4 ms·
> At the same time, AV in many cases prevents infections that would otherwise prove costly, particularly for less experienced users who aren't likely to be indi
by jancsika 9y ago
> At the same time, AV in many cases prevents infections that would otherwise prove costly, particularly for less experienced users who aren't likely to be individually targeted by state-sponsored hackers.
Is there evidence for this claim that is placed precariously at the end of an article full of detailed evidence for the exact opposite claim?
- slezyr 9y agoWell, most AVs just check icon + some data like sections, import table and only sometimes put some signatures on code. By using packer(not hard to find one) you can make almost any executable undetectable.
- ComputerGuru 9y agoWhich is why most av products will flag any upx or mpress binary as "Trojan unknown" etc. They mostly use a whitelist approach to work around that. Ask me how I know sometime.