Elektrine lite

← Feed

@marcie@lemmy.ml

2026-10-15 11:52 UTC

Microsoft Releases Microsoft Defender For The Linux Desktop

Replies (27)

  • @CanIFishHere@lemmy.ca 2026-10-15 12:41

    Why is the first paragraph repeated? Written by AI?

    Open ##5046840

  • @melfie@lemmy.zip 2026-10-15 12:43

    For anyone who has been missing Microsoft’s tender, loving embrace since switching to Linux. Copilot for Linux is in development, I presume.

    Open ##5046848

  • @Maeve@kbin.earth 2026-10-15 13:02

    This is like poking holes in the condom before visiting the nearest $20 brothel...

    Open ##5047211

  • @voytrekk@sopuli.xyz 2026-10-15 13:02

    Well this is bullshit. I guess I will end up with this on my work laptop because almost everything is Microsoft in that environment. I can only hope it stays the hell out of the way.

    Open ##5047218

  • I thought this was already available actually

    Open ##5047443

  • @RedSnt@feddit.dk 2026-10-15 13:54

    I’m surprised the requirements isn’t “To use Microsoft defender you need TPM version 2.0 or newer”

    Open ##5047956

  • @Samsy@lemmy.ml 2026-10-15 15:27

    I wouldn’t be surprised if this is just the beginning. Microsoft is making its tools Linux-compatible and is quietly, turning them into a desktop environment for the Linux kernel. They probably don’t even need to tell their users about it. Surprise—WSL is everywhere now!

    Open ##5048674

  • @chgxvjh@hexbear.net 2026-10-15 15:48

    Still waiting for Windows Desktop for Linux

    Open ##5048846

  • @corsicanguppy@lemmy.ca 2026-10-15 16:00

    As useful as nipples on a truck.

    Open ##5048974

  • It’s perfect for them. They don’t have to do the work of maintaining an OS (Which they suck at) and get to continue monitoring the entire computer using their malwa- I mean security suite. :)

    Open ##5050461

  • @Ptsf@lemmy.world 2026-10-15 20:34

    It’s to meet compliance regulations for orgs leveraging linux with E5/E7 licenses already. I doubt they even publish a version your average user can license, and it’s probably just an attempt to further entrench orgs into E5/E7, perpetual money drip into the Microslop money tank.

    Open ##5051885

  • @Flamekebab@piefed.social 2026-10-15 21:14

    To quote Shoresy: “For WHAT‽”

    Open ##5052211

  • @Majestic@lemmy.ml 2026-10-15 22:44

    I just want a real security solution for Linux that’s privacy respecting and not the NSA in a trenchcoat (aka M$) but that’s too much to ask. The offerings for advanced security on Windows are better than those on Linux for desktop use (we’re not talking server) and it’s not even close. Secure enough for most people is nice. But it’s not enough for the paranoid like me and I desperately want it to be. Defender has a very good thing in its configurable hard mode that simply blocks new executables that have never been seen before by M$'s cloud data. That stops pretty hard and fast a lot of new in the wild malware including campaigns by sophisticated actors. Combine with good management of LOLbins and a lockdown on those and you have a pretty hardened machine. The issue is it isn’t private because it’s sending M$ a complete list of hashes of every file on your machine which they pass to the NSA I’m sure. That and Windows itself being NSA-malware you know. Rant warning I’m not talking definition detections or clamAV (which is shit and has long had the lowest scores in comparative testing, it’s for use on email servers to prevent known old malware from being passed around or stored on a file share, that’s it, it’s not end-point security, it won’t even try to stop the most amateur hacker out there to say nothing of nation-state actors). I’m talking real endpoint security that consumers can access without slapping down $400 a year for a corporate security license from Palantir (NSA in a trenchcoat warning) for 8 machines when only half that is needed. I’m talking access controls, comprehensive exploit prevention, attack chain interruption and mitigation, scripting control, prompt to allow execution warnings, IPS/IDS in a software package for the desktop. “Just do this deranged thing where you totally lock your Linux machine down and break tons of things you need and then spend dozens of hours every 3 months fixing it because an update badly broke your whole OS again” yeah no thanks I have a life and troubleshooting my own machine due to trouble I made isn’t part of it. On Windows machines I can click and deploy after a short audit period software that does all I outlined, it’s easy, it works, it comes with default allowlists of essential OS executables and libraries so it doesn’t break the OS itself and the most trouble I have is needing to occasionally click a prompt to allow or block something which takes all of a few seconds, maybe a few minutes if I need to look up what’s going on. And I can find free, pay once, and cheap annual subscriptions for under $200 annual from multiple providers for at least parts if not the whole thing. It’s frustrating! Due to advances in AI driven exploit finding the cost for zero-days is due to plummet and the access to such abilities with some money has come within the reach of even small criminal/hacker groups. So saying zero days are expensive and unlikely is a variant of the obscurity argument and not valid to rebut the points nor increasing relevant with AI driven exploit fears which may allow mass campaigns with brand new zero days for cheap. And you can hmm and haw about security through obscurity but that doesn’t really help your argument or my situation and we both know it. -Signed someone who likes Linux and desperately wants the same security options and capabilities as a properly configured Windows machine running properly configured security software (you can’t do it on Linux if it doesn’t exist and that’s a market size problem to some degree). I fucking hate Windows and I hate Micro$lop even more but I’m not going to bury my head in the sand and pretend this isn’t a real problem. P.S. Please prove me wrong. Point me to software that does most of what I asked, isn’t $60 per machine annual (or a minimum purchase of $300 of licenses due to requiring at least 10 machines), meets the usability requirements of being relatively easy to run and maintain (security that’s relatively easy is security that holds up over time, security that’s hard gets turned off, turned down, ignored, or deferred for ease of use). I desperately want this and I will retract my statements and sing your praises. (No Bitdefender for Linux doesn’t count, they’re an NSA/eyes vacuum and really not a hard-configurator, access control/IPS centered solution anyways. Anything that sends files or file hashes to remote servers whose developers are based in eyes countries is an NSA/eyes vacuum that feeds them data on you.) P.P.S. I already have network edge defenses and firewalls/IPS/IDS set-up but that’s not really enough by a long-shot as I’m not talking about the low-hanging fruit of known cryptolocker campaigns but the real big fish bad threat actors who pull out something never before seen and pair it with at least one 0-day exploit.

    Open ##5053034

  • @trilobite@lemmy.ml 2026-10-16 05:32

    This is really showing that Linux is on its way to be plagued by lots of corporate crap. What surprises me though is that the OS comunity has not come up with a FOSS solution that does what MS Defender does? I’m no programmer so i may be talking out of context. Why do i need to think that my out of the box Debian machine is more vulnerable than MicroSoft Windows.? Time to move to BSD?

    Open ##5056731

  • @daddycool@lemmy.world 2026-10-16 06:13

    Thanks, but no thanks.

    Open ##5057113

  • @antianarchist@sopuli.xyz 2026-10-16 06:30

    Well, even thou Microsoft Defendet was one of the better products they had, making all the anti-virus-software obsolete, I would still not dream of installing it on my linux, where I have a totally different security model by default, only for MS to gather data for free.

    Open ##5057293

  • @lornosaj@lemmy.world 2026-10-16 06:39

    Isn’t this mostly for enterprises that have linux on notebooks or VDIs, just so that all of their OS types are in the same ecosystem when it comes to attack surface management (ie in Sentinel)?

    Open ##5057370

  • @stinkytofuisgood@lemmy.ca 2026-10-16 06:53

    Lmao is it April 1st already? This is so fucking funny to me

    Open ##5057586

  • The more Linux gets support the more likely is that it gets used more and is allowed on more companies. I dont want windoes defender on my linux device but I still think this is a good step for linux in general

    Open ##5057894

  • @someonesmall@lemmy.ml 2026-10-16 07:33

    Next up: Microsoft Linux with crap like Game Center.

    Open ##5058100

  • @pirate2377@lemmy.zip 2026-10-16 08:38

    What the fuck?

    Open ##5058734

  • @TheIPW@lemmy.ml 2026-10-16 10:21

    Crucial distinction: this is specifically for enterprise developer workstations under corporate management (requiring Defender for Endpoint / M365 enterprise licenses), not a general release for all Linux users. I wrote a bit about what this means for the compliance versus privacy tug-of-war over on my site: Microsoft Defender Arrives on Linux Workstations. Definitely an interesting shift for mixed-stack environments. Original content by The Unknown Universe, written by a human and not AI generated!

    Open ##5059909

  • @xyro@morbier.foo 2026-10-16 10:44

    I think I’ll stick to Wazuh 😂

    Open ##5060113

  • Open ##5060267

  • @AuroraSine@lemmy.ml 2026-10-16 20:02

    Microsoft is like a plague. They spot something with potential and immediately pounce on it. That’s exactly how it went with GitHub too. And now they’re trying to insert themselves into Linux. Probably just to harvest data. Complete bullshit. I would never use that.

    Open ##5068405

  • Ew, what? No

    Open ##5068839

  • @Methio@jlai.lu 2026-10-17 13:21

    Ewwwww

    Open ##5082307