3 ms·
Malware has to be able to launch first.
by macintux 6y ago
Malware has to be able to launch first.
- yyyk 6y agoBoth approaches are meant to stop malware from launching so I don't see much of a difference. Blacklist/whitelist? Whitelist could be implemented locally as well.
- macintux 6y agoMy gut tells me it’s easier to sabotage something passively polling for updates vs something built into the OS that checks at each application launch, but if not, the only difference is the vulnerable window between polling intervals. So, you may be right, may not make much difference. I don’t accept malicious data-mining intent, however.