Live data from Hacker News

Kaspersky AV injected unique ID allowing sites to track users in incognito mode

heise.de

141–150 of 164 posts

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#141
post #81

Earlier quoted context omitted.

Windows with its built-in Windows Defender and your Common Sense 2019 Computer Professional Edition is going to be enough nowadays.

Just to clarify, does Common Sense 2019 Pro come with an ad-blocker for protection against malvertising? I still run into a lot of people who think malvertising isn't a thing. It was worse back when flash adverts were common, but it's still really bad

Install them uBlock Origin and 99% of the problems are gone.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#142

The organization affiliated with FSB tracks their users. Wow, we're definitely entering big news epoch.

Kaspersky is not affiliated with FSB.

Russian cyber-security company claiming they're not affiliated with Kremlin in any way. What could go wrong given right now they're preparing for the next big war?

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#143
post #138

Earlier quoted context omitted.

Specifically, what is bad in pointing out windows is a security liability, and a low quality os generally speaking? Along with blunt user spying though ads inside a product you paid for? Something tells me i stepped into a vicious fandom of that os.

Perhaps your arguments would be more persuasive if you didn't immediately label anyone who disagrees with you a "fanboi".

Or if there was literally any substance to them besides ranting and whining.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#144
post #68

Earlier quoted context omitted.

If you have an IT department, they will insist on AV software just to cover their ass. Noone there wants to be the one explaining to a clueless boss that they didn't use av software og something bad happened.

I don't mind having an antivirus on Windows but I despise having real-time file scanning when I have a computer with spinning rust. Node Package Manager install or yarn install creates thousands of tiny files and my understanding is that these "antivirus" software try to scan each file at the same time as npm wants to create them or in earlier days even as subversion was trying to do something. I imagine things are d…

windows defender does the same thing by default. first step setting up my workstation for c++ dev is always specifically excluding my source code directories and msvc.exe and friends. sometimes takes me a few days to notice all the ancillary processes that will trigger the file scanning and whitelist them. otherwise it eats a whole logical core every time I kick off a compile.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#145

Earlier quoted context omitted.

I will blow your mind when I will tell you to use a RamDisks for fastest run times wink wink

If you use a Samsung SATA SSD, just enable RAPID mode in the Samsung Magician program. The different with and without is huge . (Enabling RAPID mode basically creates an invisible RAM disk and uses it under the hood.)

is this different than just allocating swap space on the SSD?

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#146

Earlier quoted context omitted.

If you use a Samsung SATA SSD, just enable RAPID mode in the Samsung Magician program. The different with and without is huge . (Enabling RAPID mode basically creates an invisible RAM disk and uses it under the hood.)

is this different than just allocating swap space on the SSD?

Very different. The RAPID mode is basically a RAM disk under the hood -- it does its best to cache often-accessed files and temporarily prioritise loading big files on demand (which is the use-case of games, they often have huge files with textures and sound).

Gotta say, it works amazingly well. I am getting almost PCI/NVMe speeds on my SATA III SSD.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#147
post #89

Earlier quoted context omitted.

Reading sibling comments I have an idea for a startup. Make an AV, that does not really do anything, but can be used by thoughtful companies to "tick the box". Sell licenses and then do only the minimum required for compliance. It could be described that it uses Windows Defender service to provide the basis of AV solution.

An AV that alarmed on unpatched vulnerabilities might be better. Attackers will resignature their code to evade everything on VT, then spam the world to hit whoever hasn't patched. For ransomware anyway. If they're targeting you specifically they'll find out what you're running and customize against it.

A vulnerability scanner would be welcome. I would even run something like that on my linux machines.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#148
post #74

Earlier quoted context omitted.

The majority of the Windows haters I come across seem to be the same.

I see windoze fanboys are having a leg-day today. Enjoy your ads and spying. Oh an the virii.

Since you've ignored our request to stop posting flamebait, we've banned this account.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.

https://news.ycombinator.com/newsguidelines.html

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#149
post #97

Earlier quoted context omitted.

They should generate that certificate along with private key on your local machine, so it does not allow anyone else to intercept your traffic. Even seemingly harmless applications can do that. For example Blizzard Battle.net Launcher (used for all games) does that.

The issue is that you must check the external connection, i.e. in: User antivirus Site If not a hostile actor can inject themselves in a way which is completely invisible to the user: User antivirus Hostile Site Actually checking is tricky but many antivirus tools don't even try.[1] [1] https://news.ycombinator.com/item?id=10727431

Well, if antivirus does MITM and does not check website certificate properly, it's seriously broken. I expected that any MITM proxy properly validates server certificate.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#150
post #66

There's lots of 'Do we need Kaspersky' type questions in here already. The more pertinent question is whether AV is actually effective, or if stronger countermeasures like application whitelisting are needed? https://www.youtube.com/watch?v=gvcgHkeZ1i4&list=PLqz80p7f6d...

You would need a document whitelist since many programs can be hijacked using buffer overflow attacks or outright support execution of arbritrary scripts.

Or we could, you know, just stop using Microsoft Office and Adobe products which are a huge, if not the biggest culprit of that kind of crazy behaviour.
Post reply on HN