This seems like a natural product to come out of MS's cloud strategy. Especially considering the cloud gaming they're building with Xbox Game Pass. Also notable that it's at the same time they decided to turn a Windows 10 upgrade into Windows 11.
This makes sense. It is a competitor to Amazon's Windows Desktop environments. Microsoft should beat AWS's offering here because well, they make the OS that they are virtualizing.
I can see this working for a lot of places where you want good information security. You can never get the data out of the cloud except via screenshot.
100% guaranteed, cast-iron, watertight security is impossible - but VDIs could potentially prevent whole classes of attack. It's about increasing the barrier against realistic threat models.
I completely agree - many attack vectors are more difficult, and some are impossible. However, saying "you can never get the data out of the cloud except via screenshot" is, first of all, untrue, as other means exist, and second, preventing access to data is not the most important security aspect of such a system.
> Microsoft should beat AWS's offering here because well, they make the OS that they are virtualizing.
Not necessarily. They have already had a similar service. This seems to be a simplification of that service? Maybe it's sort of like Amazon offering Lightsail as an alternative to EC2? After clicking around the site for a half hour trying to figure out pricing for Azure Virtual Desktops, I gave up. I figured if you have to ask how much it is, then I can't afford it. Now they are launching a service seemingly directed to users like me, but they still can't give us prices. I assume they will in time for launch, but I'm getting really sick of hunting for prices on Azure. Every minute I have spent on that site has been wasted.
I doubt they would beat AWS on pricing. The AWS instances appear to be really well priced relative to what you could get if you tried to do the same with EC2. I couldn't see MS being as cheap. From what I remember, Azure is generally more expensive across the board.
Microsoft's secret weapon here is that if you subscribe to Microsoft 365 Business/Enterprise (which is a prereq for this according for what they've said), they include a Windows license that can be ran on Azure for VDI. On AWS, you have to buy CALs and licensing for the instances (Windows VDA licenses? I last looked into that years ago). Or you can buy the licenses from AWS but I'm sure that's not the rate you'd pay getting them directly from Microsoft (and then you often have to use Windows Server which doesn't have things like WSL2).
That's not a gigantic barrier if you're an enterprise, but figuring out licensing for Workspaces if you don't have a couple smart Microsoft admins and money to burn is really hard. This is easy, since all of the license entitlements are enforced through their portal. (if you can start an instance you are licensed)
If you want an AWS instance, it's not much more complicated than pick your instance and go. Of course, we're talking about the AWS console here, which is not so easy if you aren't used to it. If you know your way around, then it's about the same as getting anything else AWS. You don't have to deal with licenses at all.
The pricing is really cheap. Looking at the pricing of instances on EC2, I don't know how they get so cheap. I'm sure the answer is in the details if I were to go digging (different hardware) but it's cheap.
I don't think the Asure alternative will be even close. While AWS makes Workspaces easy and affordable for just about any individual, that person is probably still not the target for MS. I'm guessing this new offering is simply the same service as they already offer, for businesses which want systems for less than 100 people, and are still able to dish out a load of cash.
The benefit to Azure is that it's Microsoft. They aren't going to compete on pricing for anything. If pricing is your main concern, then you don't to Azure (or even Google Compute.) If your boss says you have to use Azure, then that's when Azure has the advantage. ;)
Sure - they won't be much disadvantaged. But I meant that if they went Azure only or tried to be the only provider, they'd be shooting themselves in the foot. I completely expect them to want a good experience on AWS hosted desktop. Maybe not the best, but I don't expect them to have a significant advantage. (apart from possible integrations)
> Parallels is releasing an update to its Desktop virtual machine software that allows M1 Mac owners to install Windows 10 on Arm. Parallels Desktop 16.5 now includes the necessary native support to run the Arm version of Windows on M1 chips, following Apple’s decision not to support Boot Camp on M1 Macs.
I'm very sorry that you bought a computer that doesn't support any third-party operating systems, by design. (Apple won't support boot-camp on it.) If this feature is important to you, perhaps you should return your M1, and go to Best Buy and purchase one of the many other choices.
"The main drawback is that you’ll need to run a preview version of Windows to make this all work. Microsoft only currently licenses the Arm version of Windows 10 to PC makers, so there’s no official way to buy a copy yet."
Only if developers want to build and distribute native apps. I don't see why they would change their attitude. Web apps are basically multiplatform and updated on the server.
This looks interesting on second thought. A good way to consolidate workplace systems for low-bandwidth display applications where consistently low latency is not a big concern.
I hope that this is not the beginning of the next iteration of Windows for the general consumers. I like the OS, and I'd like it to remain on my hard drive.
It's also infinitely easier for Microsoft to improve and protect world security by controlling all network data going into and coming out of a device. A framebuffer delivered to your monitor means Microsoft can run all its advanced threat detection magic with no regard for what network a monitor is plugged into.
The millions of unprotected businesses of the world can skip zerotrust / firewall / antivirus / network redesigns and jump right to pc-aas with azure-ad.
For all the "I dont want big brother controlling my device" there should be an equal "I dont want teams with millions of dollars carelessly building infrastructure that can be weaponized against society."
It can really come down to a business case. What are the chances or risk of a virus or ransomware occurring? And what are the potential costs and challenges of dealing with that? If I can reduce my exposure to information, legal and operational risk, which is hard to directly quantify and yet is ever-present, plus some anticipated reduction in operating expenses, it can start to look good for a large portion of businesses with office operations.
Which is exactly why "but mah data" is less about privacy in an enterprise world, and more about standardization and portability. Owning your data in the enterprise context means being able to ship it around it a reusable way, and not some proprietary Microsoft blob that will never work anywhere else, or having it scattered across a million APIs with a million different schemas with zero tools to grab it all at once.
The risk is less Microsoft ever reading your data and more never being able to divorce them at a later date. Entrenchment.
Those are problems that exist similarly whether youre in the cloud, or something on prem that you bought, built or customized.
Conversely, for anyco without good hygiene, standardized process, discipline, and respect for keeping things tidy, out of the box cloud process can be a godsend. It's not just minimization of risk, but built in architecture and integration and flow, which in and of itself can be more important than product features.
I'm excited for this, my wife is an accountant and often asks me to help her with VBA macros.
Which means that for this reason alone I have to dedicate 40GB of my laptop's hard drive to a Windows partition with office, adobe, and other stuff installed.
And if she's not physically near me, I have no way of getting the script to her with any guarantee it'll behave the same or work at all on her work computer.
Having worked within unix for so long, I'd started taking it for granted how everything is either portable, or can be easily containerized, Windows and accompanying products are incredibly environment finicky and janky overall.
To be able to just do the remote version of "handing over the laptop" will be a godsend.
I hope they open it to consumers soon. I need a personal VDI to keep personal stuff off my work laptop. AWS workspaces is OK, but they seem to charge for the directory now, so it's kinda expensive
It will be interesting to see if Adobe's activation/licensing copes with this, or every time you log in the software needs a new activation as it detects the underlying machine is different.
I'm excited for this, my wife is an accountant and often asks me to help her with VBA macros.
I like that someone else had the same working from home experience as I did...aka "can you come look at this form for me, some macro isn't running".
I wonder what is the overall percentage of VB macros written, especially in big corporation, by other people than the stated file owners.
yup, even though this has been done forever, you could always setup a computer at home and RDP to it. Most products I have seen have targeted corporations with IT departments that could set stuff up. This seems more like a easy to use personal/small company product based on their Azure infrastructure. Niche imo. And not that bad tbh, I've have had a couple of instances where I've had to use a Windows for something, and having a quick deploy VM would have been nice. Setting up VMs locally is a pain, so is deploying VMs on many cloud providers.
We all remember the famous Dropbox comment [0], right? I think the same holds true in this case. Even when there's an IT department to set things up, that still takes effort to set up and maintain. If it's available as a product, easily used and with a support hotline, I can even see medium sized businesses using it - depending on the price, of course.
I am assuming this will be aiming for Enterprise niche in certain segment?
Or will Microsoft start selling Windows OS that only does Remote Connection to OEMs? i.e Only used for Windows 365? Basically Microsoft version of ChromeOS.
> Windows 365 provides an instant-on boot experience
Unless they mean it'll instantly show a loading screen, I'll bet it doesn't.
I've used various VDI implementations over the years, and they've all been pretty slow to get to a working desktop.
I also wonder about latency. I have a 100/20 FTTC connection at home, which I find to be fast. Most recent VDI I used was Citrix, where I was expected to code in a VDI hosted in Netherlands (I'm in the UK) - the latency when typing drove me fucking NUTS! It was mostly just long enough to be intensely irritating and distracting, but occasionally latency would increase to a few seconds too.
They can keep it hot in memory similar to serverless. If everyone uses the same base copy of Windows, then they can easily fork from one parent copy. A copy on write network filesystem + some Windows Registry and Explorer tricks can take care of the remaining 20%.
This is exactly what VMware Horizon VDI does to create desktop VMs very quickly, called Instant Clone (aka VM Fork), and has been around for several years now.
With that, you don't even need to do deduplication after the fact, it comes for free. When a new VM is forked, it's memory and disk are copy-on-write from the source/parent VM.
that's a non-sequitur. windows not being Linux at the same time that a Mac was also Unix is what created WSL 1, and the limitations of WSL 1 led to WSL 2.
Windows Sandbox on Windows 10 is pretty quick to boot, and uses a base copy of Windows. I wouldn't be surprised if that's similar to whatever solution they've created for Cloud PC.
I've recently used it to validate/automate whether one of our graphics tool using d3d12 would work, as it had to be deployed on some cloud machine. With small amount of batch file coding and some flags to enable file sharing and DirectX I was able to do it (for some reason, could not make it automatically start the app, but since it was for semi-automatic testing, it was okay - if I tried more, I'm sure there would've been a way).
> Same here, but Microsoft, having source code all the way to the client
That right there is the reason they are doing this. It's not about customers or what people want it's about keeping control of the whole stack, and the power that comes with that.
I decided to reject Citrix or Remote Desktop dev contracts on matters of principle, because you never know what irrational workflow they're coming up with next. If your customer/employer values their control-freakery higher than dev efficiency or sanity, I'm out. Recently, I had a contract where they used Citrix to work on a stupid Windows VM, only to execute Docker containers, winbash build scripts, and git (plus cross-platform IDE). Madness! A friend of mine even has to endure web dev via Citrix. Have fun doing CSS transitions on Edge in a VM in a browser tab. Or attempt to get Teams meeting invites from Outlook-in-VM out to your native or web Teams client on your local machine (as required, you know, for audio/mic). It's terrifyingly stupid.
I had one project I was working on for a client where they thought they were super important and confidential (NVM they were neglecting all of the real security best practices). One of the things they decided is that as part of the project everyone would have to move a VDI solution in a different network and then everyone would have to do all their work from this network, in the name of security. The problem was I was only interacting with the cloud side of this project, working with the actual cloud public API, so everything I was working on was already public facing and didn't care about network concerns.
I ended up writing an email to the decision markers in the project outlining why "1) I didn't want a VDI 2) A VDI would take me forever to setup properly for my workflow anyway* 3) It would do nothing for the project's security to have me working on a VDI and 4) It would be a pain in the but trying to work on a VDI.
I was told that my objections were valid and true but I needed to work on a VDI anyway. It was at that moment I stopped caring about the project.
I did end up winning in the end however as when I finally agreed to do it (not my money the company was setting on fire) they asked me to send a list of what I'd need my VDI to be setup like. So I sent them a list of everything I'd need to mimic my current working environment and what I was doing now, including a Linux OS (The VDI solution was Windows only) with X11 and i3 setup. A full Doom Emacs configuration, special developer libraries and tooling, and several other items. With a long list of alternatives I would need installed if my first choice wasn't available, with specific versions, etc.
I sent off that email and they said they'd set me up with the desktop environment I need and let me know when it was finished being created. I am still waiting for that email letting me know it is setup, and happily working from my real machine until it does become available.
The moral of the story is sometimes the easiest way to thrawt management incompetence is to throw it reams of useless busy work that it will be festering away on while you can get real work done.
After out-of-hand saying "no" once, I had someone offer me a contract by way of a friend. I valued the friend so I met with the client. About half way through, the client's (a large-ish health org) point-of-contact asked about my internet connection because they wanted me to remote desktop into their windows-citrix-machine-thingamputer for "billing purposes"... it was an iOS(in swift) developer role.
I didn't say anything about how preposterous that was and politely declined in email after the meeting. Or so I thought. I, apparently, did so much talking with my eyebrows that it got back to my friend... we broke out laughing when I explained what caused be to be "visually rude" (whatever that means).
When there is one red flag, there are bound to be others.
I used to think Citrix had a lot of latency, when I was working remotely for a particular client, but then one day I went to the office and used the physical PC I'd been using remotely, and it turns out that Windows just sucks that hard. Sometimes it really does just take like half a second for a context menu to appear. Ghastly performance all around, and it was a hot rod of a PC, too.
This comes down to crap VDI implementation. I had a Citrix box at a previous gig, and I could stream YouTube from New York to Florida with very little latency (watchable for the PowerPoint decks I needed to view). If there’s not a GPU connected to the VM (or a slice of one via SR-IOV) you’re gonna have a bad time.
> Unless they mean it'll instantly show a loading screen, I'll bet it doesn't.
with some 50Gbps Ethernet one should be able to quickly load a GB or two os ram image quickly. basically, un-hobernate, with decent infra.
more sophisticated options are having some kind of generic os image in ram one can spawn an instance of, load with local per-user configurations quickly.
being able to get an os going quickly is not a new trick.
> Unless they mean it'll instantly show a loading screen, I'll bet it doesn't.
You absolutely can. I am not sure what tech Microsoft is using, but a similar experience can be had with VMware Horizon VDI product with something called Instant Clone, which is essentially forking an already booted up Desktop VM. On each esxi hypervisor host, you would have one of these parent/seed VMs that is booted up and ready in a frozen state, and when a new desktop VM is needed, it's created from the seed/parent using copy-on-write memory/disk and runtime state less than a second.
Usually the issue with VDI startup times these days is the layers on layers of group policy and agents that need to execute. You don’t notice on PCs because most folks lock their devices instead of rebooting.
Latency like that sounds like a problem in the company network stack somewhere… UK to Netherlands isn’t exactly a high latency wan link.
Same. Now the client has me working in a Amazon Workspace w/ Windows 10. Typing and screen update latency is terrible, I have to run it down scaled on my 4K screen to make it bearable, it disconnects or shuts down due to inactivity and reconnect/boot reminds me of that time I booted Windows 7 on a Dell Mini 9 Netbook (probably an Intel Atom w/ 2GB of RAM) and worst of all, my happy place tool chain is back in macOS or Linux.
Back at my old company, all of our development was done on a secure Sungrid server farm that could only be accessed from the VDI environment. The way my coworker initially showed me how to do it, the terminal was sent to an X session on the VDI, and yet everyone at the company was OK with this. I explained how typing is something that you do tens to hundreds of thousands of times per day, and that a few frames of latency every single key press really fatigues you mentally. The sungrid farm didn't support SSH (for load balancing purposes,) so I eventually had to deepdive into the spec for how to access via terminal, and wrote a script.
But that's not the worst part as I was interviewing around at other companies, I asked them how their computing is done, and you wouldn't believe how many companies have their development environment set up this exact way! These are all major semiconductor companies in Silicon Valley too, not some "IT as an afterthought" industry!
It's refreshing to see that VDIs are about as popular with developers on HN as Google Stadia is with hardcore gamers.
My windows 10 pc goes from off to login screen in under 5 seconds and opening a remote session to my Amazon windows server takes about the same. So I’m sure that instant on experience isn’t too far off. I agree the latency will be brutal and even with a gigabit connection typing on my Amazon windows server is irritating.
Will be interesting to see pricing - I wonder if there will be any kind of discount for orgs that already have most of their people on Windows, or indeed for employees using their own Windows devices.
I could see this being a big security bonus for a lot of companies, especially with the shift to WFH - I'd think a lot of companies had to rather hastily deploy VPNs etc, and that's not the kind of infrastructure you want to rush...
Also, I can imagine some unscrupulous companies seeing this as a money-saving exercise, forcing employees to use their own devices instead of providing one for them.
Considering there is probably going to be discounts for large integrators, and that price adds up to $720/year - if this actually does replace upgrade costs - it might be worth to some companies.
$720.00 per year including the hardware and availability everywhere there is an internet connection. It's $2,160.00 in 3 years, a professional level laptop. The local device could be very cheap and light.
I wonder what are the hardware and bandwidth requirements.
No, because like everything else it has to be done by the compositor.
I’m not going to pretend it’s super simple to make Linux work in a modern VDI environment, there’s a lot that needs to be done to match what Citrix, VMWare and Microsoft do - but it kind of shows that nobody actually thinks Linux on the desktop makes sense when nobody has even tried to make it work.
I use Xpra to remote individual apps. It's not as good as RDP, but better than other remoting solutions like forwarding X11 over ssh, Nomachine or X2go.
this will be easy money for microsoft. we're now back to the day of thin clients. with a full OS streaming from the cloud, Enterprises can reduce costs. And with 0 trust, it means data is more secure either ways i.e prevent future hacks due to incompetent IT policies.
However, as a consumer I get worried about how ownership is slowly being chipped away. slowly we're renting everything.
> Finally, encryption is used across the board. All managed disks running Cloud PCs are encrypted, all stored data is encrypted at rest, and all network traffic to and from your Cloud PCs is also encrypted.
That being said, this level of deep integration means that the moment you boot the cloud PC, all of the data are potentially very vulnerable on the software level.
> A nightmare for privacy and security given that they have the data (and likely the means to unlock it).
365 customers' data is fully encrypted and MS cannot just decrypt it with a click of a button, it is also sharded across multiple storage silos, so that it cannot even be copied out of your tenant unless you are the customer. They also have a 'high encryption' option where the encryption key can be held on-premises and not in any MS data-centre.
> A nightmare for openness given that data interchange will be discouraged in favor of the walled garden.
I have no idea where you got this idea from, or what you even mean. 365 is a platform. If you want to run Linux VMs in it, you can. If you want to reach out and exchange data with non MS services like other cloud apps outside of 365 (or even on-premises apps) you can.
Picture your own personal datacentre full of kit but run by someone else. That is the 365 experience. I'm not someone who drinks the MS Kool-aid, but I do know the facts as I work in a MS partner company. If you'd said something similarly wrong about AWS, I would defend that too.
Microsoft can ban your Microsoft account arbitrarily so GP is right, you don't own your data anymore and Microsoft can keep it and forbid you access, regardless of encryption or not.
I don't recall every to see a post on HN that Microsoft has terminated access to some ones MS (Business) Account. I am sure someone has got their account terminated I just don't recall ever seeing a post about here.
we have seen plenty for google, Amazon, Facebook. I see no reason to think Microsoft is different. Just because we haven't heard of a case yet, doesn't mean it is not possible or that it will never happen. it's more likely just a matter of time.
Sorry, but I don't think that ANY big player, especially from the US, can/may resist NSA/FBI requests to access customer data. And we know from Snowdens leaks that those requests don't just come for criminal or terrorist cases but are routinely used for economic espionage.
Microsoft has pretty well documented cases where they do go to court to prevent data from being shared with governments. Of course, they are not always successful, but they do give a good try.
Haha yeah I was just sending instructions to a team today on how to set up some software and I wasn't sure what OS they were using. I wrote up the linux and mac instructions and when I got to windows i had to think for a minute if i really thought there was a chance someone would have a windows machine. I ended up including instructions, but I know that at least for (edit: modern) development stuff, windows is just an afterthought, nobody is really expecting people to be using it.
In this case I mean, VDI has existed for literally decades now. Are we supposed to congratulate MS for doing what every other cloud provider did more than 10 years ago?
It hasn’t been a very convenient solution though. I suspect the key here is the managing of everyone’s data and machine in the company. Instant-on personal clients with the company directory would be great for administration.
I assure you huge number of developers do their development stuff on windows. It wouldn’t surprise me if it was a majority (given how big the majority is for windows on the desktop overall).
Edit: indeed after some quick googling it does indeed seem to be the clear majority desktop OS even for people identifying as software developers, for example in the StackOverflow developer survey.
I had recently a webinar from Siemens Automation, where they talked about such licence models, just everything in the cloud. I asked myself how they would do that, but now it looks much more clear I guess.
But I have to agree with you. Thank you, but nope.
I read the whole announcement. Sounds like RDP which we’ve had for 20+ years. I’m assuming it’s different but this doesn’t explain how. “We’ve created a cloud PC” So a thin client?
Hasn't this ultimately been the downfall of Dropbox? Not that consumers are doing it themselves, but Microsoft, Google, etc. all spun up competitors and turned their main product into a feature.
Their one selling point is being the independent option, and I'm not sure the people who care about that are actually large enough to sustain them long term...
To be fair so far it looks like it's just VNC from a browser. Call me when I open an app and it's transparently run from a remote server, similar to what they've done with the Windows Defender Application Guard (i.e. it looks like a regular Edge window, but it's run in a VM)
Opening a browser in a OS in a browser in a OS isn't that revolutionary. Cloud Gaming demonstrated this decades ago.
Its more like AWS Workspace. RDP is just a client/server software - someone needs to setup VMs somewhere, ensure files are saved to a network share, install applications on them, give you the IP address etc. Workspace and similar solutions abstract a lot of that away.
As chrisseaton said, this is the exact response users on this very forum had to both Dropbox at its launch ("it's just rsync, why would anyone use it?") and Slack ("it's just IRC, why would anyone use it?"). This is a poor mindset to take when it's clearly not targeted at you. It's for businesses and more casual users who don't want to deal with full local installs, and that userbase is far larger than the HN crowd.
262 comments
[ 0.65 ms ] story [ 280 ms ] threadI can see this working for a lot of places where you want good information security. You can never get the data out of the cloud except via screenshot.
> You can never get the data out of the cloud except via screenshot.
pick one
Not necessarily. They have already had a similar service. This seems to be a simplification of that service? Maybe it's sort of like Amazon offering Lightsail as an alternative to EC2? After clicking around the site for a half hour trying to figure out pricing for Azure Virtual Desktops, I gave up. I figured if you have to ask how much it is, then I can't afford it. Now they are launching a service seemingly directed to users like me, but they still can't give us prices. I assume they will in time for launch, but I'm getting really sick of hunting for prices on Azure. Every minute I have spent on that site has been wasted.
I doubt they would beat AWS on pricing. The AWS instances appear to be really well priced relative to what you could get if you tried to do the same with EC2. I couldn't see MS being as cheap. From what I remember, Azure is generally more expensive across the board.
That's not a gigantic barrier if you're an enterprise, but figuring out licensing for Workspaces if you don't have a couple smart Microsoft admins and money to burn is really hard. This is easy, since all of the license entitlements are enforced through their portal. (if you can start an instance you are licensed)
The pricing is really cheap. Looking at the pricing of instances on EC2, I don't know how they get so cheap. I'm sure the answer is in the details if I were to go digging (different hardware) but it's cheap.
I don't think the Asure alternative will be even close. While AWS makes Workspaces easy and affordable for just about any individual, that person is probably still not the target for MS. I'm guessing this new offering is simply the same service as they already offer, for businesses which want systems for less than 100 people, and are still able to dish out a load of cash.
The benefit to Azure is that it's Microsoft. They aren't going to compete on pricing for anything. If pricing is your main concern, then you don't to Azure (or even Google Compute.) If your boss says you have to use Azure, then that's when Azure has the advantage. ;)
Pricing for Azure Virtual Desktop starts with a hundred users minimum. (available at https://azure.microsoft.com/en-us/pricing/calculator/)
I don't see the obvious connection here. Software is easy to install. But Azure is not really close in scale of deployment to AWS.
> Parallels is releasing an update to its Desktop virtual machine software that allows M1 Mac owners to install Windows 10 on Arm. Parallels Desktop 16.5 now includes the necessary native support to run the Arm version of Windows on M1 chips, following Apple’s decision not to support Boot Camp on M1 Macs.
I'm very sorry that you bought a computer that doesn't support any third-party operating systems, by design. (Apple won't support boot-camp on it.) If this feature is important to you, perhaps you should return your M1, and go to Best Buy and purchase one of the many other choices.
"The main drawback is that you’ll need to run a preview version of Windows to make this all work. Microsoft only currently licenses the Arm version of Windows 10 to PC makers, so there’s no official way to buy a copy yet."
The Web it's just reimplementing the clients, badly, requiring twice the requeriments.
This looks interesting on second thought. A good way to consolidate workplace systems for low-bandwidth display applications where consistently low latency is not a big concern.
I hope that this is not the beginning of the next iteration of Windows for the general consumers. I like the OS, and I'd like it to remain on my hard drive.
The millions of unprotected businesses of the world can skip zerotrust / firewall / antivirus / network redesigns and jump right to pc-aas with azure-ad.
For all the "I dont want big brother controlling my device" there should be an equal "I dont want teams with millions of dollars carelessly building infrastructure that can be weaponized against society."
The risk is less Microsoft ever reading your data and more never being able to divorce them at a later date. Entrenchment.
Those are problems that exist similarly whether youre in the cloud, or something on prem that you bought, built or customized.
Conversely, for anyco without good hygiene, standardized process, discipline, and respect for keeping things tidy, out of the box cloud process can be a godsend. It's not just minimization of risk, but built in architecture and integration and flow, which in and of itself can be more important than product features.
You own nothin, you're a user.
2030.
https://www.microsoft.com/en-us/windows-365
Which means that for this reason alone I have to dedicate 40GB of my laptop's hard drive to a Windows partition with office, adobe, and other stuff installed.
And if she's not physically near me, I have no way of getting the script to her with any guarantee it'll behave the same or work at all on her work computer.
Having worked within unix for so long, I'd started taking it for granted how everything is either portable, or can be easily containerized, Windows and accompanying products are incredibly environment finicky and janky overall.
To be able to just do the remote version of "handing over the laptop" will be a godsend.
This isn't new, I don't believe.
That being said Windows will happily exist as a VM, issues only arise when you need a dedicated GPU or OpenGL.
It will be interesting to see if Adobe's activation/licensing copes with this, or every time you log in the software needs a new activation as it detects the underlying machine is different.
Just a bit nicer to use (productized), which is important.
[0]: https://news.ycombinator.com/item?id=9224
Or will Microsoft start selling Windows OS that only does Remote Connection to OEMs? i.e Only used for Windows 365? Basically Microsoft version of ChromeOS.
Unless they mean it'll instantly show a loading screen, I'll bet it doesn't.
I've used various VDI implementations over the years, and they've all been pretty slow to get to a working desktop.
I also wonder about latency. I have a 100/20 FTTC connection at home, which I find to be fast. Most recent VDI I used was Citrix, where I was expected to code in a VDI hosted in Netherlands (I'm in the UK) - the latency when typing drove me fucking NUTS! It was mostly just long enough to be intensely irritating and distracting, but occasionally latency would increase to a few seconds too.
Ironically windows does not implement fork()
With that, you don't even need to do deduplication after the fact, it comes for free. When a new VM is forked, it's memory and disk are copy-on-write from the source/parent VM.
The ZwCreateProcess kernel api can do fork() semantic.
And the latency, I completely understand you. You learn to live with it after a while, sometimes you don't even notice it.
That right there is the reason they are doing this. It's not about customers or what people want it's about keeping control of the whole stack, and the power that comes with that.
Citrix is a partner, so is VMWare afaik.
I ended up writing an email to the decision markers in the project outlining why "1) I didn't want a VDI 2) A VDI would take me forever to setup properly for my workflow anyway* 3) It would do nothing for the project's security to have me working on a VDI and 4) It would be a pain in the but trying to work on a VDI.
I was told that my objections were valid and true but I needed to work on a VDI anyway. It was at that moment I stopped caring about the project.
I did end up winning in the end however as when I finally agreed to do it (not my money the company was setting on fire) they asked me to send a list of what I'd need my VDI to be setup like. So I sent them a list of everything I'd need to mimic my current working environment and what I was doing now, including a Linux OS (The VDI solution was Windows only) with X11 and i3 setup. A full Doom Emacs configuration, special developer libraries and tooling, and several other items. With a long list of alternatives I would need installed if my first choice wasn't available, with specific versions, etc.
I sent off that email and they said they'd set me up with the desktop environment I need and let me know when it was finished being created. I am still waiting for that email letting me know it is setup, and happily working from my real machine until it does become available.
The moral of the story is sometimes the easiest way to thrawt management incompetence is to throw it reams of useless busy work that it will be festering away on while you can get real work done.
After out-of-hand saying "no" once, I had someone offer me a contract by way of a friend. I valued the friend so I met with the client. About half way through, the client's (a large-ish health org) point-of-contact asked about my internet connection because they wanted me to remote desktop into their windows-citrix-machine-thingamputer for "billing purposes"... it was an iOS(in swift) developer role.
I didn't say anything about how preposterous that was and politely declined in email after the meeting. Or so I thought. I, apparently, did so much talking with my eyebrows that it got back to my friend... we broke out laughing when I explained what caused be to be "visually rude" (whatever that means).
When there is one red flag, there are bound to be others.
with some 50Gbps Ethernet one should be able to quickly load a GB or two os ram image quickly. basically, un-hobernate, with decent infra.
more sophisticated options are having some kind of generic os image in ram one can spawn an instance of, load with local per-user configurations quickly.
being able to get an os going quickly is not a new trick.
You absolutely can. I am not sure what tech Microsoft is using, but a similar experience can be had with VMware Horizon VDI product with something called Instant Clone, which is essentially forking an already booted up Desktop VM. On each esxi hypervisor host, you would have one of these parent/seed VMs that is booted up and ready in a frozen state, and when a new desktop VM is needed, it's created from the seed/parent using copy-on-write memory/disk and runtime state less than a second.
Usually the issue with VDI startup times these days is the layers on layers of group policy and agents that need to execute. You don’t notice on PCs because most folks lock their devices instead of rebooting.
Latency like that sounds like a problem in the company network stack somewhere… UK to Netherlands isn’t exactly a high latency wan link.
Same. Now the client has me working in a Amazon Workspace w/ Windows 10. Typing and screen update latency is terrible, I have to run it down scaled on my 4K screen to make it bearable, it disconnects or shuts down due to inactivity and reconnect/boot reminds me of that time I booted Windows 7 on a Dell Mini 9 Netbook (probably an Intel Atom w/ 2GB of RAM) and worst of all, my happy place tool chain is back in macOS or Linux.
I had the exact same experience.
Back at my old company, all of our development was done on a secure Sungrid server farm that could only be accessed from the VDI environment. The way my coworker initially showed me how to do it, the terminal was sent to an X session on the VDI, and yet everyone at the company was OK with this. I explained how typing is something that you do tens to hundreds of thousands of times per day, and that a few frames of latency every single key press really fatigues you mentally. The sungrid farm didn't support SSH (for load balancing purposes,) so I eventually had to deepdive into the spec for how to access via terminal, and wrote a script.
But that's not the worst part as I was interviewing around at other companies, I asked them how their computing is done, and you wouldn't believe how many companies have their development environment set up this exact way! These are all major semiconductor companies in Silicon Valley too, not some "IT as an afterthought" industry!
It's refreshing to see that VDIs are about as popular with developers on HN as Google Stadia is with hardcore gamers.
I could see this being a big security bonus for a lot of companies, especially with the shift to WFH - I'd think a lot of companies had to rather hastily deploy VPNs etc, and that's not the kind of infrastructure you want to rush...
Also, I can imagine some unscrupulous companies seeing this as a money-saving exercise, forcing employees to use their own devices instead of providing one for them.
This way too expansive, I'm not sure that'll find a place in IT places, most professionals already know how to work with a VPS..
Unless some tech illiterates management makes decisions, I fail to see how this can be successful
I wonder what are the hardware and bandwidth requirements.
Lack of app ecosystem in Linux? i think that's the problem..
Also remote desktop is about way more than mouse, keyboard and graphics.these days people expect usb device forwarding and audio too
I’m not going to pretend it’s super simple to make Linux work in a modern VDI environment, there’s a lot that needs to be done to match what Citrix, VMWare and Microsoft do - but it kind of shows that nobody actually thinks Linux on the desktop makes sense when nobody has even tried to make it work.
https://www.weforum.org/agenda/2016/11/8-predictions-for-the...
RE: https://www.computerworld.com/article/2867542/microsoft-tout...
AWS Workspaces is actually pretty good too.
That said, it is a nightmare for privacy, security, and openness.
A nightmare for privacy and security given that they have the data (and likely the means to unlock it).
A nightmare for openness given that data interchange will be discouraged in favor of the walled garden.
That being said, this level of deep integration means that the moment you boot the cloud PC, all of the data are potentially very vulnerable on the software level.
> A nightmare for privacy and security given that they have the data (and likely the means to unlock it).
365 customers' data is fully encrypted and MS cannot just decrypt it with a click of a button, it is also sharded across multiple storage silos, so that it cannot even be copied out of your tenant unless you are the customer. They also have a 'high encryption' option where the encryption key can be held on-premises and not in any MS data-centre.
> A nightmare for openness given that data interchange will be discouraged in favor of the walled garden.
I have no idea where you got this idea from, or what you even mean. 365 is a platform. If you want to run Linux VMs in it, you can. If you want to reach out and exchange data with non MS services like other cloud apps outside of 365 (or even on-premises apps) you can.
Picture your own personal datacentre full of kit but run by someone else. That is the 365 experience. I'm not someone who drinks the MS Kool-aid, but I do know the facts as I work in a MS partner company. If you'd said something similarly wrong about AWS, I would defend that too.
Edit: indeed after some quick googling it does indeed seem to be the clear majority desktop OS even for people identifying as software developers, for example in the StackOverflow developer survey.
What? I don't know where you are from but in Europe (read: outside US) I estimate that over 90% of software development is done on MS stack.
But I have to agree with you. Thank you, but nope.
Their one selling point is being the independent option, and I'm not sure the people who care about that are actually large enough to sustain them long term...
Opening a browser in a OS in a browser in a OS isn't that revolutionary. Cloud Gaming demonstrated this decades ago.
What cloudd gaming service existed devades ago?
Windows Server has a feature like that called RemoteApp, it's pretty cool!