Bonum Certa Men Certa

Windows Vista Service Pack '11' Will Have “Virtualization Based Security” Theater That Slows Down Games Almost 30% and Enables Security Vulnerabilities on Intel Tiger Lake CPUs (Probably Others Too)

Guest post by Ryan, reprinted with permission from the original

Windows 11 will have “virtualization based security” theater that slows down games almost 30% and enables security vulnerabilities on Intel Tiger Lake CPUs (probably others).



According to PC Gamer, “Microsoft ‘will be enabling VBS on most new PCs over this next year’ and that can tank PC gaming performance by around 25%.”.



"Nothing Microsoft has ever done has slowed them down for long, and I suspect your svchost will still be svchosting malware in short order."Where VBS is “Virtualization Based Security”. (Not to be confused with Visual Basic Scripting, which was their scripting language, and what the Melissa and I Love You viruses, along with countless others were written in.)



The interesting facts about VBS (the “security” thing, not the virus scripting language) is that it is designed to wall off “critical parts” of the Windows OS so that it’s harder for malware to inject malicious code into them. But I wouldn’t count out those industrious malware authors. Nothing Microsoft has ever done has slowed them down for long, and I suspect your svchost will still be svchosting malware in short order.



What it does do is cripple performance, at least gaming. Could be one reason why my games run so much better in Wine on Debian 11.



I had turned “VBS” on when I had Windows because it’s in Windows 10, and it didn’t mention anything about performance problems.



To get it to even turn on at all required uninstalling a useless incompatible driver meant for Windows 8 that Windows 10 had brought in from the manufacturer of my old WD EasyStore drive.



"So to enable VBS “security”, you have to make your system impossible to secure against a speculative execution attack, and then in exchange for this, you get to slow your video games down 28%. Wow, sign me up!"So it appears that pretty much all an attacker needs to do in order to shut it off is manage to get a driver that’s written for an earlier version of Windows installed somehow, which shouldn’t be difficult, and then at least in Windows 10 it’s gone and you don’t get an alert(?).



Also, buried in the details are that since this thing relies on Microsoft HyperV, it will stop other virtualization software from running correctly.



And if you look in the Event Viewer (sorry, I didn’t take a picture, I should have), you’ll see that Windows lists CVE numbers belonging to Spectre attacks that it isn’t mitigating because they want the “Hypervisor” to perform well and don’t want to get in the way of Intel’s Hyperthreading, which is being used to speed up HyperV, which is running VBS.



So to enable VBS “security”, you have to make your system impossible to secure against a speculative execution attack, and then in exchange for this, you get to slow your video games down 28%. Wow, sign me up!



“While we are not requiring VBS when upgrading to Windows 11,” explains the post, “we believe the security benefits it offers are so important that we wanted the minimum system requirements to ensure that every PC running Windows 11 can meet the same security the DoD relies on. 

Microsoft


It’s amazing what money can buy. Microsoft bought a Pentagon. Former President Trump was about to hand them “JEDI” to put in their Azure Clown, which has caused so many security disasters for other organizations that we don’t have all day for me to list them.



"Microsoft bribes and “lobbying” got the government to ditch them and weaken them so that Windows could get government contracts."In the 1980s and 1990s, there were these security standards that the US government still used called the Rainbow Books, which pretty much only a UNIX system could provide. Microsoft bribes and “lobbying” got the government to ditch them and weaken them so that Windows could get government contracts.



Then in exchange for bringing Windows in, we got the “smart ship” stuck at port due to a Windows NT crash, worm mess on Windows 2000 and XP (which didn’t even enable the software firewall in the first release and logged everyone in as Administrator or apps broke, and had raw sockets for normal users), Vista LULZ (and their current operating systems are still basically Vista service packs), and everything else that Windows has brought with it but to name a few.



It’s time to bring real standards back to computing.



Microsoft is better at public corruption than they are with security, as you can no doubt see.

Recent Techrights' Posts

Tentative Summary of Things to Publish in Project 2030
I'll still be in my forties by then
Rust People: Drain the Swap, You're Holding It Wrong
Does Rust make sense?
Slopwatch: LinuxSecurity, linuxconfig.org, and Plagiarised Phoronix
Many articles out there are nowadays fake
 
Gemini Links 20/09/2025: Snowy Photos and utism is a Spectrum
Links for the day
Microsoft-Sponsored Xenophobia and Nationalism
IBM is very similar in this regard
Vintage is Sometimes Better
Why can't we get back to "simple" if (or where) "simple" means better?
Climate Breakdown Means We'll be Publishing More, Not Less
Press freedom will be a common, recurring theme
Our 5-Year Geminispace Anniversary is Coming Up
I still remember when Gemini Protocol was quite new
It's Right to Point Out Violence From the Right
Violence is a recurring theme
Web Browsers That "Do Hey Hi" (AI)
State-of-the-art plagiarism or "autocomplete on steroids" (not coined by us, nevertheless a nice description) don't have much/any prospect
Links 20/09/2025: Hardware Projects in View, Some Independent Publishers About Russia Prosper After Cheeto Cuts Funding
Links for the day
Gemini Links 20/09/2025: Options and TV Time Machine
Links for the day
Links 20/09/2025: Retrocomputer, Antique Phone Experience, and More
Links for the day
Links 20/09/2025: Internet Shutdowns, Media Censorship, and Climate Worries
Links for the day
About 700 New Gemini Capsules in 13 Months (or 54 Per Month)
4.8K would represent a 20% increase
Techrights the Name Turns 15
About 6 weeks from now we turn 19
Microsoft is Running Out of Time and Floating Fake Figures, Fake Projects, Fake Narratives, Fake Excuses
Also, a lot of Microsoft's "revenue" claims are circular financing (i.e. Microsoft buying from itself, which means Ponzi-like fraud)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 19, 2025
IRC logs for Friday, September 19, 2025
Gemini Links 20/09/2025: Navigating the Pressures of Modern Life and SpellBinding Accidentally Wrote Another Gemini Server
Links for the day
Links 19/09/2025: Press Freedom Dying in US, Anti-Austerity Strikes in France, and Alan Rusbridger to Leave 'Prospect'
Links for the day
European Patent Office Illegally Gutting and Outsourcing Its Functions, Acting Like an Above-the-Law Commercial Business (It Won't Stop at Formalities Officers (FOs) and Classification Slop at the EPO)
breaking/violating laws and conventions
Offloading to the Sister Site
In the interest of not overwhelming readers
Links 19/09/2025: Coffee Club and "SpellBinding is Now Absurdly Fast"
Links for the day
Links 19/09/2025: Lobbyist of American GAFAM Becomes Data Protection Commissioner in Europe
Links for the day
Links 19/09/2025: Media Freedom Ceases to Exist in US, "Consider Dropping Twitter/X"
Links for the day
Gemini Links 19/09/2025: Thinking and Insect Bites
Links for the day
Microsoft E.E.E.: Git Will Now (or Very Soon) Fully Depend on Rust, Which is Controlled by Microsoft
Microsoft now makes Git dependent on Rust, or making Git dependent on GitHub, which is proprietary
The Right to Punch People (Apparently)
At Brett Wilson, Brett's job title is "Head of Crime" and Wilson normalises calls for violence
Slop or Fake Articles Have Turned Linux Journal From a Pioneering/Trailblazing "Linux" Magazine Into a Nuisance
some sites with former reputation - good reputation - turn into cesspools
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 18, 2025
IRC logs for Thursday, September 18, 2025
Brett Wilson LLP Seem to Have Had Only One Litigation Client in 2025, He Was Previously Charged, Just Like the Serial Strangler From Microsoft (Whom They Now Represent)
Karma is superstition, regulators are not
Project 2030 to Cover How "Project 2025"-Styled Anti-Media Zealots From America Targeted Techrights and Tux Machines
The common denominator is also their attacks on women
Brett Wilson LLP Failed to Meet Deadlines Set by Judge 7 Months Earlier, Tried to Ruin Our Holiday, Then Had the Audacity to Ask Us for Over 3,000 Pounds for Its Own Lateness
As a matter of principle we will never respond to assassin while we are on holiday
On Claims That After Bluewashing Red Hat Will Increasingly Become an Indian Company
Discussed this week (long and detailed)
Americans Attacking British Sites Only Months After They Leave America
We find it kind of funny if not ironic that this site, originally an American site, got legal harassment only from Americans and only months after it had moved to the UK
Despite Losing Over a Quarter Million Dollars a Year Software in the Public Interest (SPI) Gives Helping Hand to Libreboot
SPI's financial state depends a lot on its public image or its reputation
Slopwatch: Google Helps Plagiarism and Sends Traffic to Ripoff Artists
That Google as a company helps spamfarms is noteworthy
If You Want to Know the Future, Listen to the Free Software Foundation (FSF) and Andy Farnell
We're sure the FSF will have plenty of its own output
Links 18/09/2025: A Taliban Ban on Internet Access and Troubled US Job Market
Links for the day
Gemini Links 18/09/2025: Computer Literacy and Accessing Alhena's Database
Links for the day
Links 18/09/2025: US War on Media (Truth Banned, Cancel Culture by the Hard Right), NYT Chief Executive Warns Cheeto is Deploying ‘Anti-press Playbook'
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 17, 2025
IRC logs for Wednesday, September 17, 2025