3 ms·

> forced to run an invasive full-system virus/malware scan on start-up and at 5AM every morning (takes 4-4.5 hours) forcing me to leave the thing runnings for d

> forced to run an invasive full-system virus/malware scan on start-up and at 5AM every morning (takes 4-4.5 hours) forcing me to leave the thing runnings for days or weeks at a time and preventing any early morning work Maybe its just me, but hasn't Microsoft antrivirus thingy gotten really _really_ heavy recently? Back in the days you would barely notice it, but nowadays it will take over 1-2 cores and make sure the damn fan is always spinning.

vladvasiliu 3y ago
What's not clear to me is why MS implemented the "protected folders" feature so half-assedly as to be useless? To me, the important thing to protect on a computer are the user's files. Instead of regularly scanning everything and comparing to known bad signatures and grinding the machine to a halt, why not limit what the apps can do? If it's hard to prevent users from downloading totally_not_shady_app.exe, just make sure that it can't access anything anyway. That may still allow it to mine bitcoin, but at least it won't leak sensitive data. Or better yet: most users aren't devs. Just don't execute anything from the users' home folder. This probably won't help with all the attacks on Office by macros and whatnot, but it'd be a start.
- kramerger 3y ago
  This already exists and is called Windows S mode. I wish it was more popular, but as soon as it was announced blogs like verge and Engadget started a crusade against it and more or less killed it off
  - vladvasiliu 3y ago
    Wasn't that much more limited than what I was arguing for? IIRC, it could only run apps from the MS Store, but it could run any app from the store.
marcosdumay 3y ago
IMO, the combination of anti-virus and updater got really heavy. But when the updater isn't running, I never noticed the anti-virus.
sparrowInHand 3y ago
Its inter silo-warfare, the microsoft antivirus regularly detects and reports the operating system spyware?

vladvasiliu 3y ago

What's not clear to me is why MS implemented the "protected folders" feature so half-assedly as to be useless? To me, the important thing to protect on a computer are the user's files. Instead of regularly scanning everything and comparing to known bad signatures and grinding the machine to a halt, why not limit what the apps can do? If it's hard to prevent users from downloading totally_not_shady_app.exe, just make sure that it can't access anything anyway. That may still allow it to mine bitcoin, but at least it won't leak sensitive data. Or better yet: most users aren't devs. Just don't execute anything from the users' home folder. This probably won't help with all the attacks on Office by macros and whatnot, but it'd be a start.

kramerger 3y ago
This already exists and is called Windows S mode. I wish it was more popular, but as soon as it was announced blogs like verge and Engadget started a crusade against it and more or less killed it off
- vladvasiliu 3y ago
  Wasn't that much more limited than what I was arguing for? IIRC, it could only run apps from the MS Store, but it could run any app from the store.

marcosdumay 3y ago

IMO, the combination of anti-virus and updater got really heavy. But when the updater isn't running, I never noticed the anti-virus.

sparrowInHand 3y ago

Its inter silo-warfare, the microsoft antivirus regularly detects and reports the operating system spyware?