Microsoft is moving antivirus providers out of the Windows kernel

Comments

• renegadespork@lemmy.jelliefrontier.net ⁨9⁩ ⁨months⁩ ago

  Here’s hoping anticheat goes with them.

  source
• Railison@aussie.zone ⁨9⁩ ⁨months⁩ ago

  Wouldn’t it have made more sense for them to improve the boot recovery process instead?

  If the system fails to boot after a driver update, roll back the update and inform the user on startup.

  source

  • FooBarrington@lemmy.world ⁨9⁩ ⁨months⁩ ago

    AFAIK the Crowdstrike issue wasn’t a driver update, just virus definitions outside the driver, so your method wouldn’t have helped.

    source
• Damage@feddit.it ⁨9⁩ ⁨months⁩ ago

  I wonder whether solutions like Twincat for industrial PC/PLCs will be affected by this. Interfacing directly with the kernel and replacing the scheduler are, AFAIK, fundamental to making Windows viable for real time use.

  source

  • mostlikelyaperson@lemmy.world ⁨9⁩ ⁨months⁩ ago

    I could see some exception for windows 11 IoT being made, but I honestly don’t know.

    source
  • GreenCrunch@lemmy.today ⁨9⁩ ⁨months⁩ ago

    An interesting question. Assuming they’re only targeting security/antivirus products at the moment (see the discussion regarding anti-cheat) it may be that those applications get a pass for now.

    source

    • Auli@lemmy.ca ⁨9⁩ ⁨months⁩ ago

      No I think they are limiting kernel access. These are just what moist people know that would use it.

      source

      • -> View More Comments
• shininghero@pawb.social ⁨9⁩ ⁨months⁩ ago

  Cool. Do anticheat vendors next.

  source

  • Toes@ani.social ⁨9⁩ ⁨months⁩ ago

    Do them now! Haha

    source