3 ms·
I disagree. I think Carbon Black's disclaimer is more than sufficient: The screenshot in Carbon Black's response clearly says that VirusTotal "makes the binari
by jwcrux 9y ago
I disagree. I think Carbon Black's disclaimer is more than sufficient:
The screenshot in Carbon Black's response clearly says that VirusTotal "makes the binaries available for download to their partners".
And here's the relevant text in the disclaimer:
> You are hereby advised (i) VirusTotal makes the metadata publicly available along with scan results from dozens of anti-virus products and (ii) VirusTotal also makes the files available to VirusTotal partners. You must determine whether to elect to enable this feature at your sole discretion.
And the warning also has this text in bold:
> If you have custom business applications with confidential business information on your network, sharing binaries with VirusTotal may not be appropriate for you.
With this being optional and off by default, I think it's on the customer to read the clear warning presented and make the call that's right for them.
- bluesign 9y agoSharing with Virustotal is not same as sharing it with ‘anyone’ i suppose, possibility of downloading files is not acceptable.
- jwcrux 9y agoI believe their characterization is accurate. Not just anyone can download files from VT. You have to have access to their private API which is a premium billed (and anecdotally very expensive) service.[0] That, to me, qualifies the term "VirusTotal and their partners" as accurate, since this is only a select group of companies who are paying VT a large sum for access to the data. [0] https://www.virustotal.com/en/documentation/private-api/#file-feed https://www.virustotal.com/en/documentation/private-api/#fil...
- user5994461 9y agoCool, so you can pay a bit of money to get the AWS keys, ssh keys and thousands of top secret credentials from the fortune 500. Whatever number they charge, it is negligible for the trove of data you'll get!