Re:Disable Your Antivirus Software (Except Microsoft's)
by Aaargh20318 on Wednesday May 24, 2017 @03:57AM
(#14408258)
> They have a full power JavaScript runtime engine running as SYSTEM. No sandboxing, no lowprivs, and the whole point is to run untrusted code.
I would have understood that if it was a small company and a lone developer made a mistake. However, this is Microsoft, a huge company. Lone developers don't get to decide things like this at companies the size of Microsoft. Most likely, meetings were held, architects were involved, code was reviewed. How did such a horrible decision make it through that process ?
In May 2017 we learned about this, from Project Zero no less:
https://bugs.chromium.org/p/project-zero/issues/detail?id=12...
> (Microsoft, on the other hand, is generally competent.)
I'd argue that the Project Zero issue, while fixed, shows that the design of Windows Defender is anything but competent. They have a full power JavaScript runtime engine running as SYSTEM. No sandboxing, no lowprivs, and the whole point is to run untrusted code.