this post was submitted on 19 Jul 2024
1118 points (96.9% liked)
linuxmemes
21428 readers
601 users here now
Hint: :q!
Sister communities:
Community rules (click to expand)
1. Follow the site-wide rules
- Instance-wide TOS: https://legal.lemmy.world/tos/
- Lemmy code of conduct: https://join-lemmy.org/docs/code_of_conduct.html
2. Be civil
- Understand the difference between a joke and an insult.
- Do not harrass or attack members of the community for any reason.
- Leave remarks of "peasantry" to the PCMR community. If you dislike an OS/service/application, attack the thing you dislike, not the individuals who use it. Some people may not have a choice.
- Bigotry will not be tolerated.
- These rules are somewhat loosened when the subject is a public figure. Still, do not attack their person or incite harrassment.
3. Post Linux-related content
- Including Unix and BSD.
- Non-Linux content is acceptable as long as it makes a reference to Linux. For example, the poorly made mockery of
sudoin Windows. - No porn. Even if you watch it on a Linux machine.
4. No recent reposts
- Everybody uses Arch btw, can't quit Vim, and wants to interject for a moment. You can stop now.
Please report posts and comments that break these rules!
Important: never execute code or follow advice that you don't understand or can't verify, especially here. The word of the day is credibility. This is a meme community -- even the most helpful comments might just be shitposts that can damage your system. Be aware, be smart, don't fork-bomb your computer.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
There is nothing Microsoft I would consider "top tier" when it comes to security.
Defender does a great job for many AV tasks. Crowdstrike does more, and protection isn't tied to windows updates.
This isn't a situation where companies just chose not to use the free item, the free item has other costs (management overhead) and is missing some features.
The best answer, of course, is to not use windows for anything that needs to be secure.
Edit: For those who think I'm wrong, cool. I'm not but you are welcome to disagree.
There is a difference between the free defender and paid for defender. If you're a home user, check out defenderui.com to get (many, not all) features that are normally limited to intune/gpo.
A full and proper deployed defender stack is very good, but in terms of management.... The approach to different os's is practically cobbled together, the webui is horrific, and it lacks some basic functionality. A problem to manage a system like this is a problem to deploy a system like this.
If you're on the free Defender level, you are not getting anywhere near the same features as falcon, there is absolutely zero question about that.
Theoretically, this could hit Linux too. You could run a Linux kernel mod containing closed source stuff from a third party vendor which causes the system to kernel panic. The difference is really cultural. Linux admins would howl at that kind of setup, whereas for Windows it's more standard.
Counterpoint: Xbox consoles. They just stick everything inside of VMs a la QubesOS
I'll be totally candid, I have no idea what version of Xbox is current these days.
But didn't they have a CVE a few months ago they previously claimed wasn't an issue?
Edit: Found it. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28916
Seems like that's a Windows issue and not Xbox. There was a recently released kernel exploit for Xbox, but it's sandboxed to the SystemOS.
If you want to pwn the Xbox OS entirely, you would need a hypervisor escape exploit, which is very difficult to accomplish.
That's gaming services, so I guess it's windows only then, you're right. Like I said, no idea regarding anything about current consoles for me. Haven't played on a console since the 360.
Are you familiar with QubesOS? It has a similar security model to the Xbox consoles.
Basically, the host OS only exists to run VMs, which includes separate VMs for networking, USB devices, applications, etc. With QubesOS, you can also pass through something like a GPU for use in a dedicated gaming VM (although you can do that on any Linux distro).
Plenty familiar with qubes, just not familiar with any current consoles.