Live data from Hacker News

Ask HN: Is no anti-virus software still best practice for mac?

news.ycombinator.com

51–60 of 78 posts

Re: Ask HN: Is no anti-virus software still best practice for mac?

#51
post #37

I never used any third-party antivirus software. AFAIK both Windows and macOS have built-in antivirus software, although I think that it's not required either. Properly patched software to minimize risk of RCE vulnerability and brain to avoid running untrusted programs should be enough.

macOS does not have built-in antivirus software, hence the question.

I believe it's called XProtect. It checks files with known virus signatures.

Re: Ask HN: Is no anti-virus software still best practice for mac?

#52
post #18

My approach is to make my PC disposable. With all cloud services its a lot easier than it used to be. IE * Working code in github * Photos in offline multiple HDD * Docs in cloud servers and important ones printed out. This way I dont really care if I get a virus, or gets stolen, or destroyed in fire or HDD crash etc. I actually locked myself out of my encrypted laptop and it didnt really matter - I just reinstalled…

My approach as well, except I don't deal with offline HDD, I keep all my photos in Google Photos, offline docs in Google Drive.

Unless you are a professional film editor or photographer there is no need for RAW images (and even then, it's arguable), which is the main space sucker. The $10 a month to have Google manage it all for me is totally worth it.

Re: Ask HN: Is no anti-virus software still best practice for mac?

#53
post #18

My approach is to make my PC disposable. With all cloud services its a lot easier than it used to be. IE * Working code in github * Photos in offline multiple HDD * Docs in cloud servers and important ones printed out. This way I dont really care if I get a virus, or gets stolen, or destroyed in fire or HDD crash etc. I actually locked myself out of my encrypted laptop and it didnt really matter - I just reinstalled…

reminds me I often enjoy virustotal as a serious check for some files.

Re: Ask HN: Is no anti-virus software still best practice for mac?

#54
post #13

If you are an employee or contractor - your risk is higher than you might think. As an employee, if you do 'non-work' activity on your laptop that compromises it's integrity - you could be at actual monetary/legal risk. I would highly recommend you have one. Also, as a contractor you run a higher risk. With Mac, configure your built in firewall. Run a "paid for" version of Bitdefender or other. Use VPN ad blocking. U…

[deleted]

Re: Ask HN: Is no anti-virus software still best practice for mac?

#55
post #35

Earlier quoted context omitted.

I am super skeptical about ad guard and I'm looking for someone to allay that skepticism. It's just... too clean. I don't trust software this perfect, especially since it's made in Russia and sees all the internet traffic on my computer.

I didn't know it was made in Russia! Up until now I've had a good experience, and trusted reviews. But as an experiment I just tried removing the little snitch filter that lets adguard create all outgoing connections. it looks like adguard will request some or all requests that my web browser makes (like, it'll also request JS from slack or facebook). This might be because it detects and blocks crypto miner JS, or ma…

Yeah, I ran their free trial and had a good experience. I did the same kind of tests you did, but I still don't feel comfortable with it. It's just too slick. That mixed with the fact that their entire team is Russian nationals... I dunno. Too sketchy.

Re: Ask HN: Is no anti-virus software still best practice for mac?

#56

In a corporate setting: At Etsy we use OSQuery on all of our corp machines(macOS) to help with malware/virus detection. We use community rules: https://github.com/facebook/osquery/blob/master/packs/osx-at... In addition to community rules we also curate a bunch of rules in house from malware we've discovered across our fleet. We then aggregate this info into ELK and alert on it. At Home: OSQuery as well + tiny elk st…

Got any links to articles to walk through getting this set up?

Re: Ask HN: Is no anti-virus software still best practice for mac?

#58

It is my considered opinion that "no anti-virus" is still the best practice for nearly everything. About the only place it makes any sense is in your email filters or anywhere else the public can send random bullshit. At best they incur an ever present performance hit while only catching the lowest of low-hanging fruit. At worst they are constantly getting in your way with false positives (which train you to ignore a…

Eh, your "not as dumb as you think" is unnecessarily hostile. Also, nobody except you was calling people dumb, it's some weird rhetoric.

But I will say that I regularly help people including my parents who are tricked by those fake download-button ads. I'm not calling them dumb -- you were in your own premise. But that's one avenue for people to install malware on their computer.

"Don't worry about it, people don't get tricked!" is just false.

Re: Ask HN: Is no anti-virus software still best practice for mac?

#59

you need AV on your corporate macs. No excuses. For those in "my enterprise doesnt need AV, because AV is stupid" camp: In the last week, the enterprise AV: * Blocked 15 cryptominers * Blocked 3 email based ransomware attachments * Blocked 6 phishing emails * Blocked 3 installs for MacKeeper (PUA) * Found 4 other adware-type infections on hosts Without it, these things would have hit the organisation. AV -- it will c…

So far my corporate Mac antivirus has only blocked iOS apps that I personally built and it completely breaks the iOS simulator. It has caused me hours of headache and it regularly locks up my machine to the point that I have to restart it almost daily.

All of the things you mentioned can be stopped using far less intrusive methods than an always on, always scanning, antivirus.

The usual excuse given for requiring an antivirus is PCI compliance.

Re: Ask HN: Is no anti-virus software still best practice for mac?

#60
post #27

Have one but never needed it so far - or it didn't catch the virii ;) I use bitdefender at least it's quite unobtrusive on mac (sick of the windows version!). Sophos is free and afaik not too bad if you need one: https://home.sophos.com/free-mac-antivirus Further I use: - https://objective-see.com/products/knockknock.html - https://objective-see.com/products/oversight.html - https://objective-see.com/products/blockbl…

OT, but your pluralisation of virus made me stumble upon the following article: http://www.ofb.net/~jlm/virus.html

Seems you're right. I didn't pay a lot of attention to it tbh ;)
Post reply on HN