Considering this is one of the most significant things to happen to hardware security in ages, you’re going to want to read the details directly from the source.
Credit: Vishal Gupta @ this link.
If you recently upgraded to a new Windows 10 version such as the Fall Creators Update, you might be facing a very annoying problem. If you restart your machine, after boot screen an error message is shown: “The user name or password is incorrect. Try again.“. The strange thing is that the error message is shown before Login Screen (also known as Sign-in Screen or Welcome Screen). So even if you didn’t enter any username or password, you get this error message first. Once you click on OK button, you get the Login Screen to enter correct user name and password and then Windows allows you to sign-in successfully.
It happens due to a new feature added to Windows 10 newer versions which is called “Improved Boot Up Experience”. Microsoft has implemented a new functionality in Windows 10 newer versions which allows Windows to use your sign-in info to apply settings after a restart or update. This feature automatically finishes setting your Windows 10 device after an update is installed and your machine is restarted.
Here is the official explanation of this new feature according to Microsoft:
The advanced Windows Update feature to use your sign-in info to automatically finish setting your device after an update has been extended to regular reboots and shutdowns. When you log in and initiate a reboot or a shutdown through power options available on the Start Menu and various other locations, Windows will automatically setup your account after it has booted back up.
This will help you sign-in faster and will restore your accessibility applications and any other application that has registered for application restart.
This feature was added first to Windows 10 build 16251.
Microsoft has provided an option to enable/disable this feature. You just need to use following steps:
1. Open Settings app from Start Menu. Alternatively, you can press WIN+I keys together to open Settings directly.
2. Now click on Accounts icon in Settings app and then click on Sign-in Options tab present in left-side pane.
3. Scroll down to bottom and you’ll see “Use my sign-in info to automatically finish setting up my device after an update or restart” option. This option would be set to ON.
Click on the toggle button and set this option to OFF.
That’s it. Now restart your computer and you’ll never see the irritating error message about incorrect username or password unless of course you manually enter a wrong password.
My usual tech news sources haven’t done a very good job at keeping me up-to-date about Marea, which is surprising considering how drastically it’s going to affect the lives of the people on either end of the cable. Here’s Microsoft’s live page of the latest on Marea:
A problem with the way that Microsoft released some of this week’s Patch Tuesday updates caused some users’ PCs and servers to blue screen, hang and/or fail to reboot.
To resolve this, input the following commands in the advanced repair options CLS, and remove every update that’s pending:
Dism /Image:C:\ /Get-Packages
Dism /Image:C:\ /Remove-Package /PackageName:Package_for_KB######
The KB # in question is KB4041691, 2017-10 Delta Update for Windows 10 (1607) and Windows Server 2016, and appears as the following in DISM:
Talos recently published a technical analysis of a backdoor which was included with version 5.33 of the CCleaner application. If you’re interested in the actual payload, this is definitely worth a look. Very interesting…
Very neat look behind the scenes of the DDOS that took out Dyn for a while.