Helge Klein

Helge Klein wrote an excellent article "What I Hate About PowerShell": https://helgeklein.com/blog/2014/11/hate-powershell/ Be sure to read the comments where PowerShell guru Jeffrey Snover politely addresses them. I share many of these same frustrations that have prevented me from adopting it as a Windows scripting language. I use it when I have to, but I still will choose csharp compiled EXE's, vbscript, or even Py2Exe'd Python programs over PowerShell for sysadmin type tasks. I was in the audience at MS TechEd 2005 in Orlando and watched as Jeffrey Snover presented Monad and highlighted it's Perl, awk, sed, and unix influences. I was immediately impressed. However, PowerShell seems to best fit as a REPL shell, and for me, more mentally cumbersome than using csharp (which of course can technically do everything ps can). My gripes with PS are kind of minor (a bit like my dislike of Python's whitespace enforcement), but it's kind of like a death by a thousand annoyances with PowerShell for me. For example (stolen from Helge's article), these are some WTF's for me * Testing for string equality: "abc" -eq "abc" ( why isn't this "abc" == "abc" ) * Greater than: 8 -gt 6 ( why isn't this 8 > 6 ?) * Functions can only be used after being defined. Leading to scenarios where a script begins waaaay down at the bottom. * dynamic scoping: http://ig2600.blogspot.de/2010/01/powershell-is-dynamically-scoped-and… * No way to syntax check a PS script before it's…

Windows 11* and MacOS also do the job as long as you're using hardware bound passkeys. * I don't want to speak past my own experience so checking my work, Windows can store passkeys in a TPM if available but falls back to storing on disk... https://helgeklein.com/blog/checking-windows-hello-for-business-whfb-k…

I want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work ... It also seems the author has a more recent post about using Samba as an AD controller, and that would be an alternative to this setup right here: https://helgeklein.com/blog/samba-active-directory-in-a-docker-contain…

To see how expectations were gradually reset, see this chart which also appears on the Wikipedia page for itanium. https://helgeklein.com/wp-content/uploads/2010/05/itanium-sales-foreca…

In case you're wondering if this affects you (I know I was wondering) the relevant command to run is (in an elevated command prompt) `manage-bde -status <drive_letter>` Then look at the output for "Encryption Method". If it says something like "XTS-AES 128" I think that means you're using software encryption. If it mentions hardware encryption, then it's using it :) (more info. https://helgeklein.com/blog/2015/01/how-to-enable-bitlocker-hardware-e… FWIW on my Win 10 install with a Samsung PM871 it was set to software encryption.

Yes. And with suitable hardware Bitlocker actually uses the SSD encryption which is anyways enabled, so there's zero performance hit. The drawback is that not all modern hardware supports it [1,2]. For example the Samsung 960 series do not support this. Since Apple controls the whole stack, I would assume they are also doing this, but I'm not sure. [1] https://technet.microsoft.com/en-us/library/hh831627(v=ws.11).aspx [2]https://helgeklein.com/blog/2015/01/how-to-enable-bitlocker-hardware-e…

http://helgeklein.com/setacl-studio/ (seems to do that; haven't used it, though)