this post was submitted on 22 Mar 2024
638 points (96.0% liked)

linuxmemes

20686 readers
747 users here now

I use Arch btw

Sister communities:

Community rules

  1. Follow the site-wide rules and code of conduct
  2. Be civil
  3. Post Linux-related content
  4. No recent reposts

Please report posts and comments that break these rules!

founded 1 year ago
MODERATORS
poopsmith@lemmy.world
zephyr@lemmy.world
638
And that is why snapshots exist (sh.itjust.works)
submitted 5 months ago* (last edited 5 months ago) by 0x4E4F@sh.itjust.works to c/linuxmemes@lemmy.world
91 comments fedilink hide all child comments
 

Though the Windows thing was really funny ๐Ÿ˜‚.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] uis@lemm.ee 1 points 5 months ago (1 children)

I thought it checks every file closed

[โ€“] 0x4E4F@sh.itjust.works 1 points 5 months ago (1 children)

No, it scans file headers when you do read/write operations on disk. Every AV works this way, except, as I said, Defender is slow AF.

[โ€“] uis@lemm.ee 1 points 5 months ago (1 children)

I can't find talk I watched, but I found github issue it was based on.

Short version: Defender is triggered not on open, not on read or write, but on CloseHandle.

[โ€“] 0x4E4F@sh.itjust.works 1 points 5 months ago* (last edited 5 months ago) (1 children)

CloseHandle of what? Read/write operations?

[โ€“] uis@lemm.ee 2 points 5 months ago (1 children)

Found! Even metadata chamge.

[โ€“] PipedLinkBot@feddit.rocks 1 points 5 months ago

Here is an alternative Piped link(s):

Found

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I'm open-source; check me out at GitHub.