* Someone had access to a delivery system that could be used to attack thousands of people's machines by rolling out a rogue release. * This someone was forced

* Someone had access to a delivery system that could be used to attack thousands of people's machines by rolling out a rogue release. * This someone was forced to install a specific antivirus due to compliance with an industry certification. This antivirus called home, and was from an obscure vendor. This someone wasn't able to change any of this, and also didn't have power to choose another vendor. If you followed the rules by the book, you couldn't even introduce a third machine to authenticate things without this silly protection. So, what should did they do? Installed the antivirus on a virtual machine with no access to the host computer, and program it to be fired up for a couple of minutes a day, just to keep the stupid antivirus happy by calling home.