• curbstickle@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    14
    arrow-down
    4
    ·
    edit-2
    4 months ago

    There is nothing Microsoft I would consider “top tier” when it comes to security.

    Defender does a great job for many AV tasks. Crowdstrike does more, and protection isn’t tied to windows updates.

    This isn’t a situation where companies just chose not to use the free item, the free item has other costs (management overhead) and is missing some features.

    The best answer, of course, is to not use windows for anything that needs to be secure.

    Edit: For those who think I’m wrong, cool. I’m not but you are welcome to disagree.

    There is a difference between the free defender and paid for defender. If you’re a home user, check out defenderui.com to get (many, not all) features that are normally limited to intune/gpo.

    A full and proper deployed defender stack is very good, but in terms of management… The approach to different os’s is practically cobbled together, the webui is horrific, and it lacks some basic functionality. A problem to manage a system like this is a problem to deploy a system like this.

    If you’re on the free Defender level, you are not getting anywhere near the same features as falcon, there is absolutely zero question about that.

    • MajorHavoc@programming.dev
      link
      fedilink
      arrow-up
      4
      ·
      4 months ago

      The best answer, of course, is to not use windows for anything that needs to be secure.

      Edit: For those who think I’m wrong, cool. I’m not but you are welcome to disagree.

      • Linux admins here: Quiet nods and knowing looks.
      • Windows admins here: quiet awkward glances at each other to see if anyone wants to defend MS today.
      • Mac admins here: quiet awkward glances to see if anyone feels like this was any better than a coin toss chance of happening just to Macs, today, instead.
      • merc@sh.itjust.works
        link
        fedilink
        arrow-up
        6
        ·
        4 months ago

        Theoretically, this could hit Linux too. You could run a Linux kernel mod containing closed source stuff from a third party vendor which causes the system to kernel panic. The difference is really cultural. Linux admins would howl at that kind of setup, whereas for Windows it’s more standard.

    • Refurbished Refurbisher@lemmy.sdf.org
      link
      fedilink
      arrow-up
      3
      ·
      4 months ago

      There is nothing Microsoft I would consider “top tier” when it comes to security.

      Counterpoint: Xbox consoles. They just stick everything inside of VMs a la QubesOS

        • Refurbished Refurbisher@lemmy.sdf.org
          link
          fedilink
          arrow-up
          4
          ·
          4 months ago

          Seems like that’s a Windows issue and not Xbox. There was a recently released kernel exploit for Xbox, but it’s sandboxed to the SystemOS.

          If you want to pwn the Xbox OS entirely, you would need a hypervisor escape exploit, which is very difficult to accomplish.

          • curbstickle@lemmy.dbzer0.com
            link
            fedilink
            arrow-up
            3
            ·
            4 months ago

            That’s gaming services, so I guess it’s windows only then, you’re right. Like I said, no idea regarding anything about current consoles for me. Haven’t played on a console since the 360.

            • Refurbished Refurbisher@lemmy.sdf.org
              link
              fedilink
              arrow-up
              1
              ·
              edit-2
              4 months ago

              Are you familiar with QubesOS? It has a similar security model to the Xbox consoles.

              Basically, the host OS only exists to run VMs, which includes separate VMs for networking, USB devices, applications, etc. With QubesOS, you can also pass through something like a GPU for use in a dedicated gaming VM (although you can do that on any Linux distro).