Live data from Hacker News

Firefox engineers discover a Windows Defender bug that causes high CPU usage

bugzilla.mozilla.org

121–130 of 223 posts

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#121
post #89
post #82

Earlier quoted context omitted.

Teeny tiny multiplied by 7 Billion by 365 days per year by 24 hours per day by a fraction of a kW does add up.

7B people are not watching youtube on Firefox 24/7 365 days a year.

Correct. Some teeny tiny fraction of market share is. For the conceptual calculation, I refer you to my earlier comment.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#122

Earlier quoted context omitted.

Isn't this more a failing of the operator: using a consumer grade OS for an industrial case?

I cringe whenever I see a BSOD or other usage of Windows on appliances in public. There are such better options available.

>There are such better options available.

Meh, I see Ubuntu black screens in public appliances as well.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#123

Earlier quoted context omitted.

Funny how that sort of thing can work out. I was involved in an industrial optimization company years ago. Microsoft came out with power-save features in their new release. The staff at a metal-recycling company we were installing at, started complaining that the furnace would stop optimizing overnight. We investigated. The controller computer would go into power-save mode, which suspended our control app. So the fur…

> It would literally have been better if they'd never invented power save mode. Only if you considered the purpose of power-saving mode to reduce total energy usage, vs to reduce amount of power (and consequent wear & tear) an individual machine uses. However that MS would release a feature like that which automatically kicks in on upgrade without any sort of consideration of what the machine was used for - it could…

> it could be running life-support systems!

Life support systems don't run windows. And if you're running consumer windows on anything critical, you fucked up.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#124
post #66
post #35

Earlier quoted context omitted.

Well, also Firefox is making an excessive number of calls to that slow system call compared to other browsers (Chrome, Edge).

My understanding is that until recently (January), V8 (inside Chrome & Edge) made a similar number of calls. The main use is making it so that JIT-generated code is not writable while it is executing. It's an important security measure. V8 switched to a more recent mechanism (memory protection keys) that have been gradually getting support from the various OSes. But IIUC, they switched off the mprotect/VirtualProtect…

pkeys are hardware-specific as far as I am aware, and at least last time I tried them didn't work on hardware as recent as zen 1.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#125
post #85

Earlier quoted context omitted.

I have malwarebytes premium and defender CPU usage is nearly 100% at times bringin Firefox to a halt. Chrome works fine..I've been blaming Firefox so far.

In my experience (as a former Firefox dev), antivirus / antimalware software are really poorly behaved. They tend to: - require admin rights (which means that if they have vulnerabilities, it can take control of the entire machine, even if Firefox itself is sanboxed); - monkey-patch the Firefox executable in memory, which works (when it does) as long as the version of the software tracks closely the version of Firefo…

I had always assumed that one application could not touch the memory of another application. Does running as Admin allow breaking this boundary?

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#126
post #85

Earlier quoted context omitted.

In my experience (as a former Firefox dev), antivirus / antimalware software are really poorly behaved. They tend to: - require admin rights (which means that if they have vulnerabilities, it can take control of the entire machine, even if Firefox itself is sanboxed); - monkey-patch the Firefox executable in memory, which works (when it does) as long as the version of the software tracks closely the version of Firefo…

I had always assumed that one application could not touch the memory of another application. Does running as Admin allow breaking this boundary?

This is wrong, on Windows there are system calls to access memory of other process and on Linux you can do it using debugging. Also on Windows there is a tradition to inject libraries into other processes, create threads in processes etc.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#127
post #85

Earlier quoted context omitted.

In my experience (as a former Firefox dev), antivirus / antimalware software are really poorly behaved. They tend to: - require admin rights (which means that if they have vulnerabilities, it can take control of the entire machine, even if Firefox itself is sanboxed); - monkey-patch the Firefox executable in memory, which works (when it does) as long as the version of the software tracks closely the version of Firefo…

I had always assumed that one application could not touch the memory of another application. Does running as Admin allow breaking this boundary?

Yes. However, I think parent process can gain access to child process memory without admin rights.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#129

Earlier quoted context omitted.

> It would literally have been better if they'd never invented power save mode. Only if you considered the purpose of power-saving mode to reduce total energy usage, vs to reduce amount of power (and consequent wear & tear) an individual machine uses. However that MS would release a feature like that which automatically kicks in on upgrade without any sort of consideration of what the machine was used for - it could…

> it could be running life-support systems! Life support systems don't run windows. And if you're running consumer windows on anything critical, you fucked up.

Sounds the original use case was an example of something critical enough it shouldn't really have been running on such an OS.

Re: Firefox engineers discover a Windows Defender bug that causes high CPU usage

#130

> a ~75% CPU usage reduction was noted when browsing YouTube in Firefox I wonder how many of the people who say "Firefox is significantly slower than chrome" are using windows... On my computer, Firefox IS slower than chrome but (with ad blockers enabled) by an insignificant amount. By still being "the last remaining mostly independent, maintained and reasonably popular browser" I'd prefer it to use over chrome even…

I use windows and firefox for most of my browsing and I can tell you that I have definitely noticed that firefox was struggling really hard on youtube compared to chrome. I wasn't sure if chrome was just that much better or if there was something else going on.

I'm happy this was found and its not clear if this is already patched, but hopefully it will somewhat improve performance on youtube or other sites like it going forward.

Post reply on HN