MarionWheeler

According to their docs it’s E2EE:

When your device is locked with a passcode, Touch ID, or Face ID, all of your health and fitness data in the Health app — other than your Medical ID — is encrypted and inaccessible by default. Additionally, if you are using iOS 12 or later and turn on two-factor authentication, Apple will not be able to read your health and activity data synced to iCloud.

https://www.apple.com/legal/privacy/data/en/health-app/

Isn't health data stored locally?

I’ve used various flavors of Ubuntu in the past on an old laptop of mine, it worked pretty well. However I don’t use it on my current device simply because the hardware support is kind of bad (no fingerprint sensor, terrible battery life, firmware updates aren’t easily delivered over fwupd, poor sleep support are the ones I can think off of the top of my head). Compared to windows where most of this just works. My current device also isn’t so old (bought it late 2021), so it runs Windows 11 perfectly fine. I use enterprise + a bunch of group policies to knock out telemetry, and winget to kill bloatware. There’s also the security aspect, as I do wanna take advantage of stuff such as Windows better secure boot support as well as WDAC to lock things down.

Isn't it being maintained by literally the same guy?

Well when there’s a useful security feature, I’m interested in using group policies to enable it heh.

Honestly, AO3 is pretty based for what it is, especially when you consider how the two main competitors (FFN and Wattpad) are ad driven with all the problems that entails. Tho come to think of it, now I’m getting worried about FFN getting enshittified…

I don't really care about Windows copilot, so long as there's an easy group policy to disable it.

Yes, because then it would be possible to MITM the connection and verify their claim.

There‘s also an accessibility benefit admittedly.

AtlasOS is not designed with security in mind. It's only after everyone criticized them that they added back stuff such as Windows Update and UAC.

While I can see what the author was going for, I still don't think it's worth it to give yet another third party app admin access in order to make managing settings slightly easier.

That’s not how it works, actually. Its more sophisticated.

How does it work then?

And no, it is more robust than that. This tool doesn’t lead to breakage. IT admins use this tool.

A sysadmin would usually use group policies to manage settings and install apps automatically, especially since they would likely be using Windows Pro or Enterprise in a work environment.

This is…not the best idea, imo. If I had to guess, I would say that it is attempting to disable diagnostic data by setting a registry key — only on Windows Home or Pro, that’s ineffective and doesn’t have any extra benefit compared to just disabling optional telemetry in the settings app. It also seems to pointlessly duplicate things the user already has control of (why does there need to be a toggle for Hyper V and Windows Subsystem Linux?) Last I checked they were pretty simple enough to turn on and off in the base system. Same goes for stuff such as Location Tracking and Activity History, which I’m fairly sure are literally already in the privacy settings.

Attempting to do large scale “debloating” will inevitably lead to system breakage and things not working. Start Menu shortcuts? They’re one click away from being uninstalled. OEM Bloat such as random third party antiviruses? You should be doing a clean install to get rid of those. Apps such as Cortana? winget uninstall. You also don’t need a third party program to manage your app updates, that’s literally what winget upgrade --all is for.