Tiny11 has problems
ฝัง
- เผยแพร่เมื่อ 6 เม.ย. 2023
- Using any NON-Microsoft Windows ISO is problematic for many reasons outlined in this video.
Article with Links: christitus.com/tiny11-has-pro... .
►► Digital Downloads ➜ www.cttstore.com
►► Reddit ➜ / christitustech
►► Titus Tech Talk ➜ / titustechtalk
►► Twitch ➜ / christitustech - วิทยาศาสตร์และเทคโนโลยี
TLDW: Downloading Custom ISOs will compromise you. It is just a matter of time. Build them yourself! Tiny11 has a builder and the only change I'd make is swaping the oscdimg.exe with the Windows ADK official oscdimg.exe as shown in video. MAKE YOUR OWN ISOs!
Article Link with links to above resources: christitus.com/tiny11-has-problems/
But I think they're still ok for VMs. I'm planning to make a gaming VM inside Linux soon and Tiny10/11 are the obvious candidates.
@@GerdLPluu You do have a point, however both Steam and Epic have 2FA (Epic is arguably better), so it's nearly impossible for an attacker to gain control over these accounts. Also any trojan upload and download could be identified just by comparing packets with standard Windows.
@@sovo1212 and why not proton?
@@myrminki Not enough for some games, mainly because of anticheats.
2FA doesn't help you when your session Cookie is stolen. If it's just games and you don't care, fine. But you should at least look that the VM can't compromise you local network or other devices. Ok, maybe normal Hacker who just want some data from Onlinebanking or PayPal won't do that much. Everyone should know themselve what and how they want protect.
Reporting you: your clickbait thumbnail says Tiny11 INFECTED but your video has general info about what might happen with custom ISO's only. No info about what is infected int Tiny11. The warnings about custom ISO's are valid, but your clickbait about INFECTED with no proof has cost you the respect I HAD deveoped for you over the years.
Bo hoo hoo what will he do without a random internet person
🤓
@@eMarce1. Standing for a trend rather than standing for transparency? Now I see why Microsoft is so big 😒
Also, make it 2 internet persons.
@@eMarce1.
3.?
@@soggyandroid Then point the moment from the video when he sais Tiny11 IS infected. I listened to the whole video and didn't find it.
The official Windows ISO is also spyware though.
We all see what you did there. It is...acceptable. We'll allow it.
But I feel like it’s easier to hold one accountable that the other.
@@markh.6687 why would you accept that? they are freely insecurely giving out your information.
@@williamkirkpatrick6942 what information is that? Do you personally know anyone that was affected?
@@williamkirkpatrick6942 It's an Internet meme; I'm acknowledging the wisdom of the comment, not approving Windows spyware.
IMO that man did not go to prison for what he did. He went to prison for what the prosecutor and MS convinced the court he did. They made the court believe that he was giving away free license keys, when in fact, those license keys were stored on the motherboards of the laptops when they were manufactured.
💯💯💯
So its not illegal. Just more lobbyist bullshit
Always make your own lite versions. There are plenty of instructional videos. You will then know what to do if Microsoft Updates break things. The other problem with a custom iso is MS update will eventually break it or install the stuff you wanted left out.
Just wondering what you mean by making your own lite version, how do you do this?
I tried using ghost spectre and one day Edge browser was in my desktop :)
Then I switched back to Linux immediately. I don't want to use KGB-CIA joint spyware.
@@jimhopper5868 that happened a while ago because windows was forcing it in a update. use iobituninstaller to remove it even from official install then remove iobit. Spectre is safe so far but ya I wouldn't trust it if I didn't tear it apart several times myself just to check it out thru several of the iterations.
@@Don-me4sq msmg toolkit / ntlite
@@Don-me4sq Chris, CyberCPU Tech, and Britec09 all have videos on making a custom or lite iso using MSMG Toolkit.
The problem is Chris, who do you trust? No one. When even using MSMG Toolkit and NTLite, you have no guarantee its not doing something in background when removing stuff and repacking the ISO, because its not an official bit of software from Microsoft. They even get flagged as Malware by some antivirus program, but its probably false positive. I have never shared my own ISO's with anyone, yes I have reviewed some nice custom windows iso from people and some I really like, but I only ever install them on virtual machine. I just done one today which look real nice, but the links he was using are all bad links leading to malware, which I did highlight in the video, debating whether to even leave that video up after thinking about it after I made it. But my advise has always been the same, never use other peoples creations, either create your own or use LTSC from Microsoft if you can get a legit key.
These custom answer file programs were better in the 9x 2000 days. All behind a paywall now. Or shit
If you're afraid of the debloating tools most of em are actually open source so you can just clone it
maybe you're right about closed Source one but at the end of the day the OS is already considered as A Bloat so if privacy mean something to you can use this virus in VM while using the only secure system in the world ... Gnu/linux
You trust people and companies every day, even while getting food from the store or going online with your internet provider or driving a car with other drivers on the road. Using an iPhone or Android...trusting the phone manufacturer. With any software you install, you are trusting the developer of that code.
To answer your question, if you are using Windows, you obviously have to trust Microsoft, otherwise don't use it. And said that, the only trusted source to download software from Microsoft, specially Windows, is Microsoft and nobody else. Instead of building an ISO just debloat and modify the OS after a fresh new installation, this can also be automated, which means there is no need to create your own ISO in the first place. And Microsoft provides tools for custom installations, which means you can more or less just install exactly what is required and remove any unnecessary packages and services if required. Enterprises and IT departments install custom Windows/Linux for ages and never had to build their own ISO's for that.
*whom
@@billydelacey Both are correct, but only pretentious pricks say "whom".
Some people do it, not out of the goodness of their hearts, but rather to show off how much skill they have, which is highly valued.
This is mainly why release groups releases their cracked version of software.
I used to do a lot of winXP and server 2003 versions and combined iso's, with modified themes, auto installers for software etc. It was both fun and a big time-saver for what I used to do regularly. By the time of 7 there wasn't quite as much need for me, and there were fairly easy installers like Ninite. It was often just having iso's with the updates applied. Haven't really had the need to do too much for 10/11 either, since there was stuff like Rufus, and more recently Ventoy. It now is mostly about de-bloating and cutting telemetry. Most of that I prefer to do manually as Updates have too much of a habit of resetting policies etc.
Nlite lost it is appeal because the Windows 10 Version got updated from version to 1507 to 22H2, with every fresh install you already had all the major updates. On windows 7 there was just one version and one big service pack but you had to install a lot of updates and it took longer to install older hardware so it made more sense to automate the process to save time. And Windows 10 became much safer and the times on reinstall windows freshly been also reduced. I remember i had to install Windows Xp much more frequent so it made more sense to reduce the time and instal an individual faster version.
Bringing some awareness is fine, but there are quite a few conjectures being made with little to no proof to back them up....
Exactly people like to go for a rant on utube and here we are. You can also get false positives but he failed to mention any of those.
Seeing people completely misunderstand what you're saying in the comments saying with self-affirmation how it seemed "scammy" or how their paranoia saved them really doesn't sit well with me. Doing some reading, it sounded like that person who was sentenced to 15 months in prison was selling it not merely redistributing it. The supposed monetary value in the ruling doesn't really make sense, but claiming that custom ISOs are illegal based on this is complete misrepresentation of the problem. Also bringing up a potential correlation to Tiny11 installs and TH-cam hacks with no proof for this statement spreads unnecessary fear and doubt.
Don't get me wrong, it probably isn't a good idea to install a prebuilt custom ISO for Windows. There absolutely could be software preinstalled designed to steal your information. But you don't need to misrepresent the situation to get that point across.
preach
Such examples are probably one of the few ways to convince someone that WAS going to download it in the first place (people not concerned about security)
This video is empty fearmongering. Not only is Windows inherently spyware, but the notion that "building your own" is somehow safer is total BS. Yeah, sure, if you literally write the code for the builder yourself, but why would downloading a Tiny11 builder then using that to modify an official MS .iso be any safer than just downloading the custom ISO from the same guy who makes the builder? If he wanted to implant malware, he could do it either way.
Idk man, honestly the video tittle is a bit too clickbaity. I just installed tinyw11 on a vm simply to backup my phone and to refresh my side loaded apps. Honestly I’ll take a look at the builder but for now I probably will just keep tiny11 up cause honestly the uses is simple and I’m not passing too many sensitive things.
Is there any point of doing tiny 11 like you said, if we use your debloat tool on our win 11. Would it be the same thing?
It's funny how custom Windows ISO trend is coming back. I remember that same trend in the XP era, I was using Windows XP LSD (Light Safe Design). Running a custom used to be being the cool kid XD
Just built my own Tiny11 iso thanks to you. I had the impression that it'd be a huge undertaking getting it to work but it turned out pretty easy after I understood how to install the APK for a proper oscdimg. While I wouldn't ever trust a custom ISO from the internet, I'm really glad it was possible to create my own. Thanks!
How did you do it? Is there any guide or something that you can share please? Thanks
@@arshitvaghasiya7317 I followed the guide in this video and on his linked web page.
@@treacletree oh okay. Thanks for your reply
How was your experience with the system?
@@suchangburagohain Pratically I didn't notice much difference to be honest, but not sending as much telemetry is the main reason for me to do this. I mainly use Manjaro, but have a Windows gaming rig as well.
Not that I would ever use these custom ISO's, but couldn't the same be said for all these custom Linux distros?
it could but usually they are open source so if there are any vulnerabilities someone would catch them
@@rish77778 Good point
Thank you Chris for bringing this up. I never try any Iso from any company. I still use windows due to their ms office on separate machine and I do not do anything else. I using arch Linux which I had compiled from scratch , keeping things which I need and discarding rest. It’s a steep learning and not for average home user.
ISOs from reputable organisations should be fine. Source code can have malicious stuff added as well. It's more visible but it could stay there for a while before someone notices it, and it could be obfuscated.
Verifying files with hashes might improve the security a little bit, but if the ISO or other installer or source code package has been compromised, the provided hash value could have been as well.
Hey Chris just did a new Windows 10 OS install and had to do 22H2, after the latest Sophia and your latest script, and Windows 10 debloat script, I ended up still having 74 processes. Wondering if there's more to be done? Do you think gaming will be as fast as it was with 21H2? I appreciate your thoughts on the current supposedly fixed 22H2 situation, thanks! 👍
@Joel I was at 50 with the last Windows version after fresh install and script and media couple other manual deletions
Guess my paranoia saved me this time
Paranoia will usually save you
True, got saved from the LastPass breach, because I was paranoid that the concept is dumb and only a matter of time before a breach was done.
+1
Same here. Only open source OS for me.
@@Mathias-bz2kr so you don’t use a password manager?
It's not just the maker of a modified OS, when there's no official site any one can mod the ISO and host it.
I've also worked in IT for a long time and we've made sysprepped custom ISO to speed up local installs and include $OEM patches so that the server might actually boot on first run rather than require an expensive field tech visit to bring up the network
Cool story.
@@billydelacey Bro.
What he didn't say was that it was the purchasing of "other local services" that made those field tech visits so expensive..
Don't get me wrong, I understand the paranoia. But what is the actual proof of malware?
I agree, building your own installer is generally safer, but without actual evidence of malware and malicious bins/exes this is nothing more than shilly paranoia.
Exactly
and then what? Anyone can simply say the key logger is just collecting passwords and credentials to help you "login faster", "make the experience even better", or some other arbitrary service or feature they could bull shit on the spot.
don't be a dick
@@swimfan6292
According to Ghidra there is no keylogger, other than what windows already included for it's copy/paste, which the installation media iteration is different from the actual os iteration.
Ghidra also confirms that the altered exe disables certain telemetry functions so you can create an account without having to create a ms live/outlook account. It also disabled certain other telemetry. That exe contains the locations lookup, and if disabled windows won't enforce certain aspects of the oobe.
Unless you're willing to do a deep dive yourself, don't be a d!ck
Radare is better, btw
he wasent saying they had such thigs but it could and its a risk.
Thank you for covering this Chris, I had been on linux for 2 years but had to switch over to windows 2 weeks ago because of general frustrations with little things not working, I saw recommendations for Tiny11 and I thought I would give it a go. I know better than to use custom ISOs but I figured that this would save me some time on debloating manually.
Security concerns aside there are already plenty of issues with this ISO. Some critical windows services have been outright removed, most Microsoft related things entirely broken and the resource usage still unforgiving because of using Win11 as a base. After this abrupt reminder on why i stopped with windows in the first place i ran back to linux in a week 😂
Welcome back home comrade, welcome back.
Which distro? for stability use fedora workstation with cinnamon. It has less problems. fedora stopped my distro hopping fever.
@@ananta6d595 I've been on fedora but on my older hardware plus all the strict open source things fedora puts in your way made me eventually switch back to Pop. That's what i was using when i switched to windows for a while but i wanted to try kubuntu this time... not as good
@@rishabruh I have also used Pop OS it was good but wasn't suitable for my laptop. It Heats up the laptop and consumed more ram and had Wifi connection problem. I have to try it one more time and you can try Nobara which is based on Fedora and it has no restriction like fedora. I wanted to love KDE but failed it has multi display problem. OpenSuse is also stable if you want to try. And again, Windows is shit as always, it has issues here and there.
@@ananta6d595 Try out Kubuntu LTS 22.04 or wait a half year to a year when they properly make Steam OS for regular PCs...those MAY be your best bets...pretty sure you will come to appreciate the DE over anything else. Also, oh wait, you probably are on linux as you dislike windoze...so Kubuntu may also be disliked by you as it is the MOST windows compatible linux on a basic level for years now (like I said only Steam OS will top it soon). Well, my DE suggestion stills stands, you can pop that easy enough on Fedora. Cinnamon is okish though, just inferior on some modern systems...I always found the SCALING pretty trash on almost every other distro I would try. With 4k / 8k being so common these days, that scaling was a major factor in choosing KDE.
Nice video, Do you approve of the concept? is there a better way of doing it ourselves? other than the ntdev tools
NTDev Tools is basically it, there are other systems but they are WAY more convoluted and confusing, but trying to install and modify will never work as well as an NTDev type utility
Following the open source Builder using the official Microsoft tools is what I'd recommend.
I have an LTSC deployed in a VM and its footprint in terms of disk usage is similar to those custom ISOs. Memory wise it can be tamed by disabling services at will.
Great video! Would love to see a video made on the browser extensions(and which services are good for particular extensions such as VPN'S anti-viruses etc.)
What about ghost spectre? I've been using him for a good while now. Are custom isos in general just bad?
You may never know
They are great custom versions by Ghost Spectre, Ive not had any issues at all.
I'm delighted you're reminding people Chris, 25 years ago this was commonplace. Remember Vortex Vista, or TinyXP? People eventually got sense (usually buy trial and error) but now we have different generation(s) with a lot more to lose. So props Chris, well done! 👍
Would you be able to review Atlas OS? I don't feel safe at all with Windows at this point, I'll be probably moving back to Linux Debian...
Thanks Man. I've tested reviOs for some days, but I always return official ISO.
A good Followup would be how to get a legit ISO and trim it yourself for performance and features you want (gaming focus?)
He already done that. Search his custom iso making video
Atlas os
he already made multiple videos about it
+ like he said in the video, you can use tiny11 builder and build a tiny11 iso yourself.
I'd say there's always a risk, just trust what you like to trust, and live with it. I trust Ghost Spectre and Garuda Linux, daily driving them time to time everyday.
❤ I am using it too I have a friend that works in cyber security and ransomware company he did a favor for me and ran the whole OS on there systems and did not find anything as matter in fact it’s better then the original MS OS less tracking and out going and income traffic. He really put it to the test and told me that he never soon this done so clean. The softwares he uses awe for enterprise which coast lots of money. So for that reasons I am running it and it’s been supper no tracking now virus and stable.
kinda lazy faire, dont you think? probably not
Imagine thinking like this.
im using ghost. and i have watched packets and where they go. i have stared at the processes for hours and no issues.
Do you have recommendations for doing it yourself? Getting the performance tweaks on your own?
Could the different size and broken signature result from UPX or similar compression?
Can you show me where in the code these threats are
Great advice here. For those who like to experiment with this stuff, I would only do it in a VM on a LAN isolated from your real network.
I'd be curious to see what traffic some of these generate during/after install via WireShark. Not curious enough to spend hours installing Tiny11 and combing through its traffic, though. 🤣
Did that logging for 2 days (ReviOS) however no suspect connection found, issue is that we don't know (if there is) at what frequency/date backdoor is set to activate hence may be tricky to catch.
I apologize if this was asked before, but whats the best video to follow to debloat windows 11? for gaming, I'm gonna try your tool for sure
Could you please tell us exactly what's wrong with Ghost Spectre? Since you mentioned it then you must know something.
Does Chris have a video about how he makes his articles?
Here you go: th-cam.com/video/xMv10E561WQ/w-d-xo.html
I've been using Ghost Spectre, but your right. I think tomorrow I'll spend some time going back to original ISO and just run the ps de-bloat tool instead. Kernel level keylogger sounds terrifying!
I like the idea of 2011 but I absolutely agree if you can recreate the whole thing with just keystrokes on your own computer best way to go, if you have to start downloading stuff you start introducing compromises
I used to use AtlasOS and I did like it without question but there were serious problems with it. Especially the gaming aspect of it when it came down to DirectX12 and issues with the settings causing the whole system to crash. So very vulnerable to that and there is no defender on it as far as I know
Defender ain't going to do shit anyway.
@@SamSquids True without question. I never use it regardless but I use linux as daily driver for years, so I have no use for that stuff. But I prefer a stock windows 10 iso and use the all in one tool Chris has made. Lot user for my use and no restriction issues made by a modified ISO.
Would be good to see a video where you show how to find those possibly dangerous tools hidden in some of the customs ISO's.
He won't because he's never found anything. It's a pretty deceptive title, despite the good intentions.
@@MarcosCodas I was wondering this as well. I've used quite a few Win XP and Win 7 custom ISO's. They pass virus/malware checks at ISO level, install properly, and pass the same tests running live. My firewalls never catch any weird call-home/telemetry (if anything, they usually come with all the Windows garbage telemetry disabled).
But I guess it's a good idea to check everything before running it as a main driver OS.
Thanks for putting out this PSA Chris. More people need to wake the hell up!
For real.... Survival of the fittest at this point....
@@OverAndOverAndOver 🙌
And yet.. watching these PSA videos has lead to many custom build videos in Suggested,,,
i have always used custom isos to experiment on older pc and virtual machines, never kept or used them for a long time, i don't think anyone can use them for a long time since they will break unless they are used 100% offline
Is MSMG Toolkit you recommend in the past, still good?
Thank you for taking this stand. When the Tiny11 craze first started just a little while back, I was trying to comment on videos like ETA Prime’s about being weary of custom Windows ISOs. At the very least, individuals should be aware of the risks involved in using custom Windows ISOs. If you don’t know where your OS is coming from, you can’t trust your OS.
No Microsoft product is allowed in France at government. Microsoft is a high-tech company espionage product. Microsoft started selling complete country tech industry data since the 1990s already. Microsoft destroyed and rules the world.
doesn't mean tiny11 isn't good
@@royalkingdom2801 “That which can be asserted without evidence, can be dismissed without evidence.” ―Christopher Hitchens … In other words-your mileage may vary, so long as you understand the potential risk involved. Your OS is ultimately your choice, go with God, my friend!
I mean.... yes. That's true, but I also don't trust windows already
I have my own Windows post-install powershell script that takes bits from your debloat tool and other sources, plus some other modifications that aren't debloating but make it the way I want it, things like adding the network drives.
do you share that on github?
@@tygi No, because it is very specific to my setup.
i installed windows 11 on my surface 3 tablet can you recommend a debloater i can run on it?
Any notes on how i can verify that the modified os image is clean? IE installing in a VM and checking default firewall settings, checking network traffic with netlimiter or some other way? Not gonna lie, want to Start using as a daily a certain build of reviOS that had some extra optimizations.
I installed T11 on a laptop for testing, but then started using it regularly. I've been in IT for over 20 years as well and should have known better. I definitely needed to hear what you had to say Chris. Time to make my own personal version before something bad happens.
So after 20 years of failing common sense you needed another guy in IT for 20 years to to tell you this? I'm also in IT for 21 years and I never ever installed any garbage like this, not even for testing. Why the hell would you test something like this? It's quite scary realising that other IT "pro's" are using this and creating a security vulnerability with every install.
I have never tried any custom isos on my main hardware but thanks for the reminder. I would enjoy using windows 7 on my laptop until its death, it got slower with time. Currently, I'm using windows 8.1 and it's great
I got a ransomware in my windows 8.1 years ago. Although i haven't stored any important files, it was very clear to me that any windows versions that contains internet explorer is dangerous and should not be trusted.
@@tyrellwreleck4226 Same here. I wasn't supposed to disable windows defender in the meantime but my files got encrypted. I was tempted to run kms to permanently activate windows 8.1 because none of the product keys were working not even mas without realizing it was a malware all along. I tried to upgrade to windows 10 thinking it would resolve the issue but it was still the same. Hopeless, I had to clean install it. My files got deleted but nothing remained encrypted. However, I experienced some other issues like slow performance, apps not responding, ms store error and so on. It was difficult to fix them the simplest way, so I installed windows 7 because I couldn't roll back to windows 8.1. Currently, I'm using windows 8.1. I got kms again but this time, windows defender was enabled and no files got encrypted. Now the license got expired and I dunno whether I should activate it once again or not.
I appreciate the info I gained from this video.
I built a tiny11 iso myself, and I cant thank you enough!
can you share it for me :((
Great Video Chris!!
How do you feel about all the Docker Template lists?? I have similar concerns that these Docker Templates are similarly fraught with malware.
THANK YOU. I really appreciate that you ask viewers to question the MOTIVES of people releasing stuff for free. This doesn't mean that everyone's motives are bad, but they obviously have them and it's simply a good starting point to ask yourself or others what they are. My first two questions with every project and binary blob is, "who did this?" and, "why?"
Some people just do things because it's a challenge or because they want the attention, but it's all too easy to lure people in with things that are too good to be trustworthy. A related video to watch after this is Linus Tech's video about "Android TV boxes". I was not even slightly surprised by the software discoveries as I've suspected these products since they appeared on the market, but I was surprised by the hardware trickery as I simply hadn't thought of it ;). The irony there is that people *are* paying up front for the products.
Yeah, but . . . the answer to who and why is ALWAYS "I could guess, but I don't really know."
It's just fun. There are many devs, like myself, that writes code just for fun. I don't do it anymore as I have a proper job now and I am no longer a teenager but back in the day, I wrote many nice things, made them available for free and made things (when possible) opensource.
I was specialized in making drivers for old hardware to run on new OSes. I got tons of people thanking me for being able to use their PCI, ISA cards on their new Windows Vista installation (hardware that was designed to run with Win98).
I mean, as a teenager, my daily routine was just school, homework, masturbation and playing with PCs. Just a typical teen at the time.
It was great fun to discover Linux and opensource code, then learning how to make things work and making my discoveries available for free.
I suppose, a lot of devs are altruistic.
This guy in the video is talking a lot of rubbish as the code of this particular tool is available on github, it is opensource and anyone with knowledge and goodwill would have easily spotted bad or malicious code. I have seen malicious code on github be taken down within hours and this, according to what I've seen, has been there for years now.
He's right when he says "don't download ISOs and install - build your own". But making statements saying that files x, y and z are "sus" is just ridiculous.
If this guy opened github his brain would combust
You realize that Linux exists, right? Most computers on this earth run on operating systems people created for free just because they'd be cool to have around.
same can be said with bat files and exe files prepared by ppl like you. i think you should do a video explaining the bat files that you prepared, going line by line to teach us what each line does? or show us a way to do all the debloating manually without using your file.
Same *can't* be said with his debloat files. 1. You can look through yourself 2. Why would he ruing his reputation for a bit more money 3. You can debloat it yourself, the aim of the script is to make it easier
so is it safe to create my own installer? I'd really want to test this on a light laptop but i need it to be secure
Great video. I have just created my own tiny11 iso and it works!
this is an important topic and I think it should be covered better,
let's start why people even consider those stripped-down Windows images - this has clearly become Microsoft fault their vanilla operating system is so mediocre people seek for more "usable" options,
then there's trickery when trying to legally obtain official Windows ISO - simply impossible, again Microsoft fault, they are so obsessed with pushing people into latest versions one needs a Mac/Linux system to actually bypass Microsoft website check and get full genuine ISO instead of some .exe install download/builder,
then, there's problem of installing Windows - again Microsoft fault because it's no longer possible to simply install genuine Windows you download, there's all sorts of trickery like Microsoft online account and other garbage which should not be mandatory, yet they appear they are,
then there's lack of core functionality in Windows - again Microsoft fault, they pretend to deliver fully functional product, yet it doesn't include basic dependencies like MSVC, DirectX, can't open Microsoft file formats, print PDFs etc...
to sum it up, Microsoft should address the fact their official products is so shitty that majority of those custom ISOs are that much better people are actually opting for them, compromising security and integrity of their work devices - will they? who knows, meanwhile they focus on throwing more useless garbage into Windows instead...
A very good point, but I was more afraid of scaring folks off with it. I will say the biggest advertiser of Linux and it's adoption is Windows. I didn't try Linux because I wanted to... I tried it because I was mad at Windows lol.
@@ChrisTitusTech Same, 11 certainly made me change daily drivers.
@@ChrisTitusTech well I've been using all sorts of Windows, MacOS and Linux, every OS has its pros and cons,
fair to say people simply want something that works, if only Microsoft could deliver on their own :))
Er... You can use the inspect element and change device type to iOS or Android so you can get iso IIRC.
Ah... a Linux user, no less. It's in your attitude.
Your point is legit however there's a big difference between suggesting and having a proof. So do you have any proofs that tiny 11 has any malicious software in it?
The proof where is it. I would like to to see the evidence of this.
So Chris, what do you do if every time you try to use Microsoft's tools and they don't work. I get the same error every time I try to create the media, it says we're unable to run this tool on your PC. So where can I actually go that is safe to get these Iso's? I have the same problem with Windows 11. I found a place to get them but I'm not sure I actually want to use them. You would think Windows would just make the damn files available to download.
Never mind I used Brave and switched my user agent and I got the files downloading. Microsoft should be sued for the way they treat their customers. It's just BS making people go through this crap just to get a copy of their friggen ISO!
UUP Dump has been acting up, producing broken ISO's and general weirdness.
I just want to remove Windows Home from the official ISO with DISM, leaving only Windows Pro inside the ISO, so that on laptops Windows Home edition doesn't get automatically installed. Is there a way to do that with DISM?
So I plan on building my own, but, with the debloating I'm curious if anything like drivers for gaming will be heavily affected?
no because in most debloaters they have an option to check and uncheck thing so if you want the store or anything related to xbox software you can unclick the box and move on. the debloater will not touch those files and just move to remove what you left clicked on. i have used some and i just don't like any time MS updates you got to run it again but i mean that is the only down side no matter how times you change things MS can just add it back on the next update.
You have the best timing ever. Built my pc LITERALLY right now and saw this in my notifications, I actually had planned to install and use Tiny11 but never mind that
Chris, do you have FPS limiter for Steam on Linux? I mean for all games. Something like solution for nvidia cards.
My go to is MangoHud. With Goverlay you can set a fixed FPS but also have a flip switch between 30/60 or 60/120. Then you also have gamescope that is more specifically for Steam games but allows for more granular control.
How about Atlas OS the debloating software? What are your thoughts ? It doesnt redistribute anymore, it is mroe of a debloatware OS.
Never had any issues for years with custom Win isos
Same
The link to your article is broken.
Fixed!
Yoo dude i remember the live we went through these nice to see it make into a video to raise some extra awerness of downloading random isos from the internet.
FINALLY, i has been searching for this video, thank you for "saving my pc", i didn't wanted to download it until i see at least one of these videos, thanks man :D
Well i don't like deep mods because any update will break your system, but here is a thing, there are lots of hidden options that are officially supported (so won't be broken by updates) and you can use them to tweak your iso to make the instalation size about 5GB and block all the bloat - very useful for cheap eeprom devices
at this point it's not easier to use a debloat script?
Thank you so much for this. It's very important to caution people, because sometimes trusted sources give poor recommendations.
What exactly is the problem with these windows distributions, I suposse that because they are not maintained they never get updates so they are vulnerable, am I right?
Wow, this makes me wonder about all the rando minor Linux distros that people are booting into. Probably not as likely to be infected as a custom Windows installer.
But yeah I never really thought about how much easier it is for malware to run within ANY bootable software.
Most people probably don't have anti-malware running before the boot program runs.
And the boot program (be it OS bootloader, disk repair tool, password reset tool, etc) runs at a VERY high privilege level enabling malware to install itself wherever it wants on the system, eg. an outside-of-OS bundle of fun that gets loaded on boot somehow before the OS loads.
Secure boot makes their life harder but it's probably kind of a pain for power users, so turned off. Or they can try supplying a legitimate- sounding reason to turn the already bothersome thing off.
Is Tiny10 / Tiny 11 signed and working with secure boot?
> Probably not as likely to be infected as a custom Windows installer
why ?
Thank you Chris !
would appreciate some new videos about deploating windows 10 and windows 11 for 2023, Thank you!
God bless and keep up the good work !
Just use linux at that point
That image creation executable does look suss to me. If you build your custom OS with an infected tool there's no advantage over downloading it obvz.
Would be interesting if that file was analyzed further to see what, if anything, is changed vs the MS versions!
Also the certificate chain should be checked further.
I can't download the windows versions for tiny 11 from uup dump. It says windows version is deleted from Microsoft server
How do I install Windows 11 on many pc at once, using the official ISO from MS?
If they covered the instructions on how to generate this magic ISO so everything can be verified. Like open-source.
It gets the compromisation over and done with nice and early - out of the box
😂
unrelated to the content in the video but have you heard of a project called Komorebi made by Jezzy on TH-cam which puts a tiling window manager in windows?
good advice especially if you do any kind of financial work or transactions on your PC. stick to official windows iso or something like ChromeOS, Linix Mint ect
It is great to see someone warning about how risky these things are.
Also, what is your opinion about the new Ameliorated wizard? It allows you to get different "windows versions" like AtlasOS. Instead of installing a custom ISO, it modifies the windows installation according to a file called the "Playbook".
Is this considerably safe?
I'd say no, since, as you described it, it basically turns it into atlas os or whatever
@@eMarce1. its just a script to strip things down dude lmao. If you can check the script, Im sure theyll be fine
@@eMarce1. misinformed opinion nice
@@ExZ1te but you can check file by file what is in it though most people don't do that and at this point MS is nothing but malware from the sources so i don't really see an issue.
The wizard itself is closed source
What's the difference between a Linux OS and Tiny 10 or 11 in terms of safety?
Shore there are also signing software or even powershell Skript but the time stamp missing from a certificate is a red flag that bundle a rootkit within the image that you modify and this is to alter windows file protection and the kernel signature verification, or 3lse when you boot up Pop ups that windows has missing important system files will appear
the biggest reason why i never tried tiny 11 is that every video i saw on it,in the task manager they have way way toomany tasks runnning to be called a debloated os.
I'll just stick with Linux. Not going through this crap and I ain't trying to fight the oh so "user friendly" Microsoft.
Thank you for this video, I was considering getting tiny 11 on a new system I'm building. It didn't even occur to me (computer science student w/ a couple of years of experience) to strip out the bloatware myself
I actually tried to put the arm version of it on esxi arm and I couldn't get it to work well but that is my whole experience and interaction with tiny11.
Thanks for the advice. I'll stay away from the custom iso's but can we trust Microsoft? "The U.S. Department of Justice said Microsoft Hungary will pay the $8.75 million criminal fine, as part of a three-year non-prosecution agreement in which it “admits, accepts and acknowledges” responsibility for employees’ misconduct. Microsoft also agreed to pay nearly $16.6 million to settle related civil charges by the U.S. Securities and Exchange Commission over its activities in Hungary, Saudi Arabia, Thailand and Turkey, without admitting wrongdoing." (reuters)
I don't think Microsoft can be fully trusted either but in this scenario it's whether Microsoft can be trusted more than vs the modified versions of Windows being redistributed.
The world is very different now than the days of Windows 7 or earlier...
Good timing! I saw a youtube recommendation for tiny11 (and tiny10) and had been planning on installing the 10 version on my wife's slow laptop -just haven't found the time to just yet.
Making my own windows install iso seems like it could be more work, but it would be better than installing malware unawares.
Tiny10? Hmm I thought that was called Linux Mint ; )
Can you do a tutorial on making a custom windows 10 iso with no bloatware and unwanted things with using these files?
If you don't buy or using your windows update...tiny 11 might not let you update..which a lot of time fixes problems and patches up security issues. You're completely right. Like hard drive..when it comes to security just buy it or do it the legal way.
I use Ghost Spectre 11, with my own security and performance modifications on top. If they drop a keylogger me, or do anything to otherwise bug me, I've got systemwide whitelist firewalls set up on both the local computer and the entire network. Only applications I approve of, including system applications, are allowed past the firewall. ReviOS and Tiny10/11 already both did me dirty, and I caught that via the firewall logs. GS has yet to do wrong to me, but I will know when it does.
What did those OS's try to do?
@@fred-youtube ReviOS just broke every time I tried it, Tiny11 was broken ootb, and I believe both have been caught containing malwares.
Give WindowsXLite a try it was previously Phoenix Project im a friend with the builder of it as well and we both tested the builds to the absolute limit and the ones i can reccomend are WindowsXLite Atomic 11 UltraLight Build its only 1gb its based on latest 22h2 build give it a try
I always thought that modded windows ISOs are most likely malicious, especially for ghost spectre’s ISO. The only iso that i felt like could be ok is atlas since its open source. ( and popular too ) Opensource is only way to know if ur fully safe
Yup! Build it yourself! It's the only way to be sure.
I always build the atlas iso myself and it's great! But now after the new atlas update that uses open source ame wizard it's just more safe
I understand the point, but honestly just being Opensource does not mean you are "fully" safe. Unless you read and understand the code along with any other opensource projects it includes you are not safe. Merely taking a project and building it on your computer does not make you safe as Chris suggests. If you haven't read through the Linux kernel, how do you know you are safe? You have to rely on others and that then provides a chance of compromise. Is opensource better? Absolutely! Is it 100% safe? No and nothing is.
@@primo_geniture As you said nothing is 100% safe, nobody can claim that... But open source is still better than other choices.
Is ghost spectre malicious?
I liked it, planned to install later)
Hey what You do You lile Windows server 2019 or Windows server 2008 r2
OK so I have a valid ISO from Microsoft and a Key from an old laptop, is there a "trusted" app to remove all the bloat?
article link is 404 not found
Internet rot is a real thing.
Fixed
Thank you for this video. Because of it I ended up building my own install of Tiny11 rather than just trusting the internet.
agreed 💯 take the time to learn; and create your own iso. too many people want an instant quick fix with not effort!
This was a piss poor video. Had you just stuck to "custom ISOs can't be trusted, they may contain malware" it would've been fine. But the other points you mentioned were just crap. For example, if you're not going to trust NTDev's custom ISOs why the hell would you trust their custom tools to build the ISOs? It goes against everything you rambled on about. As for the "why isn't it on official sites?", that's purposely being deceptive because you already know the answer. You know Microsoft isn't putting these custom ISOs on any of their platforms, so why are you suggesting that they can be? For a random TH-camr that claims to have worked IT, you should know better.
Exactly my point, just another clickbait video, 'dont't use his iso but do use his tool to make your own lite version'.. yea sure IT expert Chris... Personally I've been using Ghost Spectre & ran multiple scans with antimalware/antiviruses + monitored the processes and none of them were consuming many resources in order to suspect them as being 'miners' or anything like that. + benchmark scores talk for themselves, way bigger than on vanilla windows. The devs of Ghost/Atlas for example are very nice & have no malicious intensions, Microsoft on the other hand DOES have malicious intentions by selling your data through telemetry and all that bullcrap. I don't think Chris is even capable of making something as good as Ghost, just saying.
@@redroom6695 I use windows xlite builds and they are really nice made by a really good person with a very nice website so in my view it depends where you go to get your custom builds of windows that can make all the difference for the user experience.
@@kevinsahm5577 Trustworthy sources is part of it. These custom versions are fine to use provided you take precautions and don't deviate because of laziness. I'd either use them in a Virtual Machine or on a completely separate PC that's not my main rig. As long as you don't log into personal accounts in these custom versions (i.e. email, banking), you should be in decent shape.
@@redroom6695 It's funny he brings up "trusting some random tuber" when he in fact is asking viewers to trust his word...the word of a random tuber. He can make any claim he wants, including his occupation, just to give an illusion of authority and keep people watching his videos.
Yeah, I agree while he has good intentions, he tells it like he doesnt know what he says, don't trust ISO but trust the tools, Im like wut? and the fact that he was asking for official site, well there is only official site and they are not giving it till next yr I think, yeah that doesnt like IT to me, sounds like sales rep.