  evilghost Premium join:2003-11-22 Springville, AL
·Windstream
edit: May 5th, @07:39PM
| reply to NICK ADSL UK Re: F-PROT Antivirus for Linux
Blacklist definition based security fails to evolve quickly enough and time and time again I've seen first hand how variants and bleeding-edge malware fails to be detected properly. AV software provides a nice warm feeling (at the cost of resource utilization) as a result of pseudo-security but in the end it's almost zero-effective against new threats; even the heuristic engines are easily defeated with UPX and PE.
Better to use good judgement and ideally a white-list based mechanism where only known-good executables are permitted to run.
Nick - Hope you understand this post wasn't a rebuttal towards you, I was addressing the AV fud-machine as a whole. |
|
  tim_k Buttons, Bows, Beamer, Shadow Premium join:2002-02-02 Stewartstown, PA
| said by evilghost :Blacklist definition based security fails to evolve quickly enough and time and time again I've seen first hand how variants and bleeding-edge malware fails to be detected properly. AV software provides a nice warm feeling (at the cost of resource utilization) as a result of pseudo-security but in the end it's almost zero-effective against new threats; even the heuristic engines are easily defeated with UPX and PE. Better to use good judgement and ideally a white-list based mechanism where only known-good executables are permitted to run. Nick - Hope you understand this post wasn't a rebuttal towards you, I was addressing the AV fud-machine as a whole. I agree. On my Windows systems, I don't run any AV or AS programs. On those computers I'm the only user of, they have never been infected. On my stepsons computer, even with the latest protection, he easily manages to get infected in no time. Using proper computing safety, you should not get infected. Even the best programs don't protect against many new threats. -- RIP my baby Buttons 1/15/94-2/9/07 Buttons, Buttons video
|
|
  jgkolt Premium join:2004-02-21 Lakewood, OH clubs:
edit: May 8th, @06:45PM
| said by tim_k :said by evilghost : I agree. On my Windows systems, I don't run any AV or AS programs. On those computers I'm the only user of, they have never been infected. On my stepsons computer, even with the latest protection, he easily manages to get infected in no time. Using proper computing safety, you should not get infected. Even the best programs don't protect against many new threats. I would never run a windows machine without a firewall and antivirus. How do you know you have never been infected if you have never scanned for it. The antivirus does catch stuff but it isnt foolproof. Also for adaware you should scan for that too.
i could see a mac or linux machine but not a windows box. Microsoft sells antivirus software to stop them. Apple fixes the gitch as a security problem.
You may not be infected by a virus but you sure are stopping from spreading it if you do have one. |
|
  tim_k Buttons, Bows, Beamer, Shadow Premium join:2002-02-02 Stewartstown, PA
| said by jgkolt :said by tim_k :said by evilghost : I agree. On my Windows systems, I don't run any AV or AS programs. On those computers I'm the only user of, they have never been infected. On my stepsons computer, even with the latest protection, he easily manages to get infected in no time. Using proper computing safety, you should not get infected. Even the best programs don't protect against many new threats. I would never run a windows machine without a firewall and antivirus. How do you know you have never been infected if you have never scanned for it. The antivirus does catch stuff but it isnt foolproof. Also for adaware you should scan for that too. i could see a mac or linux machine but not a windows box. Microsoft sells antivirus software to stop them. Apple fixes the gitch as a security problem. You may not be infected by a virus but you sure are stopping from spreading it if you do have one. Every once and awhile I'll use an online scanner to check. I also have an antivirus installed on another computer so once in a great while I'll share my C: drive and remotely check it. I also closely monitor my network traffic for anything unusual. I stopped using anti-virus programs when they caused more problems than they prevented. Some games wouldn't run or install with the anti-virus on there. Even disabling it didn't fix all the problems. That was years ago, so maybe they play better now with other software, I don't know. If I had any spyware or adware, I'd be seeing pop ups or slowdowns. Neither is a problem. If you practice safe computing and don't use IE or Outlook, then you're in good shape. I wouldn't recommend it to those people who look to me for advise, but for me, so far(knock on wood) it hasn't been a problem. -- RIP my baby Buttons 1/15/94-2/9/07 Buttons, Buttons video
|
|