Kind of sharing this because the headline is a little sensationalist and makes it sound like MS is hard right (they are, but not like this) and anti-EU.
I mean, they probably are! Especially if it means MS is barred from monopolies and vertical integration.
Microsoft has Windows Defender, its in-house alternative to CrowdStrike, but because of the 2009 agreement made to avoid a European competition investigation, had allowed multiple security providers to install software at the kernel level.
Lmao what
I’ve always insisted that Defender is the best AntiVirus and Intrusion prevention solution for any Windows Machine.
MS has a vested interest in making sure nothing bad gets publicised about their OS. As long as the threat exists, (and barring regulatory restrictions) MS will maintain the best intrusion prevention and detection features.
The AntiVirus industry has a vested interest in scaring people into continuing to pay their subscriptions. There are even some conspiracy theories going around that some AV vendors actually pushed viruses into the wild that they could intercept but their competitors couldn’t.
Apple Computers have a reputation of not having viruses (even through they do) partially due to the Security/Obscurity myth and partially because they lock down macOS and have tightly integrated in-house virus detection. The other reason is that their user base is almost exclusively End-User Retail, which is not currently a profitable target.
As vehemently anti-Microsoft as I am (and seeing this with Apple tinted glasses), I have to agree. I believe Apple having full control over their kernel is best for users because of the same arguments you’ve made — I can’t argue that Apple should while saying Microsoft should not.
I don’t really know anything about Defender but I do believe the software vendor itself should be and is responsible. I’m very liberal and I love what the EU is doing in some areas but I think some of it (like this) is a bit over the top.
If they’d made their OS anywhere near reasonably constructed antivirus would be mostly snake oil and nobody would be in trouble. The trouble starts when antivirus software is necessary, at which point third-party antivirus software sort of has to be an option and then you’ve got this mess.
i find the level of ms apologia unsettling. remember, we’re only a few news cycles away from the time ms almost shipped windows with spyware and keylogger built-in
Best summary;
The whole problem with Microsoft in general is that they want to be Apple. They want their own hardware & software ecosystem that they rule over with absolute power. But culturally they’re not Apple, they’re a child that needs 24/7 adult supervision. They can’t and won’t do security, their track record of handling all types of incidents is abysmal, and they’re absolutely terrified of making any changes that might mildly inconvenience enterprise customers. They want all the benefits of controlling their own ecosystem, but will take on exactly zero of the responsibilities. They literally cannot be trusted to secure their own ecosystem and the EU for sure knew this.
The unaccountable 3rd Party market that is built around MS is what caused the issue.
No OS is 100% secure, but as soon as you allow 3rd Party vendors to fuck around at the kernel level, they get much less secure.
Microsoft is to blame for allowing these fucktards kernel-level access. There were other ways they could have enabled third-party intrusion prevention software without giving away keys to the city.
This is a unique situation because absolutely everyone involved deserves to go bankrupt and disappear into the darkness.
You have a closed-source OS that causes a vast swath of our infrastructure vulnerable to MSFT’s whims and incompetence, and built on top a closed-source AV market that allows the infra to be extremely vulnerable in a second, unrelated way, plus the cross-product of them both since AV gets so tightly integrated to the kernel.
Until we can force MSFT to open-source Windows with a small military invasion of Redmond or some shit, maybe at least this will make people think twice before they install "anti"malware from an equally untransparent corpo straight into mission-critical infrastructure like a horny teenager putting his raw dog into a coconut.
