Thread

1. x-complexity · 1790323340 · focus · HN ↗

   Chalk another one up for "Antiviruses causing more problems than solving them".

   They 'worked' when they initially just scanned files for known malicious signatures. Now they're the equivalent of a sledgehammer to a wall with all of the extra bells & whistles strapped to them.

   Application whitelisting is the remaining way forward if you actually care about runtime security. That & locking every access point down to the bare minimum.

   1. codedokode · 1790326753 · focus · HN ↗

      Antivirus is not a bad thing. Imagine running a company where there are 100 employees that click every link and open every attachment. Definitely safer with an antivirus.

      1. master-lincoln · 1790327135 · focus · HN ↗

         I imagined it with employees on Linux and it wasn't clear to me it's definitely safer with an antivirus software. You are just stating things without explaining yourself...

         1. fn-mote · 1790338225 · focus · HN ↗

            Maybe you’re imagining no local privilege escalation vulnerabilities. Those are low severity in general, but if you can get a user to run something it’s all over.

            How much do I need to go on? A foothold on a local computer allows the attacker to spread horizontally across your network.

            It’s just a matter of time before you’re fighting real-time AI-driven attacks (most sites aren’t yet). Good luck even with your antivirus. Which I agree is going to be one of the footholds that is used against you.

Unofficial Hacker News client; not affiliated with Y Combinator.