Hacker News Reader

Comment by maccard | Hacker News Reader

I see about a 100x slowdown on some applications[0] and IO heavy operations with defender in win11. It's unbelieveable how slow it is. I was a huge proponent of it in Win10, but I'm finding it hard to do so now.

[0] The software I'm using does a scan over a few hundred thousand files to read file headers. Without windows defender it takes about 30 seconds, but with defender it takes about 300.

View on HN

The answer in this scenario is to exempt that application and/or folder. Don’t throw the baby out with the bath water.

In my environment we have to add exceptions for Developers git folders for the realtime scanning for a similar reason. Apps with large numbers of small files or high frequency writes of smalls files, like temp files during the build process, need to be exempted unless you’re willing to pay the performance penalty for the security.

I don’t understand why, but I have an exemption for that folder and I’ve disabled real time scanning. It still shows the slowdown on first launch. The only thing that works is disabling windows defender entirely. I’ve been through the troubleshooting loop a few times with this.

Out of curiosity, does Dev Drive do anything for you? https://learn.microsoft.com/en-us/windows/dev-drive/

I'm setting one up tomorrow.

We're seeing the same thing - our compilation times literally double because of Defender activity, you can go into resource manager and see defender using like 50% of the CPU, it takes our project from about 12 minutes for a full rebuild to 25 minutes. And the thing is - you can add whatever exceptions you want, they work for a while and then it breaks again with updates, I literally keep having to re-add and fix exceptions in Defender every month or our compilation times slow down to a crawl.

JetBrains IDEs actually tell you to exclude some directories from Defender (and will even do it for you in some instances) because of performance issues. DevDrive[1] fixes that since it's excluded from defender by default.

[1]: https://learn.microsoft.com/en-us/windows/dev-drive/

I've used Rider to add the folder as an exclusion, no dice.

I'm going to give dev drive a go, but forgive me for being sus for enabling a feature for a problem that MS seem to have caused.

That’s 10× though, not 100× (still a lot for something you can’t turn off). Typo?

Yes, typo! My bad and I can’t edit.

Use DevDrive. It was created exactly for your purpose.

The Whitelist the process.

Sorry, but wanting to disable Defender entirely for some ultra Edge Case ist Just dumb.

If you read my other reply, you'd see I have done, and it doesn't work. But, disabling defender does.

> for some ultra Edge Case ist Just dumb

By ultra edge case you mean the application that I spend as much time in as my IDE for my job?

Reply on news.ycombinator.com