by default there's it's grayed out there's no option wait and sorry what's vbs uh virtualized based security if you go to  your windows NUMBER_TOKEN laptop it's already there or your windows NUMBER_TOKEN machine if it's a modern laptop and  you have you know your firmware tpm and all that other stuff you can turn that on by going to uh core isolation memory integrity that is the one switch that microsoft says you could that's an easy way to turn vbs into windows security and it basically creates a virtualized enclave in memory so important things that you don't want to have um easy to hack are more protected right and in fact there's a video that microsoft released yesterday uh it's david weston who's their security chief  he demonstrated how on a windows NUMBER_TOKEN device he was able to to bypass the fingerprint reader using a gummy bear and a dma a thunderbolt base basically a thunderbolt based attack and also he did an internet base you know basically once you turn on dbs and these other features it the the exact same things he's demonstrated in the video would not work on windows NUMBER_TOKEN. you have to have  it on though and the thing that drives me a little batty here is even if you're seeing like  oh my god NUMBER_TOKEN performance hit that ain't worth it well you can turn vbs off on those machines you don't have to run it so you don't have to worry in that front but then i'm like what's the point of cutting off all those old machines if you can turn off vbs and that was one of the reason rationales for having i i i'm so super confused by the more secure os but you can still turn it off kind of like you know it's wild i think i think you you also did uh testing of testing bbs with like uh browser-based benchmarks and office and stuff like that and you actually saw that once you go back beyond the supported cpu generations like once you start getting back in the fourth sixth gen chips like you're seeing some massive performance hits like NUMBER_TOKEN to NUMBER_TOKEN performance hits and office applications and stuff yeah so your testing i think shows that there is a reason that microsoft is making these cutoff lines to enable this feature but the fact that they let you turn it off is really a head scratcher for me yeah they're going to make that call like rip off the band-aid yeah no it's and and it is uh the feature of course is and back it's uh gosh it's escaping my brain right now but it's you know mode base exec good lord who knows what it is but you basically that was supported in hardware and kb lake and ford and ryzen NUMBER_TOKEN and ford they're very variation of it apparently and that is one of the reasons but the weird  thing of course is windows NUMBER_TOKEN is not allowed on kb lake and is not allowed on ryzen NUMBER_TOKEN right  who knows i will say that uh just anecdotal so you know i mean performance wasn't a big thing in in in my review but it's
NO_SEGMENT_TOKEN