Yeah, sometimes there just isn’t another option. I have a 60GiB Win11 VM for things I use every few months for a couple of minutes at a time
I’d recommend https://www.qemu.org/ for virtualisation
https://virt-manager.org/ for a gui to manage VMs, you can easily add or remove cores, memory, internet, directories etc really easily.
https://github.com/winfsp/winfsp lets you add a directory from your host to the VM to easily share files
https://github.com/virtio-win/virtio-win-guest-tools-installer makes the cursor seamlessly move between the VM and host instead of pressing ctrl alt g to escape.
Win11 23H2 still allows for offline set up. Just press shift f10 when you’re at the internet set up and type
oobe/bypassnro
The VM will reboot and give you the option to select I don’t have internet so you can just use a local account
https://github.com/Raphire/Win11Debloat/ for getting rid of the unwanted bloatware
Theres also an easy way to activate windows for free, I don’t think I can link it here but its on github and MAS-sive amount of people have starred it.
https://www.bleepingcomputer.com/news/security/genetics-firm-23andme-says-user-data-stolen-in-credential-stuffing-attack/
They can be linked to other online accounts. This allows for phishing, potentially scamming or getting additonal information on them which can lead to more sophisticated/personalised scams. Older, less tech savvy users are better targets for scammers.
Data aggregators can sell this info to Health Insurance Companies or any other system who can then discriminate based on genes sex age or location
Can contribute to people committing fraud with their information if they collect enough information from different sources.
Having enough information about a user to use it to target their now known relatives in personalised scams.
The people that did this probably didn’t know what information they were going to get, maybe they were hoping for payment info, and settled for trying to just sell what they got.
Any information, no matter how useless it might seem, is better than no information and enough useless information in the wrong hands can be very valuable.
Theres countless data breaches every year and people will collect it all and link different accounts from different breaches until they have enough information. Most people use the same email address for every website and a lot of people reuse the same passwords, which is how this data leak occurred. Knowing that these users reuse the same email/password combination here means theres a very good chance they’ve reused it elsewhere.
You can check out what data breeches have occured and if your email or password has been posted in any of these dumps here https://haveibeenpwned.com/
Once the information is out there, its out there for good and what might seem trivial now to you could be valuable tomorrow to someone else