3 ms·

Take a look at the other articles from the same author where he investigated some popular anti-virus products. In particular Kaspersky is/was a mess: - https:/

by dirkf 7y ago

Take a look at the other articles from the same author where he investigated some popular anti-virus products. In particular Kaspersky is/was a mess: - https://palant.de/2019/08/19/kaspersky-in-the-middle-what-could-possibly-go-wrong/ https://palant.de/2019/08/19/kaspersky-in-the-middle-what-co... - https://palant.de/2019/11/25/kaspersky-the-art-of-keeping-your-keys-under-the-door-mat/ https://palant.de/2019/11/25/kaspersky-the-art-of-keeping-yo... - https://palant.de/2019/11/26/internal-kaspersky-api-exposed-to-websites/ https://palant.de/2019/11/26/internal-kaspersky-api-exposed-... - https://palant.de/2019/11/27/assorted-kaspersky-vulnerabilities/ https://palant.de/2019/11/27/assorted-kaspersky-vulnerabilit... McAfee: - https://palant.de/2019/12/02/rendering-mcafee-web-protection-ineffective/ https://palant.de/2019/12/02/rendering-mcafee-web-protection... And I expect that he will publish more articles in the future. If you want to use anti-virus I would stick to their on-access scanning and stay away from their web protection...

Abishek_Muthian 7y ago
I would like to have a low power ARM box just for scanning files, like PiHole but for AV but I think it would be limited only to Clam AV; does any other AV support linux on ARM(not android)?
- my123 7y ago
  Could you try qemu-i386 (or ExaGear with patching licensing... as it's dead) with https://github.com/taviso/loadlibrary https://github.com/taviso/loadlibrary (see the Windows Defender section)? Yeah it's hacky, but might work well for your usecase.
  - Abishek_Muthian 7y ago
    Thank you, but both of those projects look dead; I'll check them out.
bscphil 7y ago
More very entertaining evidence of how terrible most antivirus products are can be found be reading many of the Project Zero bug reports by taviso. https://bugs.chromium.org/p/project-zero/issues/list?q=owner%3Ataviso%40google.com&can=1 https://bugs.chromium.org/p/project-zero/issues/list?q=owner... There are a lot of them!

by dirkf 7y ago

Abishek_Muthian 7y ago

I would like to have a low power ARM box just for scanning files, like PiHole but for AV but I think it would be limited only to Clam AV; does any other AV support linux on ARM(not android)?

my123 7y ago
Could you try qemu-i386 (or ExaGear with patching licensing... as it's dead) with https://github.com/taviso/loadlibrary https://github.com/taviso/loadlibrary (see the Windows Defender section)? Yeah it's hacky, but might work well for your usecase.
- Abishek_Muthian 7y ago
  Thank you, but both of those projects look dead; I'll check them out.

bscphil 7y ago

More very entertaining evidence of how terrible most antivirus products are can be found be reading many of the Project Zero bug reports by taviso. https://bugs.chromium.org/p/project-zero/issues/list?q=owner%3Ataviso%40google.com&can=1 https://bugs.chromium.org/p/project-zero/issues/list?q=owner... There are a lot of them!