Top all-time · #4836
Helge Klein
Personal blog · helgeklein.com/blogsystemssecurity
Helge Klein's personal blog at helgeklein.com covers systems and security. Since 2012, 16 different Hacker News readers have linked it 17 times. It is still writing: the last post was on 2026-10-25, and you can follow it by feed.
Too few sampled comments (8) to say how often HN recommends it.?
Why HN links it
Helge Klein's Windows administration blog, linked for PowerShell criticism and notes on Windows encryption and tools. Commenters mostly cite posts as sources, and one calls his PowerShell article excellent.
Summarised by Claude from a sample of 8 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Tools & knowledge for IT pros
Most-linked posts?
- /blog/2015/01/how-to-enable-bitlocker-hardware-encryption-with-ssd/2 people · 2 mentions · first linked 2017-06-05
What Hacker News says?
In case you're wondering if this affects you (I know I was wondering) the relevant command to run is (in an elevated command prompt) `manage-bde -status <drive_letter>` Then look at the output for "Encryption Method". If it says something like "XTS-AES 128" I think that means you're using software encryption. If it mentions hardware encryption, then it's using it :) (more info. https://helgeklein.com/blog/2015/01/ho…
Comment linking /blog/2015/01/how-to-enable-bitlocker-hardware-encryption-with-ssd/
on “Self-encrypting deception: weaknesses in the encryption of solid state drives [pdf]”Submitted Windows OS, Services and Apps: Network Connection Target Hosts (2021) as a story · 289 points
HN discussionTo see how expectations were gradually reset, see this chart which also appears on the Wikipedia page for itanium. https://helgeklein.com/wp-content/uploads/2010/05/itanium-sa...
Comment linking /wp-content/uploads/2010/05/itanium-sales-forecasts1.png
on “The Itanic Has Sunk”Submitted Authelia and Lldap: Authentication, SSO, User Management for Home Networks as a story · 73 points
HN discussionHelge Klein wrote an excellent article "What I Hate About PowerShell": https://helgeklein.com/blog/2014/11/hate-powershell/ Be sure to read the comments where PowerShell guru Jeffrey Snover politely addresses them. I share many of these same frustrations that have prevented me from adopting it as a Windows scripting language. I use it when I have to, but I still will choose csharp compiled EXE's, vbscript, or even P…
Comment linking /blog/2014/11/hate-powershell/
on “Rumors of Cmd’s death have been greatly exaggerated”Submitted OwnCloud Infinite Scale with OpenID Connect Authentication as a story · 9 points
HN discussionYes. And with suitable hardware Bitlocker actually uses the SSD encryption which is anyways enabled, so there's zero performance hit. The drawback is that not all modern hardware supports it [1,2]. For example the Samsung 960 series do not support this. Since Apple controls the whole stack, I would assume they are also doing this, but I'm not sure. [1] https://technet.microsoft.com/en-us/library/hh831627(v=ws.11...…
Comment linking /blog/2015/01/how-to-enable-bitlocker-hardware-encryption-with-ssd/
on “Microsoft leak reveals new Windows 10 Workstation edition for power users”Submitted Standard Notes: A Note-Taking App with Client-Side Encryption as a story · 4 points
HN discussionHelge Klein, a long time Windows dev, summed up my complaints about using PowerShell as anything other than a nice shell that sorta feels like *nix: https://helgeklein.com/blog/2014/11/hate-powershell/ I still use CMD.exe, so please get off my lawn ;-) When I need the power of Powershell, I use C# (or even Python + Py2Exe if I'm deploying).
Comment linking /blog/2014/11/hate-powershell/
on “Linux and Powershell”Submitted How to Send Data from C# to Splunk via the REST API as a story · 2 points
HN discussionI want to set up something like this for my home network. The one thing missing that I'd also like is a way for users to log in to windows machines using these credentials. I understand that is also possible via Kerberos, but... Well, it takes some time to understand these things, me not doing a whole lot of sysadmin work ... It also seems the author has a more recent post about using Samba as an AD controller, and…
Comment linking /blog/samba-active-directory-in-a-docker-container-installation-guide/
on “Authelia and Lldap: Authentication, SSO, User Management for Home Networks”Submitted SetACL Studio: a management tool for Windows permissions as a story · 1 points
HN discussionhttp://helgeklein.com/setacl-studio/ (seems to do that; haven't used it, though)
Comment linking /setacl-studio/
on “Announcing the Windows 8 Editions”Submitted Why Disabling 8.3 DOS File Name Creation Will Not Improve Performance (2008) as a story · 1 points
HN discussionWindows 11* and MacOS also do the job as long as you're using hardware bound passkeys. * I don't want to speak past my own experience so checking my work, Windows can store passkeys in a TPM if available but falls back to storing on disk... https://helgeklein.com/blog/checking-windows-hello-for-busin...
Comment linking /blog/checking-windows-hello-for-business-whfb-key-storage-tpm-hardware-or-software/
on “Microsoft Edge stores all passwords in memory in clear text, even when unused”Submitted Total Commander: Getting Started as a story · 1 points
HN discussionSubmitted Access Based Enumeration on Windows 7 as a story · 1 points
HN discussion
