5 ms·

is ESET (nod32) still legit? that's the only one I've tended to trust

• deleted 7y ago
  [deleted]
• zxcmx 7y ago
  No :( It never really has been https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Eset https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=Eset But from way back it's been RCE prone: https://support.eset.com/en/news325-eset-customer-advisory-vulnerabilities-in-scanning-and-emulation-repaired https://support.eset.com/en/news325-eset-customer-advisory-v...
  • Goz3rr 7y ago
    What exactly does a short list of CVEs prove? Is there any mainstream software that doesn't have at least a few published?
    • deleted 7y ago
      [deleted]
    • zxcmx 7y ago
      ESET has had high severity CVEs in a security product, including SYSTEM RCE and kernel RCE. Agree that 90% of CVE's are meaningless but unless they've done a lot of sandboxing work in the meantime (guessing not, and up to them to show that) it's hard to trust. Given the CVEs published, do you feel confident that if the product were robustly fuzzed / reversed+ tomorrow that there wouldn't be low hanging RCE? How safe do you feel running Windows with that product versus without? Personally I trust Microsoft's engineering / SDLC more than ESETs, maybe just me.