u/Prog44

I wouldn't be worried its part of chocolatey official repository. They check out packages before they are published. It just looks like a FP. Its not really part of chocolaty (its an unofficial package but its in their repo):

https://community.chocolatey.org/packages/choco-cleaner

but i would still feel safe. Its a dos batch file so just open it up with notepad or something like that and see what its doing.

Windows defender is fine for most people especially if you harden it:https://github.com/AndyFul/ConfigureDefender

especially if you not doing anything crazy like downloading pirated software or cracks.

I currently use bitdefender but not sure i will continue after the subscription is up.

Nothing is perfect buy running as standard user is part of a layered defense strategy. It will definitely help. There is malware that can be installed as a standard user & there is also privileged elevated execution flaws/bugs that have been found that defeat this protection but it but i still recommend it for the "average user". I'm not a windows fan (though i do have to use it) but do i run as a standard user? Absolutely not but i know what i'm doing and if i know if i should or shouldn't be receiving a UAC dialog.

This attack is very rare today....any site worth anything reputation wise should be using HSTS tokens which makes SSL striping attacks impossible and most sites don't allow access to their pages using http. If one is nervous about such attacks then just use something like "https everywhere" or brave has it by default. A VPN is a waist of money for this purpose.

You don't need a vpn. Just use a simple software firewall (both windows & macos have them) & congrads being accepted to med school. I only use a vpn for a couple of purposes. 1. to get around georestrictions 2. To *limit* my mobile provider and what data they can sell (most of them have been caught in the us from doing this).

It depends on what i had on such a device. Do I trust them with sensitive data....of course not as should no one else....but i would never need access to such a service because i do all my own repairs.

Try to do an offline scan with defender if that doesn't work then try something like norton power eraser or kaspersky virus removal tool.

"Kind Of". A lot of vpns these days do dns filtering for both ad & malicious links. For example NordVPN has something called "Threat Protection Light" that pretty much does this. At least for nord they have another version "Threat Protection" that does much more like file scanning (its only available for windows) but this doesn't get around the need for a good AV.

u/jinoxide u/pauby u/ferventcoder thanks...some great options to get around this issue.

Yep haven't had any problems...

Yep 100% agree. I'm no longer on android. It was one of the things that got me to switch over. I'm now on IOS and IMessage (of course) works 100% of the time and i don't have to rely on whoever i'm messaging having Android Messenger setup correctly. and on top of it there are my more people that i can use the niceties of IMessage with. There were only a few people i could use RCS with previously. Unfortunately my wife isn't going to switch over but I just use whatsapp with her.

u/Hatman_77 now its going to be a rant because Microsofts implementation down right sucks. Turning "password-free" off on your account doesn't do anything (i'm assuming the only thing this does is blocks you getting into your account with username/password but i didn't test it out). If you read my original post you will see i had it off.

Anyways this is essentially how it works. I had to do a bit of testing to figure this out. Any authentication method that Microsoft considers to be strong (Microsoft Authenticator, Yubikey (Fido2/UTF), Passkey, ect) will be Password-less whether you like it or not. Even after registering a passkey & yubikey i couldn't use them as a 2nd factor after I entered my username/password (i used to use either a txt or email). On the login screen you just choose to use either windows hello or a security key & as soon as you use your security key (or passkey) your logged in (& this is all with password-less logins disabled on your account). The only unanswered question that i didn't test out what if you have multiple accounts that you have registered with the yubikey? Maybe you get some type of dialog to see which account you want to use but i don't know.

If you go to your microsoft authenticator app & look at any microsoft account you registered you will see "Passwordless sign-in enabled" & there isn't anything you can do to disable it (i assuming its the same with android but since i don't have an android device i can't answer this).

IMO this actually diminishes security. It would be so easy to tap the wrong thing accidentally & boom someone else is in your account. All they need to do to fish you is to know your email addresses (or guess it).

Yubikey/Passkey probably isn't that big of an issue because they can't be used remotely.

How Microsoft implemented this is downright horrible. Its called 2nd factor for a reason. I use 2nd factor on every account i use & they do implementing it in a standard way that every other company has decided to implement it (enter your username/password & then your 2nd factor). While maybe this is Microsofts way of trying to push people off username/password i don't know but like i said i consider it with Microsoft Authenticator to be "less" secure.

Anyways if you still want to get around this issue what you can do is register your microsoft account with microsoft authenticator as an "Other" authenticator & then the problem is solved (or use another authenticator app like Google Authenticator, Authy, ect...)

Everything here is how it works for Microsoft "Personal" accounts. It might work totally different on Azure AD / Company Accounts. At least they could have gave you the option to turn this crappy password-less login off.

Its a question...i'm essentially asking how do i set it up correctly so i have to enter my username/password & then have to authenticate with my microsoft authenticator.

I don't remember one ever installing successfully. I got an error from my ipad just last night (like i said i don't remember the exact error message. They are both supposed to get 16.4.1. Lets do this as a test an ill let yo know what happens.

Hi there, my wife is a half/marathon runner, and they say: for most of my weekly running during my off season (3 times a week, mostly easy running) the SCD was manageable, I could go for my morning runs fasted or with a cup of coffee and then eat my slow carb breakfast (egg scramble with beans) and feel GOOD. But I would always have legumes after my run, a protein shake wouldn't do it. I've never really stuck with eating breakfast within 30 minutes wakeup time because I need a cup of coffee just to get out of bed lol

When I'm training for a long distance though? Like running 4-5 times a week, doing strength training + running etc, I fuel with simple carbs and don't follow the SCD exactly. My meals will be slow carb but my snacks during or before my runs will not be, because I do NOT want to be in ketosis, and I just watch my weight and adjust the number of snacks from there. Eating some fruit, a rice cake or half a bagel with peanut butter and banana, or a gel etc. has helped my performance, but I would only eat those on training days.

When I've tried to stick with SCD and train, I've fallen into ketosis even with legumes and crashed. In the Four Hour Body, Ferris designed this diet with the least amount of exercise (minimum viable dosage of exercise) for best results, he recommended kettlebell swings as far as any endurance/conditioning exercises and SOME strength training. In the chapters where he describes aerobic conditioning/running, he does not also prescribe the slow carb diet at the same time.

Thanks this was EXTREMELY helpful