Live data from Hacker News

Avoid Non-Microsoft Antivirus Software

robert.ocallahan.org

171–180 of 388 posts

Re: Avoid Non-Microsoft Antivirus Software

#171

Ok, disclaimer first: I've previously worked at Kaspersky Lab (incident response division). Now, I want to say that many of the incidents that we have investigated, would have been prevented by anti-virus software (in many cases AV software was deliberately disabled by user). And I'm talking about incidents that resulted in million-dollar thefts - not just cases of some user getting cryptolocker on their home compute…

Any AV software is better than having none but that's not the point of the article. It specifically recommends Microsoft's AV and to stay clear of all the others. I'm sure it's hard on all the AV vendors out there but with Microsoft Essentials and Windows Defender I don't see the need for a third party AV.

Take a look at this collection of test results that MS security products received over the past 2 years, compared to the software at the top of the list: https://bestantivirus.reviews/tools/test-results-calculator?...

I mean, I get the attitude of "common sense is best" - users who know what they're doing will most likely avoid infection if they're not extremely unlucky.

However, I still find it amazing that while people pay a lot more for insurance against less likely events, but the thought of paying few cents/day for an added layer of security for their machine (the same machine that in many cases stores a lot of personally and/or financially valuable information) riles them up.

When you're online you're constantly exposed to threats, and while it's easy enough to ignore spam email and unsolicited messages on Skype and FB, a momentary lapse of reduced attention could get you infected.

For example, here are some ransomware infection stats: https://blog.barkly.com/ransomware-statistics-2016

/rant

Re: Avoid Non-Microsoft Antivirus Software

#172
post #55

It's irresponsible to make such a broad claim and back it up with really vague anecdotal evidence. Yes, there are a lot of lousy AV products that are at best a break-even for security, but there are some that don't suck and generally you have to pay for them - what a strange concept. I'm not going to advocate for any particular vendor as I used to work for an AV company (and currently use a product from a competitor)…

I completely agree with you, I find this "disable antivirus" to be such a bad advice! Yes, it may work for tech savvy or security aware person. If you know what you're doing you're much less likely to get into problems. It won't work for general public though. And the argument being made that "for example, see bugs in AV products listed in Google's Project Zero. These bugs indicate that not only do these products ope…

Actually I don't think they could. A-V products inevitably insist on running with very high privileges on target machines, restricting the OS' ability to mitigate any vulnerabilities.

A-V products also have been shown be research from Google Project Zero to be doing very dangerous things (like running a local web server you can send commands to that are executed on the device).

When you combine high-privileged code with dangerous practices you get a very nasty set of risks that aren't present with most other software.

As there is an alternative that doesn't have similar problems (MS Defender) it seems sensible to recommend it.

Re: Avoid Non-Microsoft Antivirus Software

#173
post #7

This is my advice to everyone I know that gets a new Windows PC. Windows 10's built-in protection is more than adequate, and catches the majority of bad software - anything more is unnecessary, and many of the AV vendors are predatory.

It sucks that you cannot reset your Windows to MS-Vendor settings. For example if you get some Acer laptop and reset it using windows built-in functionality it'll still reset it with all the bloatware - including AV.

[deleted]

Re: Avoid Non-Microsoft Antivirus Software

#174

Earlier quoted context omitted.

citation needed https://github.com/Homebrew/brew/blob/master/docs/Analytics....

That link says nothing about selling your data. Also note that while Homebrew may be open-source, it is not "free software".

BSD-2 license isn't free?

Re: Avoid Non-Microsoft Antivirus Software

#175
post #22

"Microsoft AV products" aren't exempt from breaking things with poorly implemented features. MSE on Windows 7 makes games (specifically, fresh installs of StarCraft II, CS:GO and Overwatch) unplayable for me due to CPU usage spikes, apparently due to it thinking that various game executables and settings files are suspicious. Exempting the directories from scanning and disabling suspected malware sample submission ha…

The thing is most anti-malware products cause perf. issues, but it seems to be the 3rd party ones that actually make your security worse with poorly implemented and secured features. It seems bizarre to me that commercial paid for security products have such poor coding practices that a lone (albeit very talented) researcher can find so many dangerous security vulnerabilities in them.

These vendors should be leading the way in secure coding and design due to the high-privilege level their code runs at.

Re: Avoid Non-Microsoft Antivirus Software

#176
post #92

Earlier quoted context omitted.

_Everyone_ is collecting our data nowadays. Who's left to sell it to?

Not true. Google collects your searches. They don't sell your searches, they sell whatever they infer from your searches (your compiled and quite vague profile and I know, because I interacted with their AdSense platform), because they'd be stupid to sell your actual searches, since that's their most valuable property. Does anybody else know your search history? Besides the NSA, whom I assume have access to all US-ho…

Actually, I still have a problem when all my "actual searches" becomes someone else's "most valuable property".

Of course there are some other less intrusive search engines (DuckDuckGo, maybe Qwant), but unfortunately they still are less efficient than Google for fine or rare searches.

Re: Avoid Non-Microsoft Antivirus Software

#177
post #168

Earlier quoted context omitted.

That link says nothing about selling your data. Also note that while Homebrew may be open-source, it is not "free software".

What makes it nonfree?

The fact that it uses GA contradicts Free Software's definition of free software, however it is open-source.

Re: Avoid Non-Microsoft Antivirus Software

#178

Earlier quoted context omitted.

Chrome, Firefox. Probably more. https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NS...

That's for the Wireshark debugging use case.

Indeed it is, yet it can be used for other things as well. Such as an AV that would want to MITM everything without supplying its own CA.

Re: Avoid Non-Microsoft Antivirus Software

#180

Earlier quoted context omitted.

How does piracy come into this?

lots of binaries are not only patched to circument DRM, but also to contain malware

How does this relate to the issue that antivirus companies do horrible things and hold ignorant paying users who don't even know how to pirate software, and legitimate software producers hostage like some sort of technical mafia?
Post reply on HN