Hah

Since I unblocked yesterday it by replacing music (grr), my WipEout vid has had a couple more views

asus.com/Motherboard-Accessories/TPM-M-R2-0/HelpDesk_BIOS

I guess I'm getting a TPM for Astaroth so I can do Windows Hello biometric authentication as securely as it should be.

I'm spoiled by the biometric auth we have at work. Heck, the Surface Go does face recognition. Why should a $4,000 desktop not have biometric authentication?

Gaming desktop with Windows Hello. Why not? It's just a matter of getting the hardware to do it securely.

Now to find a good biometric reader...

amazon.com/Blucoil-Secugen-Hamster-Optical-Fingerprint/dp/…

It just feels like Astaroth is the odd one out when it comes to biometrics. My very first laptop had a fingerprint scanner, and that was nearly a decade ago.

Come Sunday, when I get that TPM and fingerprint scanner set up, that should no longer be the case.

Thoughts on biometric authentication?

(consider that fingerprint scanners are ubiquitous on smartphones these days...)

Some futzing around, as I've not found any need for legacy BIOS compatibility... CSM disabled, Secure Boot configured and enabled. Astaroth boots with no problems.

(while Secure Boot is not required for the TPM or Windows Hello to function, CSM must be disabled for TPM 2.0)

Anyhoo, gotta get to bed.

PS C:\WINDOWS\system32> $env:COMPUTERNAME
ASTAROTH
PS C:\WINDOWS\system32> Confirm-SecureBootUEFI
True

@bwDraco are you using bitlocker?

@Aibobot speaking of giant mousepads

I want the entirety of my keyboard drawer covered with a huuuuge one

you can get em

but, I've just got a cutting mat instead

:D

Mine is about 90x60cm I think

I took 15min to build this nice table superuser.com/questions/1474445/…

I was bored lol

@djsmiley2k Not planning to. I'm mainly experimenting with more advanced security features.

But having the TPM there means that the PIN is actually backed by hardware-enhanced security as opposed to merely being another password.

When Microsoft implements passwordless sign-ins, this would enable me to disable the password, and the user won't be able to log in without getting past the fingerprint reader and TPM-protected PIN.

Obviously, the setup on Astaroth is not invulnerable to physical attacks, but it's more a matter of having a setup that replicates what's on my laptop and tablet, which both use Windows Hello with TPM-backed PINs.

(note that Astaroth can be configured to use BitLocker)

Long story short, I'm spoiled by the biometric authentication technology used both at work and on my mobile devices. I just want to do it the Right Way™ on my desktop, by using a TPM for the PIN just as my other Windows devices use.

fair enough, experimentation is good.

@bwDraco unfortunately, windows doesn't support software raid with BitLocker

Different use cases imo

I wouldn't bitlocker a server or need high redundancy or availability on a desktop or laptop

just understand that without physical encryption, the device is still vulnerable to someone physically walking up, copying the disk

also @bertieb @Burgi @DavidPostill no more 'your a bad bad pirate!' letters! theregister.co.uk/2019/07/20/creative_content_piracy

@JourneymanGeek indeed, if I can walk upto your server, you've already failed.

@djsmiley2k exactly

On the other hand, I'm ok with spending an hour or so re-imaging my machies

Actually in the modern context... most folks won't have the level of access to set up raid, or just treat machines as redundant

@djsmiley2k cough what's piracy?

;-P

I only download linux livecds. Not my fault if they're called "Slightly.Older.Movie.x265.Bluray.mkv"

(actually I torrented a debian livecd last week ;p)

Breaking form The Onion News: This just in- bittorrent actually used to download Linux liveCD

;-P

@bertieb I'm even seeding!

0_o

TMI

Actually....

There's a band I like called Machinae Supremacy...

Someone asked them what they felt about piracy...

"Don't forget to seed our music!"

if you like a band you are more likely to buy their music

yup

Same with a lot of media

i miss game demos

Someone sent me a copy of a book once...

I think I own copies of every book in the series. Sometimes twice (physical and ebook)

@Burgi I remember them coming on floppy disks!

I still have a bunch of old demo disks actually, sometimes it interesting to see how things have changed

@Aibobot yup, I think I have all of their albums (IIRC, I have bought 3 of those)

@Burgi demos made more sense when people couldn't download as much stuff

the cost of games are still going up

well ... you could think of steam's 2-hour limit as "demo"

@tereško one you've paid for?

well you can get a refund

@Burgi yes and no

is there any reason to not allow long file paths in windows 10? howtogeek.com/266621/…

backwards compatability

also since its new, they want to take it slow I guess

@Burgi and go the gigs, buy teeshirts and stuff actually sold by the band...

roar

Out for lunch (my normal lunch hour is 1 pm ET).

I can't wait to get biometric logon set up on my desktop.

@JourneymanGeek Honestly, I like having RAID on my PC.

But I'd also like the disks to be encrypted, so...

@rahuldottech eh, depends on raid levels

SSDs!

@Aibobot What about them?

Oh, mirrors

nvm

@rahuldottech I just run daily backups, and on the fly file syncs.

@Aibobot I feel that RAID is more convenient?

convenient how?

My backups are automated

And if I drive dies, I buy or scrounge another one, image from network and I'm back up. Do you absolutely need 0 downtime on a drive death?

@Aibobot I mean. No, I don't.

This is was just very easy to set up is what I meant, lol