Company offers unofficial security patches for Windows 10 until 2030

I suspect as people start realising that the majority of these security patches are for bugs in things they never wanted nor needed on their system[1] or outside their threat model and thus present only to make their lives worse, thirdparty services like these will become more popular. Especially when they see what Win11 has become.<p>There have long been communities providing unofficial contributions (including drivers for newer hardware) for MS OSes going back to DOS, and their existence has always seemed to puzzle the FOSS advocates.<p>[1]<a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=28449607">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=28449607</a>

If anyone is exploring options, Windows 10 IoT LTSC has official support till 2032. Added benefit is that it doesnt come with preloaded bloatware from MS.<p>I have recently installed W11 IoT LTSC on a 3rd gen Intel, the TPM requirement in this version is optional.

I&#x27;m guessing 0Patch doesn&#x27;t have access to source - does anyone know what method they&#x27;re using to provide said patches?

I suspect that these patches frequently do not fix the security bug. Basically, if you care about security, you should use software supported by the vender, or open-source team which produces the software.

Guarantee that&#x27;s going to void your support contract with MS if you have one (or worse).<p>I also cant imagine any win 10 software not working on 11. It&#x27;s not that different under the hood. You&#x27;ve also had plenty of time to test with your vendors. And yes, legacy niche software blah blah, been there done that, but win 10 -&gt; 11 isn&#x27;t like XP -&gt; vista. It&#x27;s like win 10 to 10.5.<p>Terrible idea on a number of levels. Best of luck to anyone who tries it.

As a Windows 10 user who hates the idea of installing Windows 11 and its AI and Microsoft-Edge bullshit, I like the idea, but what I&#x27;m worried about is the existence of a free and paid tier. What if the company (which seems to be for-profit) starts pressuring users to upgrade to the paid tier by limiting what sorts of updates they provide, e.g., only doing the &#x27;most important&#x27; ones, leaving users who can&#x27;t afford to pay in the lurch?

A strategy that was used in my industry to address obsolescence like this was to embrace whitelisting software and a least function mentality.