• NocturnalMorning@lemmy.world
      link
      fedilink
      English
      arrow-up
      76
      arrow-down
      5
      ·
      1 year ago

      Probably a good move on your part. When they try to force windows 11 on me, that’s when I will be moving to Linux.

      • A_Random_Idiot@lemmy.world
        link
        fedilink
        English
        arrow-up
        40
        arrow-down
        6
        ·
        1 year ago

        Why wait, do it now.

        I jumped ship to Linux when Win 7 died, cause I’d rather be fucked by a rusty fencepost than be forced to use 10, and 11 is right out.

        • TheGoldenGod@lemmy.world
          link
          fedilink
          English
          arrow-up
          12
          arrow-down
          1
          ·
          1 year ago

          Looking to move an older Windows 7 laptop to Linux this week, any suggestions? Feels like there’s so much.

          • ChunkMcHorkle@lemmy.world
            link
            fedilink
            English
            arrow-up
            19
            arrow-down
            1
            ·
            1 year ago

            I’ve been doing the same thing, trying out distros on an old laptop in anticipation of moving all my machines over to Linux.

            Linux Mint is by far the most popular for noobs on older hardware, has a clean if simple interface, and will run on tiny amounts of RAM, so if you have no other suggestions and don’t know much about Linux, I’d say start there.

            Linux Mint is not Ubuntu, but based on it, so there’s a lot of support. As a Windows and Mac user I found the Linux Mint “Cinnamon” desktop environment easy enough to navigate, it’s solid in terms of broad hardware support, and there are a LOT of resources if you have questions, want to watch a tutorial, or need a helping hand, all pluses for a noob. (And I don’t think I had to touch the command line once, when I had it installed: bonus.)

            But the cool thing is that most Linux distros have a “LiveUSB” install, meaning that you can load the .iso of your choice onto a 4GB USB drive, boot off the USB, and take the hardware for a spin without installing anything. LiveUSB means you can try as many distros as you like until you get tired of making USB drives, and all for free.

            Somebody else here suggested “Ubuntu” to you without saying another word about it, but there’s a lot more to it than that. You still have to pick a desktop environment, for example, and while there’s nothing wrong with plain Ubuntu, I honestly don’t think that’s the most user-friendly distro you could start with.

            Try it, see if you like it. Most distros are completely free, including Ubuntu. But if you’re just looking at finding ONE to start with, again, try Linux Mint: it’s popular for Linux noobs for a reason, it’s stable, and even if you find you don’t like it, it’s a great place to dip your toe in and see how Linux works for you personally.

            • havokdj@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              I agree with every point you make except for the desktop environment front end.

              While it is nice to install a distro with a given desktop environment OOTB, you can always change it, and even have multiple ones installed at the same time. This is typically a better approach to testing out desktop environments because you don’t have to reinstall every time.

              • ChunkMcHorkle@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                edit-2
                1 year ago

                I am testing both, so for me a mix of both is best.

                While it is nice to install a distro with a given desktop environment OOTB, you can always change it, and even have multiple ones installed at the same time.

                This is true for Debian, but not for many others. Even Fedora ships with preloaded DE “spins” now. And changing it post-install requires more than beginner level knowledge, specific to that OS. For someone coming over to Linux directly from Windows/Mac, that’s not really feasible upfront.

          • Churbleyimyam@lemm.ee
            link
            fedilink
            English
            arrow-up
            8
            ·
            1 year ago

            If you just need a general purpose desktop and it’s your your first time, I would suggest just picking a popular and stable one with lots of documentation like Debian, Mint or Ubuntu.

            • laverabe@lemmy.world
              link
              fedilink
              English
              arrow-up
              6
              ·
              edit-2
              1 year ago

              I’m leaning towards Debian myself. I don’t like the direction Ubuntu (mint is essentially Ubuntu too) is going. Ubuntu is ran by a for profit company, and it is only going to get worse after snaps.

              From what I’ve read Debian is about as new user friendly as Ubuntu is.

          • Kyleand19@lemmy.world
            link
            fedilink
            English
            arrow-up
            7
            ·
            1 year ago

            Fedora saved my old Windows laptop and it was a pretty smooth switch from Windows for me (though I had a bit of Linux experience). That thing became quicker than when I first bought it haha.

          • Amends1782@lemmy.ca
            link
            fedilink
            English
            arrow-up
            4
            ·
            1 year ago

            Choose a variation of Mint. They have a lighter weight build that is perfect for older hardware just read their site. Mint operates and feels extremely close to w7 and its easy to use! Promise you’ll like it

          • ozymandias117@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            5
            ·
            1 year ago

            Ignore all the “this distro is the best”

            Just use Ubuntu to start until you know what you wish was different

            • HughJanus@lemmy.ml
              link
              fedilink
              English
              arrow-up
              7
              arrow-down
              1
              ·
              1 year ago

              I agree with the first part but Ubuntu is pretty much the worst distro you can recommend.

              • ozymandias117@lemmy.world
                link
                fedilink
                English
                arrow-up
                4
                arrow-down
                2
                ·
                1 year ago

                It’s what proprietary software tends to target, so for someone just coming from Windows, it’s a decent first choice.

                OpenSUSE/Fedora don’t support media codecs without knowing you need to add Packman/RPMFusion

                Debian just released Bookworm, so it might be an okay recommendation for now, but as a general rule it’s probably not the best first distro

                For someone used to Windows staying the same for years, jumping straight to a rolling release like Arch or its derivatives is a massive change

                NixOS is too much configuration for a first time user

                Linux Mint is maybe a better first recommendation, but it’s still downstream of Ubuntu (I wouldn’t recommend LMDE for a first time Linux user)

                Your response is exactly why people find it so difficult to pick a distro to start. Ubuntu may not be the perfect distro for you or I, but there’s a decent reason it’s one of the biggest, and it has conservative defaults

                Until that user knows what things bother them about it or what more they need, we’d just go back and forth all day about upsides and downsides of each distro

        • HughJanus@lemmy.ml
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          14
          ·
          1 year ago

          Why wait, do it now.

          Because Linux is a giant pain in the ass for anyone who is not a software engineer.

            • HughJanus@lemmy.ml
              link
              fedilink
              English
              arrow-up
              3
              arrow-down
              9
              ·
              edit-2
              1 year ago

              In the way that you will be expected to memorize a plethora of commands that you then type into a text-based interface the same way you would have with Windows DOS in 1998.

                • HughJanus@lemmy.ml
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  arrow-down
                  3
                  ·
                  1 year ago

                  No shit. It doesn’t matter because any type of troubleshooting and most installations require you to dive into the CLI or download an appimage, open the properties and select an executable. This is not remotely intuitive. I mean I could go on and on and on with this but anyone who uses Linux knows it already. I just don’t understand why they can’t see how incredibly unintuitive the entire system is, with seemingly no plans to make it easier.

          • SexyPolariton@feddit.de
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            I think it depends, I guess you “just” need the right distro and compatible hardware (e.g. a Thinkpad). I started as a complete Linux noob too, but most problems I encountered I could easily solve in no time because a lot of things are nicely documented or someone else had them before and documented their solution on the internet. But depending on your usecase and other factors I understand Linux can be a pain in the ass.

          • dai@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            4
            ·
            1 year ago

            Mainstream distros are just as easy to use as windows or MacOS.

            • pascal@lemm.ee
              link
              fedilink
              English
              arrow-up
              8
              ·
              1 year ago

              As a Linux user I mostly agree…

              … until you try to play any competitive multiplayer game and wonder why any anticheat doesn’t work or flags your system and account.

              Nowadays I use my Windows 10 mostly for games and video editing.

              • dai@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                1 year ago

                EAC depending on the title works out of the box from what I’ve seen, I don’t have much time these days to play many competitive shooters or games in general but Battlebit and PlanetSide look to work fine through proton.

            • HughJanus@lemmy.ml
              link
              fedilink
              English
              arrow-up
              9
              arrow-down
              4
              ·
              edit-2
              1 year ago

              Let me tell you a little story about yesterday:

              My Signal app on Linux keeps crashing. I write to them for support. They suggest I install the Beta version. Why would they suggest I install a version that openly state is “for users who do not mind discontinuity in service and are willing to work with us to understand and test issues.” to fix an issue, I haven’t the slightest, but I take a look regardless.

              “To install on MacOS, download and install this file”

              “To install on Windows, download and install the file”

              “To install on Linux open a terminal and copy and paste these commands”.

              So I open the terminal and copy and paste the commands and I get some generic error message I don’t understand and now I…fuck off because I’m not a software engineer and don’t know how to fix this shit. That’s before even getting into the 2 other commands I’m supposed to run that I don’t understand what they are or what they do.

              My ProtonVPN client on Linux is incredibly basic and unstable, and has been for many years while the Windows client is beautiful and functions perfectly in the background with zero interaction.

              People who think Linux is fine for the general public are, frankly, delusional. I don’t have another word to explain how you can be under that impression.

              • Churbleyimyam@lemm.ee
                link
                fedilink
                English
                arrow-up
                3
                ·
                1 year ago

                You make a fair point. ProtonVPN was a nightmare for me to set up and get working too but I think that’s Proton’s fault more than Linux’s. I have many other applications that I simply installed with one click from the Software application and then have never needed to touch again. It seems not all app developers are equally motivated to make their stuff easy to run.

                • HughJanus@lemmy.ml
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  arrow-down
                  2
                  ·
                  1 year ago

                  I think that’s Proton’s fault more than Linux

                  To the end user, it doesn’t matter.

                  It seems not all app developers are equally motivated to make their stuff easy to run.

                  Yes, that is the point. Many developers don’t care to rewrite their software for the 1% of people that daily drive Linux .

            • Phen@lemmy.eco.br
              link
              fedilink
              English
              arrow-up
              3
              ·
              1 year ago

              There’s still a lot of little things that are still a pain for someone who doesn’t know how things work. Many are not the OS’ fault but still, different experiences.

              For example, say you’re running discord. Next week there’s a discord update, it’ll not apply the update automatically, it’ll only download a deb file. An user familiar with windows may try to open the deb file… And it’ll launch the package manager, but the only option available is to uninstall. In order to install the update you’ll need the terminal.

              There are a lot of little things like this. This one is just something you need to learn, but others are a real pita when you have no experience.

              And if you have a 4k screen and Nvidia gpu when you try Linux for the first time, I guarantee you’re going to hate the experience.

      • kingthrillgore@lemmy.ml
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        1
        ·
        edit-2
        1 year ago

        My new hardware is literally incompatible with Windows 11. They’re doing me a kindness I don’t want all this AI shit on my PC

        • NocturnalMorning@lemmy.world
          link
          fedilink
          English
          arrow-up
          11
          ·
          1 year ago

          Haha, I had a partition on my pc for the longest time to put Linux on it. But I do a lot of game dev stuff, so I’ve been reluctant to switch from windows.

            • Alk@lemmy.world
              link
              fedilink
              English
              arrow-up
              16
              ·
              1 year ago

              Real question. Is gaming (not game dev) significantly better than it was 5 years ago on Linux? I really want to switch, but I also really don’t want to give up everything “just working” and doing it smoothly when gaming on windows.

              I’ve even considered having 2 PC’s for my 4 monitors, and having the middle monitor run windows and the other 3 on a Linux box. I used to use a program that could simulate my mouse moving from one pc to an entirely different one even across windows and Linux, and also share the clipboard. I could try that again.

              But if the gaming experience is sufficient and convenient on Linux I might switch entirely.

              • GreyBeard@lemmy.one
                link
                fedilink
                English
                arrow-up
                14
                ·
                1 year ago

                It’s vastly better than it was 5 years ago. You can get an idea by going to protondb.com and looking at games. Basically, most games work out of the box with minimal to no issues. Even most new games work on release without major issues.

                The biggest issue is anti-cheat and DRM. That can be a show stopped for some users, but for me it hasn’t been an issue.

              • finestnothing@lemmy.world
                link
                fedilink
                English
                arrow-up
                8
                ·
                1 year ago

                I switched full time to Linux about 3 months ago, I had been wanting to for a long time since I prefer dev work on Linux and generally hate Windows.

                Gaming is nearly as easy on Linux as on windows, especially through steam imo. Almost all games will work right out of the box, just set steam to use proton for any non linux-natve games and it does it. The only game I’ve had an issue with is cyberpunk 2077, and that was fixed with a few minutes of googling, then pasting a launch config into the settings, now it runs perfectly. One thing to watch out for, no games that use a kernal-level anticheat will work on Linux unless they specifically support it, sucky but those anticheat software makers are coming around to support it slowly.

                I actually prefer installing software on Linux to doing it on Windows. Same process for finding software, just Google it and look for stuff that works on Linux. Even proprietary stuff runs natively on Linux sometimes, I personally look for free and open source software as an alternative every time and it usually is better imo. Once you find what you want, it’s super easy to install. No need to deal with downloading files, clicking them to install, and all that jazz. Just open a terminal and do “yay -S {package name}” and it’ll install. Also makes it very easy to install multiple things at once, especially if you already know what software you want. Cherry on top, updates aren’t forced on you. You can update all of your packages with “yay -Syu”, or update individual ones if you want, there’s a lot of control over it, and you don’t need to rely on the app to have its own update tool.

                Sometimes there’s windows specific software that isn’t on Linux, it kind of sucks, but almost everytime I’m able to find free and open source software that’s natively Linux compatible and is better than the closed source software I initially wanted. Even with windows-specific software, most things can be run with wine and work just like a native Linux app. Sometimes things don’t work on wine, but basically all of them will have free and open source alternatives you can use instead, or there are workarounds that are probably easy to find.

                If you wanted to do the 2 PC’s you definitely can, I would recommend one PC and just add a Linux partition or hard drive, you then boot into Windows or Linux but don’t need a whole new PC. You have to reboot to go between them, but you can access each systems files from the other one (can’t run games, but like documents and such). If you do go with 2 PC’s though, I recommend using an app called Barrier for the mouse/keyboard sharing. I use it between my PC (Linux) and my work laptop (windows) and it’s great, my work laptop stays folded up and I have only one mouse and keyboard on my desk.

                • Alk@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  1 year ago

                  I’ll look into barrier, thanks. I work in the gaming industry (from home, on my own pc) and so I am constantly running games and doing non-gaming tasks on and off so dual booting is not really an option for me. I often need to do normal tasks while games are running too. Which is why I wanted that 2 pc setup I mentioned above.

                  However I think I might dual boot just to try Linux out with gaming for now (I have a spare ssd I can use to keep it simple) since I see a lot of people saying it’s pretty good now. Then if it works out I can just transition to only Linux.

                • OnlyAStarOnlyTheSea@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  1 year ago

                  I have a 64bit Mac that can’t play 32bit Steam games anymore (which is all of them). I’m thinking of switching to Linux specifically for games. What you’re saying so I could play whatever on Linux via steam? And Steam isn’t a massive pain in the ass to install and configure like it used to be?? Holy shit, that’s game changing. Pun intended.

                  Is Master Chief Collection on Steam? That would be amazing since the only instance of Windows I had decided to change it’s own password and essentially lock me out.

              • guacupado@lemmy.world
                link
                fedilink
                English
                arrow-up
                6
                arrow-down
                1
                ·
                1 year ago

                That’s what a lot of Linux people miss. They’ve been dealing with it for a while already so a lot of them are like “it’s so easy!” and then they have to start explaing repos and containers to people and the person just sticks to Windows.

              • ohlaph@lemmy.world
                link
                fedilink
                English
                arrow-up
                4
                ·
                1 year ago

                I have two hard drives. One dedicated to each Windows and Linux. It maies life easier.

              • Gunpachi@lemmings.world
                link
                fedilink
                English
                arrow-up
                3
                ·
                1 year ago

                If you play a lot of competitive multiplayer games, it would be better to keep a windows partition for them (overwatch is the only game that I had a good experience on Linux).

                I used to play some competitive Apex, I was overjoyed when I heard anti cheat support is available on Linux, and quickly installed it. I tried it a couple of times since then, the most recent being last month - The game is playable but not on a competitive level imho. The smoothness is just not there. Then again this might be because of my low spec hardware.

                Games like Valorant just won’t work because of their kernel level anticheat. (But hey we have Conter-Strike 2 now)

                AAA games run just fine for the most part, its playable and I usually get performance similar to windows.

              • GeekyNerdyNerd@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                1
                ·
                1 year ago

                The steam deck uses a custom Linux distro made by valve specifically for it. So it’s at least good enough for gaming that valve trusted it for their mainstream handled gaming PC.

                I’ve got one and tbh it’s pretty good. As long as you stick to games that are rated as either verified or playable on steamdeck you’ll probably have a good time.

            • PeWu@lemmy.ml
              link
              fedilink
              English
              arrow-up
              5
              ·
              edit-2
              1 year ago

              You’ve made me remember that quite not long ago I wanted to play on Linux (precisely on Mint, but I’ve also tried pop os), and I had three results:

              1 - Game not even trying to launch/wine error (usually related to graphics) (did happen once or twice, tested few games): Factorio, without magic wine parameters and magic overall

              2 - Game runs, but graphical glitches makes it unplayable: Factorio after tweaks

              3 - Game running fine, fps lower or equal than on windows: Minecraft, Kerbal space program

              (Yes, now I know Factorio also had Linux version, but it’s too late for that)

              So while it may be playable for some 9999 IQ rice master couch-looking moderator after just touching the demon named Wine, I don’t have the brains, patience or time tweaking every little parameter/environmental vars/wine prefixes on top of each other to make a game play at 2 fps. It also didn’t help that when trying to resolve apt conflicts, Mint just killed itself (looking at you aptitude). My overall experience of Linux isn’t bad, it may be good for customization masters, but for me, which would like having things “just working”, and maybe after that some trial and error tweaks, Windows is closer to that wish. Although when MS forces W11 onto me, I’m jumpshipping to Linux, no matter how shitty my UX is (at least I hope so)

              Edit: forgot that there is markdown, formating fix

              Edit2: bad brain, missing word fix

              • finestnothing@lemmy.world
                link
                fedilink
                English
                arrow-up
                3
                ·
                1 year ago

                Honestly that is a pretty awful experience. Proton is infinitely better for games than wine in my opinion though, I definitely recommend giving it another try. I have a good 20 games on steam from AAA to indie, the only one to have any issues was cyberpunk 2077 and even that was a simple launch command fix that I found in a couple minutes of googling the problem and it runs fine now.

                I admittedly haven’t dealt with wine too much since most games can be run with proton and I avoid programs that don’t support Linux, but I was able to run heavily modded Minecraft at basically the same fps as on windows with no wine tweaking. Lutris is also a good platform that can make installing non-steam games much easier

                If you want a good os to try instead of jumping ship at random, I’d recommend grabbing endeavour os and picking whatever desktop environment you like on top of it, all of their stuff looks good right out of the box and gets you a lot of the necessities. Any of their official desktop environments (except i3) are super easy to use and should be familiar to windows users, I’m a strong believer in arch superiority because if there’s a problem, someone else has already fixed it and you can steal their solution even though there is a learning curve to customizing it

              • prole@sh.itjust.works
                link
                fedilink
                English
                arrow-up
                3
                arrow-down
                1
                ·
                edit-2
                1 year ago

                Proton is incredibly simple to use, and gaming on Linux is pretty seamless for like 3/4+ of games now. Including Factorio.

              • havokdj@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                arrow-down
                1
                ·
                1 year ago

                Minecraft and other java apps actually run better on Linux because of the way the scheduler works, something wasn’t right with your system.

            • NocturnalMorning@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 year ago

              Oh cool, I didn’t realize that was a thing. If I can run Unreal Engine on Linux, that’s pretty much the only thing stopping me from switching.

    • bighatchester@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      1 year ago

      Me too !! Been loving Ubuntu the last couple of months. Had very few issues other than one time my Gui stopped working and it would only boot into terminal, if anyone knows how to fix that it would be great incase it happens again . Last time I just did a fresh install.

  • vzq@lemmy.blahaj.zone
    link
    fedilink
    English
    arrow-up
    204
    arrow-down
    8
    ·
    1 year ago

    I’m not sure about the browser, but a lot of malware used to ship with the tor binary and used it to connect to the CNC. I can totally see it ending up in the indicator list.

    I love bashing MS as much as the next guy, but this is not completely indefensible behavior given typical user use cases and needs. As long as it’s easy to add an exception of you installed it on purpose.

    • CheezyWeezle@lemmy.world
      link
      fedilink
      English
      arrow-up
      80
      ·
      1 year ago

      Yeah I’m guessing this is a false positive based on heuristic analysis, i.e. the TOR program has a lot of the same behaviors as malicious programs. Of course it is more accurate to say that the malicious programs are copying TOR behavior or just straight using TOR code, whatever the case may be.

      My main issue is that it kind of shows a lack of due diligence. I assume the official TOR binaries are signed, so the official TOR binaries should be exempted from these heuristic positives. If the binaries are unsigned/have no valid certificates, then I can totally understand the false positive. At that point, the user should know they are installing software that cannot be automatically verified as being safe, and antivirus should never assume that something is safe otherwise. Like you said, for typical users this should be the expected behavior. Users can always undo Windows Defender actions and add exemptions.

      • lemmyvore@feddit.nl
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        34
        ·
        1 year ago

        I still don’t understand why Windows doesn’t use .exe whitelisting instead of bothering with endless blacklists and heuristics and antiviruses.

        On any given system there’s a handful of legit .exe while out there there’s like a billion malware .exe, and more created every minute.

        Or at least switch to an explicit “executable” flag like on MacOS and Linux.

        • starchturrets@feddit.de
          link
          fedilink
          English
          arrow-up
          18
          ·
          1 year ago

          Windows has both WDAC and Applocker for allowlisting, not just for exes, but stuff such as powershell scripts and what drivers run in the kernel as well.

          https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/

          In it’s strongest form (a signed WDAC policy) even admin access can’t easily override it, and a well written policy can even enforce stuff such as downgrade protection (example: only allow firefox.exe signed by Mozilla at or above a certain version) which prevents an attacker from loading older versions of an executable.

          The problem is that it’s not so easy to use in practice - an installer will often drop loads of unsigned files. Tor Browser ironically enough is a prime example, and any WDAC policies allowing it have to fallback on hash rules, which are fragile and must be regenerated every update, or filepath rules which are not so robust.

          Microsoft is trying to make allowlisting more accessible with Smart App Control, which runs WDAC under the hood. It does save the hassle of managing one’s own policies (and also blocks certain filetypes like lnks commonly used for malware), but it is not very customizable.

        • PoolloverNathan@programming.dev
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 year ago

          From my experience, Windows by default completely blocks non-Microsoft-verified .exes. It’s called S mode and usually requires a Microsoft account to exit.

          • brsrklf@jlai.lu
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            1 year ago

            Do you mean that it’s enough just to be on a microsoft account? On 10, I didn’t technically do anything to exit that and I just have an annoying popup first time I’m using an unverified app. I can just allow them.

            • PoolloverNathan@programming.dev
              link
              fedilink
              English
              arrow-up
              3
              ·
              1 year ago

              You need to “download” normal mode from the store, which requires a Microsoft account to use. All of the W11 computers I’ve gotten came in S mode.

        • DeathsEmbrace@lemmy.world
          link
          fedilink
          English
          arrow-up
          21
          arrow-down
          25
          ·
          edit-2
          1 year ago

          Because it makes it the easiest thing to spoof an .exe which enables attacks of which you will never get out of. A legit.exe vs a spoofed legit.exe will be the exact same in every way except the coding in spoofed fucks you.

          Edit: you’re trading security risk for security risk that makes it easier to hide. Not worth it.

          Edit 2: their is nothing 100% secure MD5 and Sha1 are both spoofable. Checksums and anything is capable of being man in the middle. You people act like you just found something that can’t be broken. This is the real world the moment you switch most black hatters and white hatters will switch too…

          • CheezyWeezle@lemmy.world
            link
            fedilink
            English
            arrow-up
            30
            arrow-down
            2
            ·
            1 year ago

            I’m not sure that these things work the way you think they do… an antivirus wouldn’t just look for the name of an executable to be “legit.exe” but rather would look at what the program calls itself in it’s manifest, compute the hash for the executable binary file, and compare that hash against a database of known good hashes. If the contents of the executable compute a hash identical to the known good hash, then you know the contents of the executable are clean.

            • gronjo45@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              Still getting into programming and having a bit of trouble understanding what a “manifest” is. What does this technically entail? Are “manifests” implemented differently by PL or OS?

              • CheezyWeezle@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                ·
                1 year ago

                The manifest (at least how I am using the term) is whatever metadata a file has, and the format and location of this metadata can differ between operating systems. Usually the manifest is generated by the operating system based off of header data from the file itself, and details about the file that the operating system can deduce, such as file size, origin, location, file type, etc. In Windows you can view this info by right clicking/opening the context menu on any file and selecting “Properties”, on macOS by opening the context menu and selecting “Get Info”, and on other OSes such as linux/freeBSD it will be something similar.

                There are other usages for “manifest” depending on the context, for example a manifest.xml would be something a developer would include with an android app that has configuration settings and properties for the app.

          • ඞmir@lemmy.ml
            link
            fedilink
            English
            arrow-up
            19
            arrow-down
            2
            ·
            1 year ago

            How is this getting upvoted. This is ridiculous garbage, every exe whitelist would obviously have checksums attached, not just a filename.

          • xantoxis@lemmy.world
            link
            fedilink
            English
            arrow-up
            10
            ·
            1 year ago

            Please don’t reply to comments when you’re talking out your ass, that doesn’t help anyone. You don’t know wtf you’re on about, at all.

          • starchturrets@feddit.de
            link
            fedilink
            English
            arrow-up
            5
            ·
            1 year ago

            Not really, WDAC doesn’t usually just look at the filename. It can look at the certificate it was signed by, or fallback to using hashes.

          • CheezyWeezle@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 year ago

            Lmao your edit 2 is completely silly. SHA-256 is what would be used for checksum verification, and SHA-256 is pretty much collision resistant, and even then if two files computed the same hash they would have such different contents/properties that it would be obvious they are not the same file. MD5 and SHA-1 have been phased out for any serious usage for a while now.

            Seriously tho, if you don’t know what you are talking about you should probably stop making a fool of yourself

        • Aganim@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          edit-2
          1 year ago

          Same here. Totally talking about Computer Numerical Control of course, absolutely no other association. Nope, definitely not. 😇

    • Rose@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      2
      ·
      1 year ago

      It’s defensible only from the perspective that it’s safer to flag many innocent apps than to miss something harmful. That said, it heavily punishes many legitimate developers and creators, as documented here. I was personally affected on many occasions and there hasn’t been a single one where Microsoft wouldn’t admit to false-flagging upon a manual review.

  • BubblyMango@lemmy.wtf
    link
    fedilink
    English
    arrow-up
    87
    arrow-down
    1
    ·
    1 year ago

    Dude ms defender used to delete my “Hello World” executables built using visual studio just because they were made by an unknown publisher.

  • Pxtl@lemmy.ca
    link
    fedilink
    English
    arrow-up
    70
    arrow-down
    1
    ·
    1 year ago

    I’ve run into antiviruses blocking code I’ve written just because I pulled in certain cryptographic libs. Literally pulling in some Microsoft cryptography libraries in c# made it think I was writing a crypto locker.

    • aidan@lemmy.world
      link
      fedilink
      English
      arrow-up
      22
      arrow-down
      1
      ·
      1 year ago

      Imo, compared to how prevalent viruses were on older versions of windows, this type paranoia seems to be working

    • arc@lemm.ee
      link
      fedilink
      English
      arrow-up
      9
      ·
      1 year ago

      It’s better to use Whonix or Tails if you want to use TOR browser securely. If I ever had to use Windows again it would not be for anything private.

      I’m certain there are people who use Tor in a way that it would make sense to use a secure OS.

      But I use Tor to get around stupid public wifis and suchlike that have content blockers. I’m not scared that the police are going to beat the shit out of me so I just use Windows or Android.

      • Hafiz Muhammad@mastodon.social
        link
        fedilink
        arrow-up
        0
        arrow-down
        2
        ·
        1 year ago

        @arc

        I’m confused about what you meant by your last sentence. Are you trying to throw a hint that using distros such as Whonix and Tails means you will be doing something illegal?

        I’m not afraid of the police coming after me because I’ve done nothing wrong. One of the reasons I use Linux distros and distros that are specialized like Whonix and Tails is because I value my privacy which Windows won’t give you.

        • arc@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          1 year ago

          No, I’m making a comment about the word “securely” in the post I responded to. i.e. “Secure” means different things for different people.

          I like to use Tor on occasion for the reason stated but I’m sure as hell not booting up an OS to do it for my use case. That would be inconvenient especially as I’m using Tor to subvert a stupid netnanny, and not endangering myself or putting myself in legal peril. So using Tor this way is plenty secure - I can hold a secure conversation with a website of my choosing without netnanny interfering.

          Other use cases may vary and your need for “secure”. Maybe you absolutely value your privacy above all else, or are up to something you don’t want others to know about. In which case do, go and use Tails or whatever.

  • Omega_Haxors@lemmy.ml
    link
    fedilink
    English
    arrow-up
    35
    arrow-down
    1
    ·
    edit-2
    1 year ago

    A little context, one of the larger exit nodes was compromised and would send malware to your computer. The behavior shield probably caught this and correctly marked the program as a trojan, since, by definition, that’s literally what it was acting as when connected to that node. More advanced AVs (like malwarebytes) will instead block the malicious connection rather than blanket-banning the entire program.

  • LeeNeighoff@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    8
    ·
    1 year ago

    Hot take, I see no issue with this. If you’re savvy enough to know about Tor and its purpose, you’re also savvy enough to know how to add a security exclusion in Defender. People who don’t know how to whitelist a program in Defender probably did not install Tor themselves and won’t be safe using a program with the capability to access the dark web.

    It’s extra frustration for those trying to legitimately use Tor, but it’s also a safety check in the case of an unintended install.

    • Marxism-Fennekinism@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      1 year ago

      People who actually want to use Tor are probably also on Linux. Using it on Windows pretty much nullifies any privacy it gives you.

  • shym3q@programming.dev
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    7
    ·
    1 year ago

    It’s funny that recently NetworkChuck uploaded video about darkweb where he installed tor on windows and now apparently many folks did the same.