Kaspersky in the Middle – what could possibly go wrong?
1–10 of 45 posts
Re: Kaspersky in the Middle – what could possibly go wrong?
#2suddenly lots of anti kaspersky articles on legacy media(and their meta like hn) almost like written to order. this happened before usa banned them from gov contracts. so predictable.
Re: Kaspersky in the Middle – what could possibly go wrong?
#3Which other AntiVirus vendors do this? How can you opt-out and is there a point to installing anti-virus software to begin with?
Re: Kaspersky in the Middle – what could possibly go wrong?
#4Which other AntiVirus vendors do this? How can you opt-out and is there a point to installing anti-virus software to begin with?
To answer the last, at this point, you install (or have preinstalled) AV to comply with enterprise IT policies.
Re: Kaspersky in the Middle – what could possibly go wrong?
#5Which other AntiVirus vendors do this? How can you opt-out and is there a point to installing anti-virus software to begin with?
If you use Windows, use Windows Defender. It doesn't MitM your connections and has a comparable detection rates for 0days and common malware to all other modern AVs. Microsoft has put a lot of work into making Defender as secure as possible (you can even run it inside a VM so any exploit of defender is just trapped inside a HyperV VM instead of your system).
There is no point in installing any other AV vendor; they all suck, their software sucks, they ask way more than it's worth (nothing) and they frequently break security measures of software all over the ecosystem (some AVs still disable ASLR/KASLR to make injecting their DLL into all processes easier)
Re: Kaspersky in the Middle – what could possibly go wrong?
#6Which other AntiVirus vendors do this? How can you opt-out and is there a point to installing anti-virus software to begin with?
To answer the last, at this point, you install (or have preinstalled) AV to comply with enterprise IT policies.
Or be protected from bank fraud. Not that the AV will stop it, but having no AV gives the banks a reason to reject the claim. At least with DB in Germany. But they accept Windows Defender!
Re: Kaspersky in the Middle – what could possibly go wrong?
#7Which other AntiVirus vendors do this? How can you opt-out and is there a point to installing anti-virus software to begin with?
If you use Windows, use Windows Defender. It doesn't MitM your connections and has a comparable detection rates for 0days and common malware to all other modern AVs. Microsoft has put a lot of work into making Defender as secure as possible (you can even run it inside a VM so any exploit of defender is just trapped inside a HyperV VM instead of your system). There is no point in installing any other AV vendor; they a…
Also, Microsoft has an incentive to eliminate viruses and malware completely - to make their OS safer. Third party AV companies rely on continuing threats to stay in business. I'm not saying AV companies hold back or help malware out, I'm saying Microsoft has good reason to throw huge resources at the problem as a whole.
Re: Kaspersky in the Middle – what could possibly go wrong?
#8Earlier quoted context omitted.
If you use Windows, use Windows Defender. It doesn't MitM your connections and has a comparable detection rates for 0days and common malware to all other modern AVs. Microsoft has put a lot of work into making Defender as secure as possible (you can even run it inside a VM so any exploit of defender is just trapped inside a HyperV VM instead of your system). There is no point in installing any other AV vendor; they a…
Also, Microsoft has an incentive to eliminate viruses and malware completely - to make their OS safer. Third party AV companies rely on continuing threats to stay in business. I'm not saying AV companies hold back or help malware out, I'm saying Microsoft has good reason to throw huge resources at the problem as a whole.
...and to build on your comment: Incentive to not slow down the performance of the OS while protecting it.
Re: Kaspersky in the Middle – what could possibly go wrong?
#9The diagram doesn't show a data link from the AV software to the AV vendor headquarters. Is that correct?