3 ms·

That's not the responsibility of any open source project to solve though. If the AV slows down productivity then it's up to office politics to decide whether th

That's not the responsibility of any open source project to solve though. If the AV slows down productivity then it's up to office politics to decide whether the perceived security/compliance is more important than developer time or whether they should talk to their AV vendor to optimize scanning or whatever. And I think this is mostly a windows problem with the synchronous filter drivers? On linux you can hook filesystem accesses asynchronously.

hnlmorg 5y ago
> That's not the responsibility of any open source project to solve though. Nobody said it was. > If the AV slows down productivity then it's up to office politics to decide whether the perceived security/compliance is more important than developer time or whether they should talk to their AV vendor to optimize scanning or whatever. I agree and everyone here is assuming the GP hasn't already tried that. Sometimes, and particularly in enterprise orgs, making minor quality of life improvements for developers is an impossible task. Sometimes you don't realize just how these places can operate until you've worked in one. > And I think this is mostly a windows problem with the synchronous filter drivers? On linux you can hook filesystem accesses asynchronously. Yeah it's very specifically a Windows issue. Windows IO is a lot more event driven from what I understand which makes Linux faster at randomly accessing files but virus scanners more effective (not that I have a particularly high opinion for them to begin with) on Windows. Unfortunately, Windows is what 99% of enterprise orgs IT teams provision for their staff.
- pjmlp 5y ago
  Even those that happen to use macOS and GNU/Linux might face the fun of having a AV running, because of IT policies. Those enterprise AV have macOS, GNU/Linux and even iOS/Android versions for a reason.
  - fulafel 5y ago
    Yep, AV vendors and various certifications and the security consultancy industry have created a "something must be done, this is somethign, thereferore it must be done" situation profiting from security problems that feeds on orgs that have fallen into the pattern of uncritically doing what everyone else is doing in the industry.

hnlmorg 5y ago

> That's not the responsibility of any open source project to solve though. Nobody said it was. > If the AV slows down productivity then it's up to office politics to decide whether the perceived security/compliance is more important than developer time or whether they should talk to their AV vendor to optimize scanning or whatever. I agree and everyone here is assuming the GP hasn't already tried that. Sometimes, and particularly in enterprise orgs, making minor quality of life improvements for developers is an impossible task. Sometimes you don't realize just how these places can operate until you've worked in one. > And I think this is mostly a windows problem with the synchronous filter drivers? On linux you can hook filesystem accesses asynchronously. Yeah it's very specifically a Windows issue. Windows IO is a lot more event driven from what I understand which makes Linux faster at randomly accessing files but virus scanners more effective (not that I have a particularly high opinion for them to begin with) on Windows. Unfortunately, Windows is what 99% of enterprise orgs IT teams provision for their staff.

pjmlp 5y ago
Even those that happen to use macOS and GNU/Linux might face the fun of having a AV running, because of IT policies. Those enterprise AV have macOS, GNU/Linux and even iOS/Android versions for a reason.
- fulafel 5y ago
  Yep, AV vendors and various certifications and the security consultancy industry have created a "something must be done, this is somethign, thereferore it must be done" situation profiting from security problems that feeds on orgs that have fallen into the pattern of uncritically doing what everyone else is doing in the industry.