Many laws and insurances require the use of anti-virus software. This is like a leftover from 20 years ago, where anti-virus actually did something. If you have a security breach and the insurance finds out you didn’t have any anti-virus, it’s not going to pay. So, for legal/liability reasons, company do need to install that kind of bullshit, even tho it’s not doing anything today.
For consumers, this is completely irrelevant, but for companies that want to offer linux as an OS for their employees, that is actually a nice thing to have.
Most insurances I’ve worked with require those. This is not a country thing, but a company thing. My current business insurance requires them
By law, there is nothing thar REQUIRES it per se, but there is a set of rules and regulations where installing it is one way to fulfil the requirements. Especially NIS2 requires “appropriate cybersecurity risk-management measures”, so having a free anti-virus run on the system is one way to implement it, amongst other measures of course.
and there wasn’t an anti-virus solution
I’m not saying every company follows them. I’m just saying if something happens and they discover you’re not following certain regulations, you are in the big shitters and will be very likely held liable.
Not caring about security is fine as long as nothing happens.
It’s not necessary. You can not install an anti-virus or any kind of security. You can work without it. But if something happens, you will be very likely held liable.
So it absolutely makes sense to install an anti-virus software if your insurance policy or maybe even your contracts with customers require it. You don’t install the anti-virus to protect from viruses, you install it to comply with the contract. That is very sensical. Not obliging by the rules of a contract is, on the other hand, very non-sensical.
Every technical person knows hat anti-virus doesn’t do shit. The policies requiring the use of anti-virus software is non-sensical, I agree with that. But installing software you need in order to not get sued if something happens is very very very sensical.
That is completely irrelevant. At the end of the day, microsoft porting windows defender to linux makes sense because there are rules and regulations in place that can be fulfilled by having an anti-virus. That was all I was talking about.
I absolutely agree that, from a technical standpoint, it’s useless beyond imagination. But that’s not the point when you have to comply with rules.
I don’t disagree with what you’re saying necessarily, but I feel like you’re giving Microsoft too much credit here. There are anti virus solutions on Linux. This isn’t a thing they’re doing because they see an unserved market and a new way to make money. This is a thing they’re doing to get a foot in the door with orgs that are switching away from Microsoft products to Linux (like many EU orgs recently), so they can try and draw them back into a 365 subscription or whatever.
So, yes, some businesses may need an anti virus solution due to contractual stupid reasons, but that isn’t what makes Defender on Linux “sensible” for anyone except for the Microsoft salesperson.
The pricing is garbage. The only benefit is the classic “unreasonable enterprise demands” (UED, that’s my term for it): Rather than use multiple tools that are each best in class (and possibly cheaper or even free!) enterprises will always choose one product that does all the things. Even if it does those things poorly or even worst-in-class.
Example: VMWare. For ages, enterprises used VMWare for all their VMs because it could run/manage both Windows and Linux VMs from a single tool. Even though HyperV for Windows is vastly superior for Windows VMs and KVM is vastly superior for Linux VMs.
Aside: Yes, you can run Linux on HyperV and Windows on KVM but neither are ideal.
Windows Defender as an EDR is OK-ish for Windows but it’ll never top CrowdStrike Falcon or SentinelOne Singularity for Linux. It probably won’t be better than FOSS alternatives like Cilium Tetragon or even Falco (because of their flexibility/customizable nature).
Edit: I also have a pretty firm belief that putting Windows people in charge of managing Linux systems (of any kind) is always a bad idea. Yet the very nature of the product (Microsoft Defender) insists upon this.
I am at a loss of words for how non-sensical this is.
It’s actually not.
Many laws and insurances require the use of anti-virus software. This is like a leftover from 20 years ago, where anti-virus actually did something. If you have a security breach and the insurance finds out you didn’t have any anti-virus, it’s not going to pay. So, for legal/liability reasons, company do need to install that kind of bullshit, even tho it’s not doing anything today.
For consumers, this is completely irrelevant, but for companies that want to offer linux as an OS for their employees, that is actually a nice thing to have.
Where is this?
I’ve worked in office space with computers, handling sensible data, and there wasn’t an anti-virus solution. Ever.
Most insurances I’ve worked with require those. This is not a country thing, but a company thing. My current business insurance requires them
By law, there is nothing thar REQUIRES it per se, but there is a set of rules and regulations where installing it is one way to fulfil the requirements. Especially NIS2 requires “appropriate cybersecurity risk-management measures”, so having a free anti-virus run on the system is one way to implement it, amongst other measures of course.
I’m not saying every company follows them. I’m just saying if something happens and they discover you’re not following certain regulations, you are in the big shitters and will be very likely held liable.
Not caring about security is fine as long as nothing happens.
Fair point, but the actual use is still nonsensical, even if required by rules of insurance policies. That makes it necessary, not “sensical”.
It’s not necessary. You can not install an anti-virus or any kind of security. You can work without it. But if something happens, you will be very likely held liable.
So it absolutely makes sense to install an anti-virus software if your insurance policy or maybe even your contracts with customers require it. You don’t install the anti-virus to protect from viruses, you install it to comply with the contract. That is very sensical. Not obliging by the rules of a contract is, on the other hand, very non-sensical.
Every technical person knows hat anti-virus doesn’t do shit. The policies requiring the use of anti-virus software is non-sensical, I agree with that. But installing software you need in order to not get sued if something happens is very very very sensical.
Necessary from a legal point of view, not technical. Or regulatory maybe.
That is completely irrelevant. At the end of the day, microsoft porting windows defender to linux makes sense because there are rules and regulations in place that can be fulfilled by having an anti-virus. That was all I was talking about.
I absolutely agree that, from a technical standpoint, it’s useless beyond imagination. But that’s not the point when you have to comply with rules.
I don’t disagree with what you’re saying necessarily, but I feel like you’re giving Microsoft too much credit here. There are anti virus solutions on Linux. This isn’t a thing they’re doing because they see an unserved market and a new way to make money. This is a thing they’re doing to get a foot in the door with orgs that are switching away from Microsoft products to Linux (like many EU orgs recently), so they can try and draw them back into a 365 subscription or whatever.
So, yes, some businesses may need an anti virus solution due to contractual stupid reasons, but that isn’t what makes Defender on Linux “sensible” for anyone except for the Microsoft salesperson.
Not really, Defender is quite popular as an EDR solution and a lot of companies love the pricing and logging of a modern EDR.
Defender with its timeline is also better than some of the alternatives I’ve seen in the field.
The pricing is garbage. The only benefit is the classic “unreasonable enterprise demands” (UED, that’s my term for it): Rather than use multiple tools that are each best in class (and possibly cheaper or even free!) enterprises will always choose one product that does all the things. Even if it does those things poorly or even worst-in-class.
Example: VMWare. For ages, enterprises used VMWare for all their VMs because it could run/manage both Windows and Linux VMs from a single tool. Even though HyperV for Windows is vastly superior for Windows VMs and KVM is vastly superior for Linux VMs.
Aside: Yes, you can run Linux on HyperV and Windows on KVM but neither are ideal.
Windows Defender as an EDR is OK-ish for Windows but it’ll never top CrowdStrike Falcon or SentinelOne Singularity for Linux. It probably won’t be better than FOSS alternatives like Cilium Tetragon or even Falco (because of their flexibility/customizable nature).
Edit: I also have a pretty firm belief that putting Windows people in charge of managing Linux systems (of any kind) is always a bad idea. Yet the very nature of the product (Microsoft Defender) insists upon this.
EEE in full effect.
I mean, if you’re insane you could pair this with Microsoft Edge for Linux
I’m going to get nightmares.