4 ms·
Being able to submit samples and have them verified as known good or bad seems like a fantastic thing, especially when the default is reputation-based and not b
by mynameisvlad 6y ago
Being able to submit samples and have them verified as known good or bad seems like a fantastic thing, especially when the default is reputation-based and not based on the code signing itself.
Why do you think it's not?
- nix23 6y agoBecause you upload files (maybe private ones) to a 3rd party?
- mynameisvlad 6y agoI mean, you don't have to if you don't want to. Disable automatic uploads, and don't upload them yourself. There, your problem is solved. Those that want to contribute their samples in order to have them white/blacklisted can, but just because a feature is there doesn't mean somebody is forcing you to do it, nor that it's inherently bad because you're willingly uploading files to a 3rd party. How, exactly, would you expect AV/security companies to be able to analyze samples that are actually relevant to their customers if they're not submitted? They would never be able to find nearly as much malware on their own.