News for hackers. Stuff that matters.

A comment on Microsoft fixes 5-year-old Defender bug, reducing Firefox-related CPU use by 75%. Parent comment

Re:Microsoft fixes 5-year-old Defender bug, reducing Firefox... by omneity on Monday April 10, 2023 @05:02PM (#35517380)
An analogy can only get you so far, but in this case the bug is caused by Microsoft Defender, yet Firefox, the car manufacturer, is a different entity. So I wouldn't call it a recall.
[ Parent | on HN ]
Re:Microsoft fixes 5-year-old Defender bug, reducing Firefox... by sgtnoodle on Monday April 10, 2023 @05:08PM (#35517431)
A bunch of cars across many manufacturers were recalled in the 2010's due to a defect in the airbags made by the same manufacturer.

One could also argue that the OS is the car, the browser is the chauffeur, and the user is the passenger.

[ Parent | on HN ]
Re:Microsoft fixes 5-year-old Defender bug, reducing Firefox... by jmspring on Monday April 10, 2023 @08:52PM (#35519294)
With regard to browsers, I think we need more manufacturers, not just the GM (Google/Chrome) of browsers. I want Ford in there as well. (Sticking with US automotive companies).
[ Parent | on HN ]
Re:Microsoft fixes 5-year-old Defender bug, reducing Firefox... by robotresearcher on Monday April 10, 2023 @10:23PM (#35519978)
The article is about Firefox. It’s right there.
[ Parent | on HN ]
Re:Microsoft fixes 5-year-old Defender bug, reducing Firefox... by deafpolygon on Tuesday April 11, 2023 @12:05AM (#35520689)
What's wrong with Chrysler?
[ Parent | on HN ]
Re:Microsoft fixes 5-year-old Defender bug, reducing Firefox... by wolrah on Monday April 10, 2023 @09:52PM (#35519732)
> but in this case the bug is caused by Microsoft Defender, yet Firefox, the car manufacturer, is a different entity.

Quoting the Mozilla engineer responsible for most of the recent activity on the bug:

"This problem has two sides: Microsoft was doing a lot of useless computations upon each event; and we are generating a lot of events. The combination is explosive. Now that Microsoft has done their part of the job, we need to reduce our dependency to VirtualProtect."

It was also noted elsewhere in the thread that similar, though less severe, CPU impact is seen with other antivirus products.

Microsoft was doing something wrong that made this operation more expensive than it needed to be, but Mozilla is also doing this far more than any other browser.

[ Parent | on HN ]