Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kaspersky AV injected unique ID allowing sites to track users in incognito mode

heise.de

Post reply on HN
Print view View original

61–70 of 164 posts

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#61

Post by kipqi »

trilila wrote: post #51
chmod775 wrote: post #48

Earlier quoted context omitted.

Windows with its built-in Windows Defender and your Common Sense 2019 Computer Professional Edition is going to be enough nowadays.

As a rare windows user (two or free times a year) i never trust a machine without an av. maybe things changed, but i see windows as so unsafe that i would not even login with to regular email, let alone make online payments. I simply see that os as a vulnerability by default.

Sorry to tell you that you simply have no idea of what you're talking about.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#62

Post by mirimir »

FDSGSG wrote: post #60
mirimir wrote: post #8

Earlier quoted context omitted.

Indeed. But then, I don't trust Microsoft, either. In Debian, I can be reasonably confident that no information leaves the system without my authorization. Edit: Just out of curiosity, am I wrong in mistrusting Microsoft, or in trusting Debian?

> or in trusting Debian? From a security POV Desktop Linux is an utter disaster. For attackers it's like going back a decade in time.

Please explain.

Security from what? By default, there are no services listening. And what malware runs on Linux?

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#63

Post by buboard »

manishsharan wrote: post #12

Do we even need A/V for windows ? I think Microsoft Defender along with "proper digital hygeine" obviates the need for dedicated A/V solutions.

The only annoying thing about it is that it periodically notifies me that "It has not found any threats". I guess even computer programs feel lonely at times.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#64

Post by kipqi »

trilila wrote: post #57
chmod775 wrote: post #55

Earlier quoted context omitted.

I don't run Windows myself, but honestly: Remote exploitable Windows vulnerabilities on a default install are somewhat rare nowadays. MS has come a long way here.

I remember the smashing the stack for fun and profit windows days. It was so easy to inject shell code it was laughable. Btw can you still name a file smss.exe, run it, and not end the process with the task manager?

You live in the XP days.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#65

Post by FDSGSG »

mirimir wrote: post #62
FDSGSG wrote: post #60

Earlier quoted context omitted.

> or in trusting Debian? From a security POV Desktop Linux is an utter disaster. For attackers it's like going back a decade in time.

Please explain. Security from what? By default, there are no services listening. And what malware runs on Linux?

>By default, there are no services listening.

Desktop linux, not "the Linux kernel". The kernel isn't amazing, but on the desktop side you regularly see downright absurd stuff like this https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit...

and less surprising bugs like this https://donncha.is/2016/12/compromising-ubuntu-desktop/

The quality of software outside of some widely deployed server software tends to be quite poor, exploit mitigations are not being implemented.

>And what malware runs on Linux?

Far too many to list. You can easily find hundreds of public examples. This terrible wikipedia page provides a decent starting point with a list of names to google https://en.wikipedia.org/wiki/Linux_malware

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#66

Post by josefx »

throwamay1241 wrote: post #26

There's lots of 'Do we need Kaspersky' type questions in here already. The more pertinent question is whether AV is actually effective, or if stronger countermeasures like application whitelisting are needed? https://www.youtube.com/watch?v=gvcgHkeZ1i4&list=PLqz80p7f6d...

You would need a document whitelist since many programs can be hijacked using buffer overflow attacks or outright support execution of arbritrary scripts.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#67

Post by cies »

Anti-virus here means anti-privacy. What shocks me most is that this is in the paid versions as well.

I run Linux and have ClamAV installed for some compliance thingy, yet I have never run it (the compliance thingy tells me to have AV installed, not to actually run it). I can totally recommend some up-to-date Linux distro in case you want to steer clear of "virusses (etc)".

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#68

Post by mcny »

noselasd wrote: post #40
HeavenFox wrote: post #24

Earlier quoted context omitted.

Every single company I worked for installed AV on our work computers, which was a huge resource hog and made the highest-specced MacBook Pros feel like cheap netbook. I suspect it is mandated by some sort of compliance requirement, and the IT departments are just ticking a box. Maybe that's how this industry is still alive.

If you have an IT department, they will insist on AV software just to cover their ass. Noone there wants to be the one explaining to a clueless boss that they didn't use av software og something bad happened.

I don't mind having an antivirus on Windows but I despise having real-time file scanning when I have a computer with spinning rust. Node Package Manager install or yarn install creates thousands of tiny files and my understanding is that these "antivirus" software try to scan each file at the same time as npm wants to create them or in earlier days even as subversion was trying to do something.

I imagine things are different for people on PCIe NVMe SSD but Windows (or any modern OS I guess with any antivirus) is not so good if we are on spinning rust.

I think if we insist on real-time file scanning, the least we can do is provide at least a decent SATA SSD like the Samsung 860 EVO and adequate RAM to avoid thrashing.

Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode

#70

Post by throwaway_391 »

mirimir wrote: post #56
throwaway_391 wrote: post #49

I don't fully understand why everyone gets upset over browser leaks when in private mode - most websites interested in tracking private sessions will just associate private and non-private sessions by IP address. If you're paranoid enough to use a VPN for 'private' traffic, you should probably be running such sessions in a VM using something like the tails live CD.

For sure. But using Tails in VMs isn't recommended. Better is using Whonix, because it isolates the Tor client and userland in separate VMs. It also has a LiveCD mode. And for added security, you can run it in Qubes.

Funny that you namedrop like three security products but fail to evaluate which hypervisor should be used, which is probably the most important part of a secure environment if unauthorized code execution fits in your threat model.
Post reply on HN