3 ms·
That's part of the malware and privacy protection system, checking the developer certificates and fingerprints of the application binaries. For most application
by simonh 4y ago
That's part of the malware and privacy protection system, checking the developer certificates and fingerprints of the application binaries. For most applications it only does this once on first launch then 'staples' the notarization to the binary so it doesn't have to do it again, and so that the system still works when offline. You can disable it.
- jve 4y agoNice that you bring it up as it actually makes system more secure than less secure. MS Windows Defender also has extensive cloud protection enabled: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/cloud-protection-microsoft-defender-antivirus?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defe... Which of course can be disabled. CLR check can also be disabled on windows if someone wants less requests from hosts and could be harmless for some specific configurations.
- 57FkMytWjyFu 4y agoSpoken like someone that's never actually tried to disable Defender.
- jve 4y agoYes, at our org we actually roll out/enable protections step-by-step and monitor the impact. We are conservative on cloud dependencies, but Defender Cloud protection components is only one of the very few we opt-in. Obviously it's just one tool in a toolbox, but under that umbrella there are very much protections that are very useful. Tip of the day: Did you know that there are Attack surface reduction rules that can be enabled to, for example "Block Office communication application from creating child processes" https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defe... ? :)
- 57FkMytWjyFu 4y agoI'm speaking as an end user, not from an organizational perspective. Have you ever tried to disable Defender? Just letting you know it's not nearly as simple as a checkbox.
- user3939382 4y ago> it actually makes system more secure than less secure More secure in the way my home would be more secure if I had a cop permanently stationed in my living room. I'll secure my own machine, thank you very much.
- simonh 4y agoThat’s fine, Macos users are free to make that choice, but for some of us a bit if additional private security is handy.