3 ms·
Giving someone else [edit: remote] root access to your computer is a bad idea. For Windows users it is bad enough with Microsoft. Adding another one is just add
by rightbyte 2y ago
Giving someone else [edit: remote] root access to your computer is a bad idea. For Windows users it is bad enough with Microsoft. Adding another one is just adding to the risk.
Centralizing power is asking for abuse.
- schiffern 2y agoSo this is an argument for only using first-party (Microsoft) security software?
- rightbyte 2y agoYe I guess so. I'd argue to use some Linux distro though to remove the root remote code execution CVE.
- chgs 2y agoYou can buy RCE malware for Linux too - including crowdstrike. If you want a third party to manage your systems then it doesn’t matter what third party you choose Personally I’d go for diversity over any specific solution. That’s a rare thing in “enterprise” world. I suspect companies with strong shadow IT which provides business value for far better than those top down enterprise led ones.
- ryandrake 2y agoI'd rather[1] give "Microsoft and only Microsoft" the ability to remotely update my system, than "Microsoft and whatever fly-by-night 3rd party 'security' companies manages to sell their malware to my boss." A big problem here is that Microsoft has normalized the idea of rando third-party software having access to ring 0 and things running at the kernel level. This is one of the reasons many Linux people argue against opaque third-party blobs running in the kernel. This should not be as routine as it is in the Windows world. Apple wisely ditched kernel extensions. 1: EDIT: Ideally, I'd rather Microsoft not have access to remotely update my system, either, but that ship seems to have sailed long ago.
- dist-epoch 2y agoThat's every kernel driver. Microsoft is slowly moving drivers to user space (most USB drivers, audio drivers, printer drivers, ...) but it's a long walk. And you are still left with the GPU drivers.
- rightbyte 2y agoYe I meant remote. Sorry for the unclarity.
- bayindirh 2y ago> And you are still left with the GPU drivers. It'll be interesting to watch how nVidia responds to this move. Their drivers are black magic at the moment.
- Ekaros 2y agoHow much of GPU drivers are left in kernel for Windows? Updating GPU driver or having desktop crash on Windows and it recovering reasonably seems common enough experience.
- npteljes 2y ago>Centralizing power is asking for abuse. Not particularly. Whatever you do, it can be (will be?) abused. Centralizing power means that a centralized power abuse will happen, like in the case above. In a distributed power system, an attack could occur that targets most entities successfully, but they won't respond efficiently because of lack of centralization. Like computer viruses in the old days.