Hacker News Reader

Comment by Wowfunhappy | Hacker News Reader

So, why doesn't all malware include this?

You dont need to, you can bypass it anyways through win32 function call redirection and a dozen other methods.

Antivirus's are trash, they are a mitigation that exists when the operating system does not have proper security measures in the first place. This is why Windows must ship with an AV, and everyone else laughs.

> the operating system does not have proper security measures in the first place

> everyone else laughs

Meanwhile:

    So let's install our shiny $UB3RK3WLAPP !

    # setenforce 0
    # curl http://ub3rk3wlapp.io/install | sudo bash

Notice the sudo and terminal. You must enter a password in a terminal. In windows you just click twice.

how is that any different? you're still allowing arbitrary code to run.

Unless you are saying that those who type into the terminal will first |echo the script into a file, verify it, then run?

> In windows you just click twice.

Uh, oh, that means you're working on an admin account. If you are using a normal user account, you will be prompted to enter your admin credentials instead.

(You can also force this behaviour on administrator accounts. Search for the registry setting "ConsentPromptBehaviorAdmin")

On Windows installs the default user created in a home/pro install is an admin and it never prompts the user to go create a non-admin account for daily use. This actually makes perfect sense in itself (beyond the behavior defaults you mention being backwards).

Notice you ignored setenforce and what it's already a root session.

"Secure by Design" [0] MacOS also ships with at least 2 different virus scanners [1] that are as active as Defender

[0] https://www.apple.com/business/docs/site/AAW_Platform_Securi...

[1] https://arstechnica.com/gadgets/2022/08/apple-quietly-revamp...

Not even close to "as active". Defender will scan everything, even windows own updates. It is the reason why Windows machines perform poorly and why battery life is a joke on that platform. It's intrusive and doesn't care much about resource use.

My Lenovo X13s lasts about 15 hours on a charge and performs very well.

Reply on news.ycombinator.com