Hacker News new | ask | show | jobs
by hutzlibu 1559 days ago
"If you're forced to use Windows the one with the least known side effects is Microsoft Security Essentials but even this has several drawbacks."

But permanently disabling it is very, very hard.

3 comments

> But permanently disabling it is very, very hard.

I installed linux in a new machine just last week

Congratulations, me too.

But that didn't help me with the linux driver issues for my laptop. Nor does linux run adobe animate, or a bunch of other software.

Good work!

The only "correct" approach is telling Adobe that they need to provide native ports of their software or switching to other software. Regarding laptops, buy business laptops (Lenovo ThinkPad, Dell Developer Edition) or laptops made from vendors with a focus on Linux (Purism, System 76, Tuxedo) and stick with internals from AMD or Intel. So it boils down to knowing things before and giving the right companies your money. It worked somehow, Intel provided first good support, than AMD, Atheros and others followed. On the ugly side we have still ARM, Qualcomm (yep - now Atheros) and of course Nvidia.

Actually the "stickers" with the Windows logo from Microsoft are the proof that the hardware runs good enough with the pre-installed version of Windows. And that the manufacturer has spend 80 $/€ or more for this. Some person also name this stickers "tax labels", nasty persons "protection money". Not that I want to encourage the Linux Foundation...

Lenovo gets a lot of love from linux users for their laptops, but they've repeatedly shipped malware infested systems. Sometimes they did it in exchange for money, sometimes they wrote the malware themselves. I wouldn't recommend anyone go near them. I mean, hardware that'll play nice with linux is nice, but we're not lacking for alternatives these days.

If a company who acts as horribly as Lenovo does can still be recommended even in tech circles it makes me wonder what a company would have to do before their reputation suffers for the general public.

They never shipped a malware that would resist a fresh install. Nobody should ever use an OEM provided OS.
> They never shipped a malware that would resist a fresh install.

Actually they did. It stored the malware in UEFI so after a format/clean reinstall of your OS you were still vulnerable.

https://www.ghacks.net/2015/08/12/lenovo-once-again-in-hot-w...

Actually it's not. Just add an exclusiun for C:/ - it still hogs some memory but the i/o drawbacks are gone. There is probably also a way to let it scan Downloads only but I didn't found it yet. In this configuration it still scans USB drives.
Intellij Idea recommends to exclude directories related to project and IDE from MSE. I think that's a reasonable compromise between performance and security.
At the same those folders are probably the biggest backdoor into your system if you are a software developer, software developers are smart enough to not download crap from the internet, but they will gladly run npm install with full user privileges.
They once setup here the scanners to prevent modification of executable files. The linker called by GNU's GCC was...well...surprised. Not a problem if you build the Windows stuff also on Linux.