This is important if you don’t want a program to install a certain update. One reason for that is that the update may introduce bugs or changes that you want to avoid.

The package details offer information, including links to the official websites.

Installed Packages

Installed packages offers an overview of all programs installed on the system. WingetUI displays names, versions and the installation source, which is useful information.

You may use the information to check the source, e.g., if it was installed locally, from the Microsoft Store or using a package manager.

While you may barely use native Windows apps or Microsoft Store apps, others may appreciate the functionality.

Closing Words

WingetUI is a powerful frontend for winget and some other package managers. It is a useful tool to find outdated programs on a Windows system and get these updated in batch mode.

While it may not pick up all oudated programs, as it does not support portable apps installed from other sources, it does a great job at taking care of the rest.

Running it from time to time is a good way of keeping a system’s software up to date.

Printing

Windows Protected Print Mode explained

Posted on December 18, 2023December 18, 2023 by Martin Brinkmann

Windows Protected Print Mode (WPP) changes printing on Windows significantly. The main idea is to improve security and make printing convenient. Modern printers work automatically under WPP so that third-party printer drivers are no longer required.

There are downsides, especially when it comes to printers that don’t support the functionality. Another downside is that printer apps by the manufacturer may be installed automatically.

Good news is that the new mode does not lock out printers that are not supported. There are still ways to use third-party drivers, but the default mode will be Protected Print Mode going forward.

Security improvements

Windows Protected Print Mode improves security significantly by eliminating third-party printer drivers. These drivers can’t even be installed anymore, which eliminates an attack vector and reduces driver related issues as well.

Microsoft says that about 9% of all Windows cases reported to the Microsoft Security Response Center are print bugs. The company’s Microsoft Offensive Research & Security Engineering team claims that about 50% of all Windows Print related vulnerabilities are mitigated by Windows Protected Print Mode.

To put these changes in some context, MORSE did an analysis of past MSRC cases for Windows Print to assess if these changes would help. What we found is that Windows Protected Print Mode mitigated over half of those vulnerabilities. Major vulnerabilities, including Stuxnet and Print Nightmare, used print bugs in their attacks.

To better understand how MPP improves security, it is necessary to look at the current state of printing on Windows.

The current security model relies on a shared approach. Both the native Windows printing stack and third-party drivers play a role here. While Windows’ print stack is maintained, the same can not be said for all third-party printer drivers. Drivers may no longer be supported or may be incompatible with modern security features of the Windows operating system.

Besides that, printer drivers run as SYSTEM on Windows, which gives them a wide range of permissions that even exceed those of a regular administrator account.

Manufacturers and publishers are responsible to address vulnerabilities. This becomes a problem when they do not.

Printing features, such as Internet Printing, may also introduce vulnerabilities, if the feature does get implemented. Microsoft estimates that printer drivers implement over 40 different Printer Document Languages, which can “result in vulnerabilities”.

Advantages

With Windows Protected Print Mode “normal spooler operations are deferred to a new Spooler” which implements the following improvements:

  • Limited/Secure Print Configuration — Certain types of attacks, such as tricking the print spooler into loading malicious code, are ineffective.
  • Module Blocking — APIs that allow the loading of modules will be modified to prevent the loading of new modules.
  • Per-User XPS Rendering — XPS rendering runs as USER and no longer as SYSTEM under WPP.
  • Lower Privileges for Common Spooler tasks — runs with restricted rights instead of as SYSTEM.
  • Binary Mitigations — Several security mitigations may be enabled thanks to the removing of third-party binaries.
  • Point and Print — no longer installs third-party drivers.
  • Better Transport Security — supports encryption and will recommend using encryption whenever possible.

Windows Protected Print Mode limitations

The mode supports so-called Mopria certified printers only. The creators of the standard describe it in the following way:

Mopria is a printer industry designed standard offering a simple and seamless way to print to millions of certified printers and multi-function printers. It eliminates the need to install any additional software or drivers allowing you to easily print, regardless of the printer’s brand.

Once the change lands in Windows, the default becomes WPP. This eliminates the need to install third-party drivers and will also limit the Print Spooler service to a restricted service. This alone will reduce

Older printers that are not certified won’t benefit from these improvements. Windows administrators may install third-party printer drivers in these cases to ensure that the printer and its functionality can be used.

Another issue is that manufacturers may define Print Support Apps (PSA). These may get installed automatically on devices to add custom features and support. Users may uninstall them, but this is a manual process.

Closing Words

Windows Protected Print Mode improves security on Windows once it lands. The first version of MPP landed in experimental builds and it may take a while before it lands in stable versions of Windows.

Old printers will continue to work, but they won’t benefit from MPP and its improvements.

Windows 10 and 11 will support the feature. Microsoft announced recently an extension of Windows 10 support.

Now You: which printers do you use?

You may extend Windows 10 support beyond 2025; for a price

Posted on December 6, 2023December 6, 2023 by Martin Brinkmann

Windows 10, the operating system that barely anyone loved when it first came out, is supported until October 2025 by Microsoft. The operating system is still widely used with a commanding lead over Windows 11.

Statcounter, for example, lists Windows 10’s usage share at about 68% and Windows 11’s at just 26% as of November 2023. Windows 10’s usage share will drop until October 2025, but it seems unlikely that Windows 11 will overtake it by then.

A percentage of Windows 10 devices is compatible with Windows 11. These can be upgraded to Windows 11 and a good portion will likely be upgraded in the coming 2 year period.

Millions of Windows 10 devices are not compatible with Windows 11 on the other hand. Microsoft changed the operating system’s hardware requirements. Main restrictions affect the processor and also the TPM security component.

A Windows 10 support extension is coming

Microsoft confirmed yesterday that it will offer Extended Security Updates for Windows 10. These extend the life of the operating system beyond the official date.

Notable is the inclusion of individual consumers. When Microsoft launched ESU for Windows 7, it restricted the offer to Enterprise and business customers.

This changes under Windows 10. Everyone, basically, may extend support of Windows 10 beyond October 2025. This option comes at a price though. Microsoft did not reveal it at this point.

A look back at ESU for Windows 7 may provide estimates. Microsoft increased the cost of support each year.

Businesses could get support extensions for Windows 7 Pro for $50, $100 and $200 per device. Enterprise customers paid half of that. To extend support by three years, businesses paid Microsoft $350.

Microsoft might use the same system for Windows 10 and consumer devices. The company has no vetted interest in keeping users on Windows 10 and likely won’t make the offer too cheap.

Some might say that Microsoft’s main motivation behind the move is to avoid the risk of losing millions of users to alternatives.

As a reminder, here are the available options that Windows 10 users have if they want to keep the device:

  • Keep on using Windows 10 without updates.
  • Keep on using Windows 10 with Extended Security Updates.
  • Keep on using Windows 10 with third-party security updates by 0Patch.
  • Keep on using Windows 10 and use ESU updates or other updates restricted to certain editions or subscriptions unofficially.
  • Upgrade to Windows 11 (enforce upgrade if hardware is incompatible).
  • Migrate to Linux.

The right option?

Most options make sense. You may not want to run Windows 10 without security updates support, but all other options work for a period or even indefinitely.

The selection between an ESU and a 0Patch subscription is not as straightforward as it looks on first glance. 0Patch subscriptions cost about $25 per year, whereas Microsoft is likely going to charge a multiple of that.

Microsoft patches are official on the other hand and they include patches for security issues that are not critical. 0Patch focuses on high-risk security updates for the most part.

The upgrade to Windows 11 is a free option. It works for most devices, even those that are incompatible. Running Windows 11 on incompatible devices is not all that different from compatible ones. A few features may not work, but the main inconvenience is that feature updates require another compatibility check.

You could install a feature update every second year, as Microsoft supports all major Windows 11 versions for 24 months. Still, you need to bypass the compatibility checks again when updating.

Microsoft fuelled uncertainties by stating that it can’t guarantee any update or support if a device is incompatible. At least the update part of the statement is unsubstantiated up to this point.

Linux is another option, but it has the highest hurdle of them all. There is no direct migration path from Windows to Linux. This means that users need to back up data, install Linux and import that data to Linux after installation. Other issues include that some programs are not available for Linux, but there are usually alternatives.

Gaming has improved on Linux in the past couple of years, but there are still games that you can’t run on the platform.

Closing Words

ESU for Windows 10 adds another option for home users, which is good. No one is forced to subscribe, but users may do so to extend support.

Now You: do you run Windows 10? What will you do in 2025?

Did Microsoft just crush the hopes of Windows 10 users?

Posted on November 29, 2023November 29, 2023 by Martin Brinkmann

Hundreds of million of Windows 10 devices will run out of support in 2025 with no option to upgrade to a new version of the operating system.

Up until now, every version of Windows could be upgraded to a new version. All Windows versions reach end of support eventually. Microsoft stopped support for Windows 7 and 8 just recently, but this did not place users in a cul-de-sac. The upgrade path to Windows 10 allowed them to continue using their devices.

Things changed with the release of Windows 11. Microsoft changed the system requirements for the first time in a long, long while. The last big change dates back to Windows Vista, which Microsoft released in 2007 to the public.

From that moment on, Windows users had the reassurance that they’d be able to upgrade their devices to a new version when the currently installed version ran out of support.

Windows 11 requires a fairly modern processor and a security chip, TPM. Bypasses are available to install Windows 11 on devices that don’t meet the requirements. It is an artificial limit, not one born out of necessity.

Windows 11 does run better on modern PCs, but that is true for nearly anything else. Most Windows users who run older hardware know about the limitations. Most may prefer to continue using a newer version of Windows over the other choices that they have right now.

Microsoft confirms end of Windows 10 Support

Microsoft published a new support page on November 16, 2023 that some see as confirmation that Microsoft won’t extend support of the operating system.

The most important sentence on the page is the following one:

The Windows 10 end of support date of October 14, 2025, is unchanged.

The statement confirms Microsoft’s decision to end support of Windows 10 in October 2025. While it is very likely that Microsoft will stay true to this, at least for consumers, it can also be read as confirmation of the current plan.

Microsoft will give Enterprise and business customers an extension. There is little doubt about that. The system, first launched for Windows 7 about three years ago, allows these customers to extend the life of the operating system.

Windows 7 got a three-year life extension this way. Companies had to buy the extensions, but it meant that they could continue using these devices for up to three years.

Windows 10 will likely get the same deal, at the very least. A three year extension would allow commercial customers to use Windows 10 devices until October 2028. By then, Windows 12 and even Windows 13 may be out already.

What you can do about this

If your Windows 10 device is incompatible with Windows 11, you may wonder what you can do about it.

Microsoft recommends buying a new Windows 11 PC. That is an option, but it will result in millions of devices being put in the trash.

Users have quite a few options, but not all are equal:

  • Continue running Windows 10 at the expense of security and stability.
  • Upgrade to Windows 11 by bypassing the system requirements.
  • Migrating to Linux.

The first option may look like the worst of the three options. There are mitigations, however. First, third-party security patcher 0Patch will support Windows 10 with security patches for years after Microsoft ends its support. The company focuses on critical issues and it costs a couple of Dollar per year, but it is an option to continue using Windows 10 and feel a bit safer about it.

If Microsoft extends support for Enterprise and business customers, some clever folks will find ways to install these patches on user devices. The same happened when Windows 7 ran out of support, and it will happen again in two years time.

Installing Windows 11 on unsupported hardware is another option. It makes a few things less comfortable and some, mostly minor, features may not work, but it ensures continued security updates for the device.

The one big downside to this is that feature updates include additional requirement checks. This means, in essence, that you need to run bypasses at least every two years to continue receiving updates.

Migration to Linux is the most daring option. It is an entirely different operating system and there is no direct migration path. Some apps and programs may not be available on Linux either.

Good news is that you will be able to use the device for a long time.

  • Previous
  • 1
  • …
  • 4
  • 5
  • 6
  • 7
  • 8
  • Next

Support This Site

If you like what I do please support me!

Any tip is appreciated. Thanks!
  • March 2, 2026 by Martin Brinkmann Don't Bother with Windows 11's new Speedtest feature
  • February 27, 2026 by Martin Brinkmann Warning! That laptop on Amazon? It comes with temporary storage
  • February 26, 2026 by Martin Brinkmann "If your printer works today, it will continue to work": Microsoft corrects previous announcement
  • February 25, 2026 by Martin Brinkmann YouTube Premium Lite subscribers get background playback and downloads with a big "but"
  • February 24, 2026 by Martin Brinkmann Firefox 148.0 is out with its AI kill switch and support for Windows 7 and 8.1 comes to an end

About

We talk, write and dream about Technology 24/7 here at Chipp.in. The site, created by Martin Brinkmann in 2023, focuses on well-researched tech news, reviews, guides, help and more.

Legal Notice

Our commitment

Many websites write about tech, but chipp.in is special in several ways. All of our guides are unique, and we will never just rehash news that you find elsewhere.

Read the About page for additional information on the site and its founder and author.

Support Us

We don't run advertisement on this site that tracks users. If you see ads, they are static links. Ads, including affiliate links, never affect our writing on this site.

Here is a link to our privacy policy

©2026 Chipp.in Tech News and Reviews