Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MS Windows Defender and DeCSS

arch13.com

Post reply on HN
Print view View original

71–80 of 211 posts

Re: MS Windows Defender and DeCSS

#71

Post by nix23 »

foepys wrote: post #62
Fiahil wrote: post #52

I'm so happy to see a thread on Windows Defender, because my org recently switched antivirus software and I can't wait to tell you how bad it is ! There's a hidden feature in Defender, that will delight any user : it can turn your 15" MacBook Pro into a full breakfast machine. Want pancakes ? Start a zoom call. While you wait for your favorite video conference app to start, don't hope to finish your docker pull/save/…

We are using Defender at work, too. There is a group policy that lets Defender do a full system scan once a week. To not interfere with the user there allegedly is a group policy setting to limit the CPU usage and it is set to 15%. The thing is, it simply does not work. Every week my fans spin up to max, Defender hogs all my CPU cores, 25% of my GPU according to the Task Manager. Even typing becomes laggy. The only w…

Wait...your are local Admin on your machine?

Re: MS Windows Defender and DeCSS

#72

Post by novok »

nix23 wrote: post #68
Fiahil wrote: post #52

I'm so happy to see a thread on Windows Defender, because my org recently switched antivirus software and I can't wait to tell you how bad it is ! There's a hidden feature in Defender, that will delight any user : it can turn your 15" MacBook Pro into a full breakfast machine. Want pancakes ? Start a zoom call. While you wait for your favorite video conference app to start, don't hope to finish your docker pull/save/…

Oh man....a mac with antivirus software...is your IT's mindset from the 90s?

You'd be surprised about how many high profile silicon valley companies use similar software such as crowdstrike or carbon black.

It's a scourge.

Re: MS Windows Defender and DeCSS

#73

Post by nix23 »

kmonsen wrote: post #70
nix23 wrote: post #68

Earlier quoted context omitted.

Oh man....a mac with antivirus software...is your IT's mindset from the 90s?

Google, Amazon and Facebook do that as well (at least if you include Santa as antivirus).

No Santa is the right way to do it (whitelisting binary's), that's the opposite of an antivirus.

Re: MS Windows Defender and DeCSS

#74

Post by kmonsen »

john_moscow wrote: post #9

To be fair, this does look like a false positive. In general, the desktop antivirus space in 2021 is a mess. Because of the sheer number of malware, and some obfuscation techniques used by some of it, antivirus software has to use very broad regular expressions for describing the malware, counterbalanced by huge whitelists of known mainstream software. If you don't qualify as a "mainstream software vendor", simply bu…

The thing is, malware vendors can do the same. At least for zero day attacks you just test them on the target’s antivirus to make sure it will not discover the malware.

Re: MS Windows Defender and DeCSS

#75

Post by dirkf »

nix23 wrote: post #68
Fiahil wrote: post #52

I'm so happy to see a thread on Windows Defender, because my org recently switched antivirus software and I can't wait to tell you how bad it is ! There's a hidden feature in Defender, that will delight any user : it can turn your 15" MacBook Pro into a full breakfast machine. Want pancakes ? Start a zoom call. While you wait for your favorite video conference app to start, don't hope to finish your docker pull/save/…

Oh man....a mac with antivirus software...is your IT's mindset from the 90s?

We even have McAfee on our Linux machines... And yes, doing a build is impacted by this...

Re: MS Windows Defender and DeCSS

#76

Post by gspr »

nix23 wrote: post #71
foepys wrote: post #62

Earlier quoted context omitted.

We are using Defender at work, too. There is a group policy that lets Defender do a full system scan once a week. To not interfere with the user there allegedly is a group policy setting to limit the CPU usage and it is set to 15%. The thing is, it simply does not work. Every week my fans spin up to max, Defender hogs all my CPU cores, 25% of my GPU according to the Task Manager. Even typing becomes laggy. The only w…

Wait...your are local Admin on your machine?

I'd quit my job if work didn't let me be root on my work machine.

Re: MS Windows Defender and DeCSS

#77

Post by nix23 »

dirkf wrote: post #75
nix23 wrote: post #68

Earlier quoted context omitted.

Oh man....a mac with antivirus software...is your IT's mindset from the 90s?

We even have McAfee on our Linux machines... And yes, doing a build is impacted by this...

Holy caracho!! I understand if you have it on a file-server (bad rep if you send a MS-Word-Macrovirus to a Customer) but on a linux build server?? That's just madness!

Re: MS Windows Defender and DeCSS

#78

Post by xmodem »

novok wrote: post #72
nix23 wrote: post #68

Earlier quoted context omitted.

Oh man....a mac with antivirus software...is your IT's mindset from the 90s?

You'd be surprised about how many high profile silicon valley companies use similar software such as crowdstrike or carbon black. It's a scourge.

My work mac has both Carbon Black and FireEye. It takes 30% longer to do a large build of an open source project than my personal laptopk, despite having 2 more cores and twice the RAM.

Re: MS Windows Defender and DeCSS

#79

Post by Macha »

novok wrote: post #72
nix23 wrote: post #68

Earlier quoted context omitted.

Oh man....a mac with antivirus software...is your IT's mindset from the 90s?

You'd be surprised about how many high profile silicon valley companies use similar software such as crowdstrike or carbon black. It's a scourge.

Unfortunately many big customers insist on it as part of security questionaires and depending on who audits your compliance with certain security standards, they may insist it's required too.

Re: MS Windows Defender and DeCSS

#80

Post by nix23 »

gspr wrote: post #76
nix23 wrote: post #71

Earlier quoted context omitted.

Wait...your are local Admin on your machine?

I'd quit my job if work didn't let me be root on my work machine.

That's exactly the one single reason why no one should give a developer a Windows machine in a enterprise environment ;)
Post reply on HN