Comment by kachapopopow
1 day ago
to be fair windows 11 is the most secure windows ever created, the amount of random checks it has is astonishing. Unfortunately it gets undermined by poor driver code from third-parties, much less of a problem with hyper-v based security, but still a huge problem.
Obviously all these security features cost performance and something that linux and macos can live without since they generally do not have closed source drivers that can't be fixed (except nvidia, but it seems to be changing as nvidia is giving up and starting to open up due to AI). Windows has to be proactive and that is one of the biggest performance hurdles it faces. It's actually incredible how comparatively safe windows is if you have all the security features enabled, there are obviously still one-offs due to having to maintain compatibility and what was effectively usermode code ported to kernelmode ruining it, thankfully that also seems to be changing since they're slowly rewriting it to be secure by design with Unstrusted<> guards making these issues significantly less common.
as for apple doesn't have third party code in the kernel at all so they can also fix it themselves.
side note, the restrictive linux license might seem like it is preventing adoption since for example the whole HDMI 2.1 spec is centered around proprietary code, but in reality they have this illusion that their 'proprietary' code can be protected and somehow linux undermines it when in reality people can reverse everything to sourcecode if they spend enough time on it - if anyone is curious you can just take one of the firmware dumps from any hdmi 2.1 capable TV dongle, extract the kernel module responsible handling the authentication for hdmi 2.1, extract the code, put it in your amdgpu opensource driver, now you have hdmi 2.1 on linux.
> be fair windows 11 is the most secure windows ever created
Every patch Tuesday they’re fixing more insecurities that previous Windows didn’t have.
Random checks?
patchguard, hyperguard, CET, retpoline, shadowing checks, you name it, look at any memory function and see if (rdtsc() % xxx) check_something.
For the random battery fires and explosions.