Hacker News Reader

Comment by Santosh83 | Hacker News Reader

> I see some people are really annoyed that it isn't available for the Home version and I too am somewhat annoyed but in this case it is somewhat understandable since it depends on a feature that is (somewhat more reasonable) limited to Pro versions.

Hyper-V does function under the garb of 'Windows Hypervisor Platform' and 'Virtual Machine Platform' even under Windows 10 Home. I have it installed and it provides the virtualisation capabilities for Device Guard and Core Isolation/Memory Integrity.

Virtualbox from version 6 has been forced to fallback to Hyper-V when the latter is running, as it doesn't relinquish control to another virtualisation software.

So there is no reason why MS cannot implement Windows Sandbox even on Home since the underlying tech actually functions on all Windows editions, provided hardware support is there.

View on HN

> So there is no reason why MS cannot implement Windows Sandbox even on Home since the underlying tech actually functions on all Windows editions

By that logic Microsoft could also allow Windows 10 Home to run Active Directory. The reason there's a Pro/Home split is a commercial decision not a technical one, so trying to view it through a technical lens is faulty.

Regardless, if we want to talk about security features Windows 10 Home "should" have, let's talk AppLocker one of the most powerful security tools available. My computer illiterate relatives aren't going to be dropping into Sandbox to test potentially dangerous executable, but AppLocker could be set and forget, blocking execution of dangerous items.

The only thing Microsoft offers on Home is the highly self-serving "Allow apps from the store only." Which adds as many problems as it solves.

But your computer illeterate relatives wouldn't know how to set applocker in the first place, so it does fall within the realm of managed machines which is kind of what pro is for.

AppLocker isn't available on Pro either.

It should be turned on by default then with an override option, so that the average home user can't install stuff that'll bork the system without being warned. Just like SIP in OS X or Developer Mode on Chromebooks (although that's more extreme).

> By that logic Microsoft could also allow Windows 10 Home to run Active Directory. The reason there's a Pro/Home split is a commercial decision not a technical one, so trying to view it through a technical lens is faulty.

You misread the post.

eitland was saying that: 1) sandbox needs hyperv for technical reasons 2) hyperv is not in home for commercial reasons 3) therefore home can't have sandbox

Santosh83 wasn't trying to view the entire thing through a technical lens. Their post has an implicit understanding of the commercial argument when it comes to unlocking the full hyperv feature set. They were simply correcting the technical portion of someone else's argument.

Looks like you're singing the proprietary software blues. No worries, just spend more money. That solves everything on Windows.

When it comes to computers, there's never a silver bullet, not even money.

I digress. With the exception of biological disease there has never been a problem that more money couldn't solve. Whoever believes otherwise simply doesn't have enough money (or doesn't want to spend enough money) to accomplish what they're trying to do. Especially with computers.

Take a car wreck

How much money would it take to make volcanoes stop existing?

Technically it's free, if you wait long enough. If you wanted to be free of their influence then enough money to relocate into space or another planet without volcanoes. If you wanted to get rid of volcanoes on Earth then your best chances would likely be to try and slow the rotation of the Earth by sapping angular momentum, expensive and slow but it should work I think!

Reply on news.ycombinator.com