3 ms·
I often hear people promoting common sense over antivirus solutions and while I do agree that some degree of common sense is required, there are still a lot of
by laumars 10y ago
I often hear people promoting common sense over antivirus solutions and while I do agree that some degree of common sense is required, there are still a lot of attacks that can bypass safe browsing.
In the past we've seen malware injected into ads that then load on legitimate sites. Hosts get hacked too and their sites can then be used to serve malware.
You're right to teach your customers safe browsing habits but they do still need an antivirus as well.
Disclaimer: antivirus solutions are not perfect either. Particularly with new attacks. So while I do advocate using them it's also good not to take them for granted (e.g. assuming you can get away with running any old binary you've downloaded from Limewire because you have an AV installed). The best approach is common sense with the AV as a safety net.
- douche 10y ago> In the past we've seen malware injected into ads that then load on legitimate sites Just another reason to use an adblocker.
- GrinningFool 10y agoA major part of safe browsing (and safe computer usage in general) is an ad-blocker that defaults to requiring you to whitelist the content you want to let through.
- cryptarch 10y agoHave you found a workable way of doing that? I manually whitelist in uMatrix, but it's pretty inconvenient and does not stop attacks coming from domains previously whitelisted/deemed safe.
- GrinningFool 10y agouMatrix is the best I have. I've accepted the inconvenience as minor in comparison; but previous whitelisting is a problem that I actually hadn't considered. I can't think of any reasonable way to prevent that - even catching changed/new scripts and requiring approval to run them won't help if all you can see are minimized scripts.
- cryptarch 10y agoI guess you could have a kind of crowd-sourced de-minificarion project, combined with checking script hashes, but I think that would be considered a form of pirating and thus require a lot of piracy-related workarounds. Perhaps one could have a de-minification tool which only stores the steps to deminfy a script, and then you could apply it based on the script's hash.