4 ms·
We need a service to monitor all the published security & privacy issues that vendors like Microsoft, Intel, and Apple don't consider to be bugs, and then offer
by cantrevealname 9y ago
We need a service to monitor all the published security & privacy issues that vendors like Microsoft, Intel, and Apple don't consider to be bugs, and then offer some kind of automatic disable/fix/patch/uninstall tool.
I'd be willing to pay $50-100/year per system so I don't have to personally dig into every security and privacy mitigation.
Specifically, the tool or service should:
- Check for known vulnerabilities just like Management Engine described in the article, and disable it or patch it (if a patch is available).
- Uninstall or disable all tracking, reporting, spyware features (esp. in Windows 8 and 10 for example).
- Disable all unnecessary services to harden the OS. Yes, I realize that this has the potential to break things, so it has to be done intelligently.
- Etc.
I would have thought that anti-virus software would have been a perfect place to build in such capability, but AV software has generally turned into garbage unfortunately.
- yo-code-sucks 9y agoOpenscap is a good start.
- altharaz 9y agoHey there, my company already solves the "known vulnerabilities" problem and lets you either "accept" the vulnerability or patch it. I'd love to get your feedback on our product and how you'd imagine an integration with other features you described. Can we DM on Twitter? (@maximeae)
- foobiekr 9y agoyou kind of can't get to _all_ the things, but you can choose to approach the problem with containment. We are one option (see my profile) but there are lots of others. IMHO the problem isn't known vulnerabilities checks and patches but the vulnerabilities you don't know. The problem is, of course, that it is very hard for most people to get to a default-closed model for their servers.