I'm Switching Back to Windows?!
45sThe creator's confession about switching back to Windows sparks curiosity and debate among tech fans.
▶ Play Clip"Delivers on the promise of Windows surprises and Codex demo, but the title overhypes the 'switch' which is more of a trial."
The video is a sponsored exploration of the Windows ecosystem, focusing on OpenAI's Codex CLI app and its advanced sandbox security. The creator, a long-time Mac user, shares seven Windows surprises and demonstrates how Codex leverages Windows-native features for AI agent security, including a custom Rust-based sandbox and Hyper-V integration.
Over 60,000 responses to a poll about OS preferences; most respondents are on Windows, prompting the creator to make this video.
The video is sponsored by OpenAI. The creator promises to reveal seven surprising things about Windows.
The creator switched to Windows because AI tools were prioritizing Mac and Linux, leaving Windows users missing out. He notes that Copilot is 'hot garbage'.
SimCity had a bug in 2001 that Windows accommodated rather than forcing the developer to fix it. This demonstrates Windows' strong backward compatibility.
Codex is described as 'ChatGPT for power users', requiring a subscription. It is currently the 'golden child' of AI tools, even used by Peter Steinberger.
Codex supports sub-agents and plugins, allowing users to add tools like Chrome and run chats on a schedule. It can be used anywhere, not just on Windows.
The agent environment in Codex is Windows native, not a Linux container like WSL2. This is a departure from typical AI tooling.
By default, Codex uses PowerShell commands, making it deeply integrated with Windows. This is a shift from the usual Linux-based agents.
OpenAI built a custom sandbox to protect against AI agents erasing code or dropping data. On Mac/Linux, they use Seatbelt or bubblewrap, but on Windows they built their own.
OpenAI's sandbox is over 15,000 lines of Rust code, using Windows tools like file system ACLs. It runs as a VM on the same hypervisor as Azure.
The sandbox runs on Hyper-V, enabling data center-grade virtualization on Windows. This is a significant security feature.
The sandbox runs under a restricted synthetic identity (SID) with limited permissions, preventing the agent from accessing the rest of the system.
By default, the sandbox runs with no network access. Users can choose to allow network access, but it's restricted.
When the agent tries to use curl, the sandbox blocks it unless explicitly allowed. This demonstrates the security controls in place.
Users can configure the sandbox to block sketchy commands or allow specific actions, protecting the machine from the AI agent.
The sandbox has full rights within its designated directory but cannot access other folders, as shown with icacls.
Creating a folder with a specific name (like 'GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}') opens 250 Windows settings shortcuts.
Codex can use 'extra high thinking' and spawn multiple sub-agents to accomplish tasks, like cleaning up a desktop.
Winget is Windows' package manager, similar to Homebrew on Mac, allowing easy installation of software.
The creator asks Codex to spin up a Hyper-V-based hacking lab with Kali Linux and Ubuntu, demonstrating its capabilities.
Codex can create intentionally vulnerable apps for security testing, and it also cleaned up the desktop (though not aesthetically).
Codex can create automations to prevent Windows updates from reversing changes, showing its utility for system management.
Shaking a window minimizes all other windows, a handy multitasking feature.
The creator notes that Windows-native AI is becoming a trend, with other tools following suit.
The creator acknowledges Windows' past mistakes but wants Windows to be good again, hinting at a future deep dive.
The video showcases Windows' surprising strengths, particularly in AI agent security with Codex's sandbox, and highlights several hidden Windows features. The creator, despite being a Mac user, finds Windows enjoyable and plans to explore it further.
What is the name of the Windows package manager?
Winget
15:22
What does the 'GodMode' folder do?
It opens a folder with 250 Windows settings shortcuts.
13:48
What is the default network setting for Codex sandbox?
No network access.
10:33
What language is OpenAI's custom sandbox written in?
Rust, with over 15,000 lines of code.
07:36
What hypervisor does the Codex sandbox run on?
Hyper-V, the same hypervisor as Azure.
08:27
What is the name of the restricted identity used by the sandbox?
A synthetic SID (Security Identifier).
09:52
What Windows feature allows you to minimize all windows by shaking one?
Title bar window shake.
18:10
Backward Compatibility
Windows accommodated a 2001 SimCity bug, showing its commitment to backward compatibility.
03:08Custom Sandbox
OpenAI built a custom sandbox for Windows, highlighting the importance of AI agent security.
06:44Hyper-V Integration
Using Hyper-V brings data center-grade virtualization to consumer Windows.
08:27GodMode Folder
A simple folder name unlocks 250 settings shortcuts, a hidden gem for power users.
13:48Automations
Codex can create automations to prevent Windows updates from reverting changes, showcasing its utility.
17:41[00:00] Do not judge me. here, I also have a Windows PC and a KVM switcher We'll get to that here in a moment.
[00:15] app that everyone's freaking out about? And I was like, so what? But it turns out, you are.
[00:30] Over 60,000 responses, and guess what? So whether you are forced to be there because Most of you are on Windows.
[00:43] Okay. I'll make a video about it. And spoiler, it's all about a sandbox and security,
[00:57] AI agent security. I know. Like, miss it being awesome?
[01:09] And thanks to OpenAI for sponsoring this video actually pretty sick. I'm gonna drop seven things on you about Windows
[01:23] Windows in the past. Be looking for those. But before we dive in, I have a confession.
[01:37] And I know you kinda see me using it right now. There's this one app. It's Windows only, and I'm stuck like many of
[01:51] driver. So why did I switch? Those reasons are valid, but that's not my reason.
[02:03] Calm down. It's nostalgic. I don't care.
[02:15] OS. Admit it in the comments now. Like, has been a little nuts lately.
[02:27] switch was AI. and Linux, and they forgot about Windows. You're always missing something, and I was tired
[02:40] And, no, Copilot sucks. Hot garbage. So that brings us to the Codex app being Windows
[02:56] They went a little crazy. I also, over here, have my Windows Alienware
[03:08] Windows surprise number one. SimCity had a bug in its code that would not Instead of telling SimCity to fix their code,
[03:20] to accommodate it. An app made in 2001 can still run on Windows Let's go find Codex.
[03:34] There it is, and we will get it. What is that? ChatGPT for power users.
[03:48] subscription and use that. Codex right now is pretty much the golden child Peter Steinberger even uses it.
[04:01] Now right away, we're hit with something I'm Let's click on setup and see what happens. It launches UAC, and that was it.
[04:14] But first, just know whether you use this on Let me tell you why people care about this and Sub-agents.
[04:29] Let's add Chrome and superpowers. It's been that easy the whole time. are just part of the plugins.
[04:43] Run chats on a schedule. And if you don't use it on Windows, use it anywhere. it's my favorite way to code right now.
[04:56] Settings and then settings, and we'll scroll The agent environment is Windows native as opposed And that's Windows surprise number two.
[05:12] Windows subsystem for Linux. a while because it had Linux built in. That's shocking.
[05:24] in agent like most AI tooling does because it's little container. which to me, I don't know.
[05:39] the AI tools first started coming out, the only Just thinking about the agent running in Windows PowerShell.
[05:51] all of them live in PowerShell. which you do, you might be a Windows Sys admin controllers and Azure maybe.
[06:06] He's a local. Let's go to this project and say, how many files Watch what happens.
[06:18] By default, it's gonna be using PowerShell commands Codex isn't just visiting Windows anymore. He's a local.
[06:31] is way more integrated now. But this becomes extremely scary. deleted a developer's drive?
[06:44] Now, thankfully, this is where OpenAI focused he's stuck inside a sandbox. A sandbox is what AI companies use to protect
[06:59] Now on Mac and Linux, it kinda is. These are ready made solutions that enable companies that agent in.
[07:12] erasing your code base and dropping all your But here's the problem. tool like Seatbelt or bubblewrap.
[07:24] a Docker container or WSL2 to isolate the So OpenAI built their own.
[07:36] Over 15,000 lines of Rust code. Using all Windows tools like file system ACLs, get this confused with the Windows sandbox and
[07:49] The sandbox is a VM that will run on Windows The sandbox OpenAI built is running right there using, but it's built on top of existing Windows
[08:03] It's actually pretty fun. Oh, we can go deeper. Actually, I'm almost out.
[08:15] I almost fell. I'm not sure why I called it explosion. your Windows machine, the Windows you're running
[08:27] Running on the exact same hypervisor as Azure, enable Hyper V, just one setting, a thin type and you're running Windows is now the root partition.
[08:44] You have data center grade virtualization sitting Let's create a new project. Where's my documents?
[08:56] That's crazy. I'll call this folder clean my PC. I'm gonna right click this folder, open it in
[09:10] I'll just copy the entire path here to make Okay. We have a Codex sandbox sandbox users group.
[09:28] New project, existing folder, clean my PC. Tell me how many files are in this folder.
[09:40] Using the superpowers. Let's get back to our terminal. It looks like we have a new user, and this is
[09:52] actually a new SID. Right here in this diagram from OpenAI, this Right now, that sandbox is that folder, that
[10:07] Let me fix that. It's not using your user account. You ran Codex dot EXE, but the agent itself,
[10:19] That seems negative, but he can't get out unless We can actually see that in PowerShell. Codex gave to us, Codex sandbox online and Codex
[10:33] one for network access. By default, we're gonna be running the no network a restricted synthetic identity, SID, that has
[10:48] PowerShell, Python, Git, but that's it. that SID is still sitting there. go one directory up, no SID there.
[11:02] Did you know that Windows remembers your last Hit Windows key v. It remembered.
[11:15] It even syncs across Microsoft logged in accounts now, aren't we? I'll say, hey.
[11:29] curl is a tool that it will use to essentially Let's see what happens. Watch this.
[11:43] Oh, we're getting deep now. The sandbox user offline is being blocked. What happens when we say, yes, you can do this?
[11:57] this restricted token can't do it. plane saying, hey, got blocked help. Let's do it.
[12:09] command because we explicitly allowed that. to protect us from our AI agent. We actually have a few options for that.
[12:23] an AI agent to determine if certain things are in a directory, or it might block a sketchy
[12:35] your machine at all or your anything. I'm guilty of running that sometimes. Now let's say this.
[12:49] I want you to clean up my downloads folder. don't need to be there. though we're in the clean my PC sandbox.
[13:06] If icacls the downloads folder, the sandbox But now you see we're hit with a, question. something in that other directory.
[13:19] virtual box downloads and stuff. we created 30 coffee story files, and I'll launch delete the 30 story files.
[13:33] It has its full rights within that directory I mean, not crazy crazy. That's the sandbox at work.
[13:48] But before we do that, Windows surprise. a certain string, like, watch this. And we'll name it exactly this.
[14:04] Boom. If you open it, 250 Windows settings shortcuts On my Windows machine here, if I go to my start
[14:20] advertisements and all this stuff. I know that's a complaint. Let's go to extra high thinking now.
[14:32] And what the cool thing about, Codex, we can it'll keep working towards. Use as many sub-agents as you can to get this
[14:52] We'll change our permissions to auto review. bit saying, hey. queued and waiting for him to finish.
[15:06] Clean up my desktop. Make it look nice. I'm getting lazy here.
[15:22] Another Windows treasure. Mac has brew. Almost forgot there for a moment.
[15:35] It's a real thing. I'm not even sure if it can do this. Call this hacking project.
[15:48] And say, want you to spin up a Hyper-V based hacking lab with Kali Linux and Ubuntu. This is for my study on just this machine.
[16:03] Let's see what he did. He did not do a good job. Oh, my organized desktop is right here.
[16:16] Say, like, arrange the icons in a pleasing way. I noticed it's actually checking my Windows
[16:28] That would be dicey. that just checking it's not crazy. Oh, which network isolation do I want?
[16:44] The defender and Codex are fighting. No. Leave me alone.
[16:57] No. I'll let this guy cook, and he did his job. Like, I can actually go in there and try to
[17:12] It's an intentionally vulnerable app, but it It also finally cleaned up my desktop, kind It's not much for desktop aesthetics.
[17:28] Clean. And I could do this because, you know, Windows things you that you do.
[17:41] Let's create a Codex automation that will prevent Windows updates from reversing our changes. Get out of here, water.
[17:57] the app, are these automations. It'll run how often did it say? Sick.
[18:10] Another Windows secret. I'm sorry. You just shake it, and everything goes away.
[18:23] They're supposed to come back. It's kinda neat. System multitasking, title bar window shake.
[18:36] Windows native is becoming a thing. others are following. And, honestly, just making this video and playing
[18:49] settings and playing with a firewall. I do. They make some really weird and, honestly, bad
[19:02] They made an apology. And despite everyone trying to move to Linux series to try and do it.
[19:16] But I want Windows to be good again. e even 10 was good. But, you know, I'm not quite ready to switch
[19:31] I will dive deep. Then maybe I'll feel good about moving my Mac Because, honestly, I I enjoy this more, Windows,
[19:44] I Let me know. And by the way, have you hacked YouTube today? You gotta hack YouTube today, ethically, of
[19:58] I'll catch you guys next time. A little bit left. If you're new here, I like to pray for you at
[20:12] I do honestly believe in the power of prayer, So for me, the best way I can love you and show
[20:24] So if you don't mind, I'm just gonna do it right One two three, pray. side of this screen.
[20:36] excited about technology, that they're potentially trying to figure out how to work AI. Wherever they're at right now, give them clarity.
[20:49] If there's any confusion about their jobs or Let it be revealed to them right now. anxiety, but give them hope.
[21:04] Let them let them be relentlessly optimistic. Strengthen their families and encourage them.
[21:16] now to be a source of encouragement to their Help them to, balance their time well between also spending very intentional focused time
[21:32] just going through a hard time, any kind of God, be with them and and heal them, God, in Jesus, we thank you for everything.
[21:48] Thanks for letting me do that. I'll catch you guys next time.
⚡ Saved you 0h 21m reading this? Transcribe any YouTube video for free — no signup needed.