Sorry Windows 10 Users...

Summary (technological concepts, features, and analysis)

• Premise of follow-up video: The speaker aims to address “hacking Windows 10 users that don’t update,” while stressing the importance of security updates and sharing lessons learned from testing.

Test environment used

• Target system: An older Windows 10 build (1607) installed with no updates.

• Tools and approach: Testing involved Metasploit and exploring multiple attack vectors.

• Specific exploit reference: The speaker references using Double Pulsar targeting Windows 10 1607, connected to the EternalBlue vulnerability chain.

Key finding: “not as easy as expected”

• Even though the target was a vulnerable, unpatched Windows 10 system, the speaker could not successfully compromise it during testing.
• A major factor was the speaker’s business-grade network and its defensive posture:
  • A router with deep packet inspection (DPI)
  • Threat blocking that affected port scanners and Metasploit activity
• They also disabled the Windows firewall to test whether that would allow exploitation, but the network posture still prevented successful exploitation.

Metasploit usability critique

• While Metasploit syntax and module setup can look straightforward (e.g., set options → check → attempt exploit), the speaker found that real-world exploitation is much harder than “script kiddie” expectations.
• The video’s point isn’t that exploits don’t exist—it’s that making them work reliably against real targets and secure networks requires more complexity than many assume.

Security guidance / “don’t panic” message

• The speaker walks back a previous, more alarming stance: staying on Windows 10 isn’t automatically “black and white” catastrophic risk if properly secured.
• They still recommend:
  • Continuing to apply security updates
  • Keeping systems on a secure network
  • Understanding that network defenses can drastically reduce exploitability
• The subtitles mention a “1-year free security updates” option for staying on Windows 10 (as claimed by the speaker).

Mitigation / alternatives discussed

• For users who want stability for legacy apps:
  • Use Windows 10 LTSC (the speaker claims it’s supportable “good for 2032” under their assumptions)
  • Avoid scenarios involving frequently updating SaaS/subscription software that may stop working
• For users who dislike Windows 11:
  • Consider Linux (the speaker says they switched from Windows 10 to Linux in 2018 and recommends trying it)

Overall conclusion / tone

• The speaker apologizes for prior alarm and frames the lesson as: exploitation attempts often fail due to the environment.
• The weak link is often not just the presence of vulnerabilities, but the gap “between the chair and the keyboard”—i.e., human and operational factors.

Main speakers / sources

• Primary speaker: A long-time sysadmin (self-described) with 25+ years in systems administration, security patching, and network defense.

• Tool/source referenced: Metasploit, plus exploit concepts tied to Double Pulsar and EternalBlue.