Sadly not all Windows machines are able to use kernel DMA protection, so for those machines nothing will stop you.
The obvious next step is to disallow those elderly machines once a critical mass of users have modern-enough equipment. We're almost there.
alt Hacker News
The obvious next step is to disallow those elderly machines once a critical mass of users have modern-enough equipment. We're almost there.