I do agree that this is a Eclipse IDE (or even Eclipse Foundation)
issue. Windows Defender should be told or trained to treat the Eclipse
(signed) executables, ddls and jars as trusted. I think the following
blog post is a good starting point to improve upon the current situation.
https://www.microsoft.com/security/blog/2018/08/16/partnering-with-the-industry-to-minimize-false-positives/
Rolf
Op 6/14/2019 om 7:24 PM schreef Tim Webb:
Mike,
Absolutely. My concern is a bit more general -- locally I can simply
setup exclude rules in Windows defender to not protect "eclipse.exe"
The problem I see is how this impacts the massive user base of Eclipse
users. If your first experience with Eclipse involves a few minute
coffee break after downloading it, I'm afraid it predisposes people to
think it is slow. The impact seen for larger IDEs is even more
significant.
I'll have a blog published shortly that provides the workaround for
users but I'm wondering about other creative ways we could help users
know about this. AKA if the Eclipse executable itself detected Windows
Defender scanning and let the user know about the workaround, then at
least they'd know that Defender is slowing things down, not Eclipse
itself. Or if we were able to somehow have Microsoft "trust" the Jar
signing certificate from Eclipse.org and avoid doing so extensive
validation of plugins originating there.
Ultimately this is more of a project/product level concern as I see it
for the Eclipse IDE than just a one-developer workaround issue. I may
be wrong though. ¯\_(ツ)_/¯
Tim
On Fri, Jun 14, 2019 at 11:56 AM Mike Wilson <mike_wil...@ca.ibm.com
<mailto:mike_wil...@ca.ibm.com>> wrote:
Yikes! Is it possible to keep the extracted zip around, in a way
that Defender wouldn't have to rescan it?
McQ.
----- Original message -----
From: Tim Webb <t...@genuitec.com <mailto:t...@genuitec.com>>
Sent by: platform-dev-boun...@eclipse.org
<mailto:platform-dev-boun...@eclipse.org>
To: platform-dev@eclipse.org <mailto:platform-dev@eclipse.org>
Cc:
Subject: [EXTERNAL] [platform-dev] Impact of Windows Defender
and Eclipse startup
Date: Fri, Jun 14, 2019 8:41 AM
TL;DR - Windows Defender adds 1.5 minutes or more to Eclipse
launch
Lately, I've heard some colleagues grumbling about how Eclipse
startup seems slower. I'll admit that I'm recently back on
Windows after years on Mac and was surprised. Some quick metrics:
0:05 - time to extract 354mb JEE 2019-06 RC1 zip
1:28 - time spent by Windows Defender before Eclipse workspace
prompt
A similar slowdown is observed after Eclipse updates, either
itself or when adding plugins.
I'm running on a fast laptop (latest Intel i7, 32gb ram,
etc.). A colleague had a large Eclipse setup blocked for 11
minutes before he got the workspace prompt, though likely had
some other load on the box at the time.
I've been googling around trying to find ways to
submit/pre-approve plugins, etc. but so far Windows Defender
doesn't seem to have ways that other virus software does. My
assumption is it is scanning all jar files as "potential
malicious executables."
Is this something others have observed/already pursued
solutions for? Yes, there is a workaround of just turning
off/excluding folders from Windows Defender, but as plugin
makers, we're concerned about the perceived impact of "Eclipse
is slow" that this gives.
Tim
_______________________________________________
platform-dev mailing list
platform-dev@eclipse.org <mailto:platform-dev@eclipse.org>
To change your delivery options, retrieve your password, or
unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/platform-dev
_______________________________________________
platform-dev mailing list
platform-dev@eclipse.org <mailto:platform-dev@eclipse.org>
To change your delivery options, retrieve your password, or
unsubscribe from this list, visit
https://www.eclipse.org/mailman/listinfo/platform-dev
--
Cheers,
Tim
__
*Timothy R. Webb*
Vice President, Operations
Genuitec, LLC <http://www.genuitec.com>, follow @timrwebb
<http://twitter.com/timrwebb>
or connect at linkedin.com/in/trwebb <http://www.linkedin.com/in/trwebb>
_______________________________________________
platform-dev mailing list
platform-dev@eclipse.org
To change your delivery options, retrieve your password, or unsubscribe from
this list, visit
https://www.eclipse.org/mailman/listinfo/platform-dev
_______________________________________________
platform-dev mailing list
platform-dev@eclipse.org
To change your delivery options, retrieve your password, or unsubscribe from
this list, visit
https://www.eclipse.org/mailman/listinfo/platform-dev
