14 ms·
I'm so happy to see a thread on Windows Defender, because my org recently switched antivirus software and I can't wait to tell you how bad it is ! There's a hi
by Fiahil 5y ago
I'm so happy to see a thread on Windows Defender, because my org recently switched antivirus software and I can't wait to tell you how bad it is !
There's a hidden feature in Defender, that will delight any user : it can turn your 15" MacBook Pro into a full breakfast machine. Want pancakes ? Start a zoom call.
While you wait for your favorite video conference app to start, don't hope to finish your docker pull/save/build in less than 30 times its usual time. Your laptop I/O will be so cripled that you might get better bandwith with a floppy disk drive (I'm exagerating a bit, but that's how it feels to go from 120MB/s to 4MB/s on a SSD).
Our Mac IT is completely powerless. I never thought I would ever regret getting rid of Symantec. I was wrong.
- foepys 5y agoWe are using Defender at work, too. There is a group policy that lets Defender do a full system scan once a week. To not interfere with the user there allegedly is a group policy setting to limit the CPU usage and it is set to 15%. The thing is, it simply does not work. Every week my fans spin up to max, Defender hogs all my CPU cores, 25% of my GPU according to the Task Manager. Even typing becomes laggy. The only way to stop it is to open Task Scheduler and end the scheduled task from there.
- nix23 5y agoWait...your are local Admin on your machine?
- gspr 5y agoI'd quit my job if work didn't let me be root on my work machine.
- nix23 5y agoThat's exactly the one single reason why no one should give a developer a Windows machine in a enterprise environment ;)
- formerly_proven 5y agoWell that and the shitty dev tools on Windows in general ;)
- antihipocrat 5y agoI'm a relative beginner to development and have found no issues with WSL2 so far. Any pitfalls to be aware of?
- mikeyjk 5y agoWhen I was using wsl1 I ran into ocassional nuisances: needing to specify a windows mount point and having a problem with phpstorm connecting to it (iirc I had to use a docker for windows setting which was referred to as legacy or insecure maybe). It wasn't too bad though honestly. I ended up swapping to debian after my workplace rolled out some insane MDM policies / forced application installs. It is much nicer to dev in *nix
- colejohnson66 5y agoWSL2 is so much better than WSL1
- vrajanap 5y agoI find that still slow compared to full blown dual install of Linux.
- mszcz 5y agoCare to elaborate? I'm using Windows as a primary dev machine for years and I've encountered no problems aside from the infuriating update-related restarts. What am I missing? This is an actual, emotionless, genuine question? Always looking to find new ways to procrastinate by trying out new tools ;)
- 5y ago
- ocdtrekkie 5y agoAnd anywhere with a good IT department would say "bye". From my experience, people with reasonable technical skills are the most likely people to defy IT policies, even without admin rights.
- nix23 5y ago>people with reasonable technical skills are the most likely people to defy IT policies Absolutely true...aka "i know computers since the C64 nothing bad will ever come from my machine...bumm ransomware...but my Antivirus never said anything"
- DangitBobby 5y agoLess to do with that and more to do with it being infuriating that you can't install or do tiny things you need. It can be less frustrating to hop jobs.
- gspr 5y agoThen hold me responsible if I do.
- ocdtrekkie 5y agoOften by the time the violation is noticed, the damage is done. And when you're cleaning up a million dollars worth of ransomware damage, you rethink whoever thought anyone should ever be operating with admin rights to their machine.
- AnIdiotOnTheNet 5y agoEveryone at the company I work for has local admin on their machines. It is not the big deal people make it out to be. 1) Malware doesn't care. It is happy to eat the user's personal data or anything they have access to on the network. 2) The OS is easily replicable if it gets damaged or destroyed thanks to imaging. 3) Whitelisting applications is a bitch to implement properly and causes a lot of friction for users. 4) There is one PC per user, so there's absolutely no reason to protect the PC from it's user.
- tallanvor 5y agoOutside of highly regulated environments, technical staff usually have local admin rights. Is it a risk? Yes, although one that can be minimized. Letting people do what they need to do with minimal interference is an important part of keeping employees happy.
- causi 5y agoEven if they're not supposed to, most people do, or at least they know an admin login. All it takes is one frustrated person who knows someone higher up and the login is on a sticky note in a drawer. Technical security measures are not and will never be a substitute for proper training.
- nix23 5y agoAnd proper training is never achievable in non IT Enterprise...because no one cares, whats left are technical restrictions.
- brokenmachine 5y ago> Technical security measures are not and will never be a substitute for proper training. What would proper training achieve to solve GGP's problem of his machine becoming unusable every week?
- nix23 5y agoOh man....a mac with antivirus software...is your IT's mindset from the 90s?
- kmonsen 5y agoGoogle, Amazon and Facebook do that as well (at least if you include Santa as antivirus).
- nix23 5y agoNo Santa is the right way to do it (whitelisting binary's), that's the opposite of an antivirus.
- novok 5y agoYou'd be surprised about how many high profile silicon valley companies use similar software such as crowdstrike or carbon black. It's a scourge.
- xmodem 5y agoMy work mac has both Carbon Black and FireEye. It takes 30% longer to do a large build of an open source project than my personal laptopk, despite having 2 more cores and twice the RAM.
- Macha 5y agoUnfortunately many big customers insist on it as part of security questionaires and depending on who audits your compliance with certain security standards, they may insist it's required too.
- dirkf 5y agoWe even have McAfee on our Linux machines... And yes, doing a build is impacted by this...
- nix23 5y agoHoly caracho!! I understand if you have it on a file-server (bad rep if you send a MS-Word-Macrovirus to a Customer) but on a linux build server?? That's just madness!
- marcodiego 5y agoI remember a few students using windows that took a very very long time to compile anything; even smallish single-file examples. Is is possible that this slowness is caused by windows checking the binaries that were just compiled?
- munchbunny 5y agoNot just the binaries. The source code too. A common practice is to exclude both the whole repo and the compiler from Defender.
- Flow 5y agoOur company just switched from Symantec to Windows Defender and so far I'm very pleased. On my Windows laptop the fans were running more or less all the time when we had Symantec. With Defender the computer is nearly dead silent. When looking in Task Manager before, it seemed that Symantec used more CPU than even Visual Studio and related processes.
- ASalazarMX 5y agoWe had Symantec too, also switched to Windows Defender. Symantec was an awful piece of software for something that should be invisible until needed.
- leokennis 5y agoMy very good solution on dealing with corporate antivirus: noise cancelling headphones.