4 ms·

"Performance reasons" meanwhile I kid you not when I say that the Antimalware Executable of Microsoft swallows about half my CPU performance when I am downloadi

by Kenji 9y ago

"Performance reasons" meanwhile I kid you not when I say that the Antimalware Executable of Microsoft swallows about half my CPU performance when I am downloading, unzipping, executing files. They could have implemented their antivirus in JavaScript and it wouldn't have mattered.

okreallywtf 9y ago
I had to create exclusions[1] for some stuff (mainly visual studio) because I had the same problem (mainly during builds). [1] https://www.drivereasy.com/knowledge/antimalware-service-executable-high-disk-usage-windows-10-8-7-solved/ https://www.drivereasy.com/knowledge/antimalware-service-exe...
adzm 9y ago
implemented in JavaScript... something like this? https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5 https://bugs.chromium.org/p/project-zero/issues/detail?id=12... > The core component of MsMpEng responsible for scanning and analysis is called mpengine. Mpengine is a vast and complex attack surface, comprising of handlers for dozens of esoteric archive formats, executable packers and cryptors, full system emulators and interpreters for various architectures and languages, and so on. All of this code is accessible to remote attackers. > NScript is the component of mpengine that evaluates any filesystem or network activity that looks like JavaScript. To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems. This is as surprising as it sounds.
- digi_owl 9y ago
  Time we bring back the C64 design, with no internal storage?
  - syrrim 9y ago
    And no networking.
    - retox 9y ago
      Try TempleOS, though a scamp from /g/ implemented a full network stack, along with video players, etc.
      - digi_owl 9y ago
        And thus the first shim was formed...
bitJericho 9y ago
At the same time, it's miles better than AVG!
londons_explore 9y ago
I don't fully understand this - It isn't critical to virus scan files when reading or writing them. It's important to scan them between a write and a read. That means many written files (which won't be read for a long time) can be scanned hours later. Others can be checked for matching a "known good" hash whitelist which can be downloaded from the net. That should cover all kinds of files which are parts of software distributions etc. That leaves very few files which really need real time scanning.
- palunon 9y ago
  Problem is, for example, if you compute checksums of many files after writing them...

by Kenji 9y ago

okreallywtf 9y ago

I had to create exclusions[1] for some stuff (mainly visual studio) because I had the same problem (mainly during builds). [1] https://www.drivereasy.com/knowledge/antimalware-service-executable-high-disk-usage-windows-10-8-7-solved/ https://www.drivereasy.com/knowledge/antimalware-service-exe...

adzm 9y ago

implemented in JavaScript... something like this? https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5 https://bugs.chromium.org/p/project-zero/issues/detail?id=12... > The core component of MsMpEng responsible for scanning and analysis is called mpengine. Mpengine is a vast and complex attack surface, comprising of handlers for dozens of esoteric archive formats, executable packers and cryptors, full system emulators and interpreters for various architectures and languages, and so on. All of this code is accessible to remote attackers. > NScript is the component of mpengine that evaluates any filesystem or network activity that looks like JavaScript. To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems. This is as surprising as it sounds.

digi_owl 9y ago
Time we bring back the C64 design, with no internal storage?
- syrrim 9y ago
  And no networking.
  - retox 9y ago
    Try TempleOS, though a scamp from /g/ implemented a full network stack, along with video players, etc.
    - digi_owl 9y ago
      And thus the first shim was formed...

bitJericho 9y ago

At the same time, it's miles better than AVG!

londons_explore 9y ago

I don't fully understand this - It isn't critical to virus scan files when reading or writing them. It's important to scan them between a write and a read. That means many written files (which won't be read for a long time) can be scanned hours later. Others can be checked for matching a "known good" hash whitelist which can be downloaded from the net. That should cover all kinds of files which are parts of software distributions etc. That leaves very few files which really need real time scanning.

palunon 9y ago
Problem is, for example, if you compute checksums of many files after writing them...