- Microsoft is rolling out a new security feature for Windows 11
- Memory integrity provides stronger defenses for a crucial part of the operating system, and it’s being automatically enabled
- Some gamers say the feature hampers gaming frame rates considerably, and they’re not happy
Windows 11 is getting its security bolstered with a feature that’s being automatically enabled, but which comes at a cost that some PC gamers don’t want to pay — and this is proving quite the controversy on social media.
The Verge reports that Microsoft has announced that it’s rolling out the enablement of memory integrity protection across eligible Windows 11 PCs, and that this is because “security works best when protection is built in, not bolted on”.
Microsoft explains: “More devices will soon receive stronger protection by default, with no additional setup required. Windows quality updates will begin enabling memory integrity protection on eligible devices.
Latest Videos FromTechRadar
“If not already enabled, these updates will also enable VBS [Virtualization Based Security], helping make additional security capabilities available and reflecting our commitment to making Windows secure by design and secure by default.”
The idea is to tighten security for Windows 11’s kernel-mode drivers, a core aspect of the OS with direct access to the system’s hardware, and there can be no argument that this additional protection gives host PCs tougher defenses and makes them more difficult to exploit. So why the controversy? Let’s dive into the pros and cons of what’s going on here.
Analysis: a divisive move — but we can’t ignore that the threat landscape is changing
In Microsoft’s view, this is a no-brainer: stronger security is being rolled out to Windows 11 devices, or at least those which are eligible (older PCs may not be). However, PCs configured via group policy not to use memory integrity, or machines where it’s been disabled before, won’t have the feature forced on them.
Other supported PCs will get memory integrity (and VBS, because it’s required for memory integrity) turned on automatically by Windows 11, and this is where some gamers are up in arms. VBS has a long history of being a thorn in the side for gamers, with the feature being linked to frame rate losses.
How much of a headwind does this cause for PC games? Well, therein lies a big part of the issue, because it’s difficult to pin that down exactly, and as ever, it’s bound to vary depending on your PC’s exact hardware and system configuration.
Some gamers observe frame rate hits of approaching 10%, while others say the impact isn’t noticeable at all. There’s a lot of back-and-forth on Reddit arguing about the extent of any slowdown, and here’s a typical exchange:
One Redditor notes: “HVCI [memory integrity] is a great security feature, and the performance impact on newer platforms (to which this automatic switch will apply) is negligible.”
Another replies: “It ain’t negligible. 9800x3d, 5080, ddr5 6000 cl28 and my 1% lows get wrecked with this feature on. Way smoother disabled.”
This isn’t just about frames per second performance for some gamers, then, as there are also accusations of it affecting the lowest troughs (bottom 1%) that the frame rate hits (meaning the game suffers more stuttering at times and generally feels jerkier).
As the first comment points out, though, the likelihood should be that a more modern PC won’t feel much of a hit (if anything). The gaming rigs that might see more of a spanner in the frame rate works are those which are older, but still modern enough to get the auto-enablement of memory integrity. In other words, a collection of PCs which are on the outer fringes of that compatibility limit (older machines, but not too old to avoid the feature rollout).
Of course, even those PC owners can always turn off memory integrity. The major beef for some is that they remember that Microsoft got into trouble for automatically switching on VBS in the past in a quiet, under-the-radar manner — and the question now will be whether gamers realize that this feature has been enabled alongside memory integrity.
In all honesty, when I saw what Microsoft was doing here and fired up Reddit to test the temperature of the reactions, I was expecting nothing short of a flamethrower being turned on the software giant. However, the feedback is split quite evenly between the haters — or those who disapprove at least — and users who are applauding Microsoft for this deployment.
Here are a couple of further examples from either side of the fence: “Apparently a controversial opinion, but systems that are for everyone should be failsafe, and that includes the most secure option being the default. There should be an option to disable security to get higher performance, but most secure should be the default.”
Juxtaposed with this: “Already have memory integrity turned off as this ‘feature’ already hits gaming, I’ve used Windows without memory integrity for decades I think I’ll be ok.”
I must admit I’m inclined to agree with Microsoft’s decision here — providing that when it happens, Windows 11 is clear on informing the user, so they can reverse the change if they aren’t happy with it.
I think part of what Microsoft is doing here is keeping one eye on the future in terms of the difference AI might make to the security of Windows 11 PCs.
I keep hearing about how AI is already driving new threats and exploits, and so the kernel defenses that are being brought into play here may not have been quite as necessary in the past — as the last Reddit post I highlighted indicates — but they may be very much needed before too long. AI is accelerating the development of new threats considerably, and making it easier for anyone to becoming a peddler of malware, so Microsoft likely feels the pressure to act.
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.
The best laptops for all budgets
