8 ms·

Cautionary note: many entities do not allow running Kaspersky software including this tool. https://en.wikipedia.org/wiki/Kaspersky_bans_and_allegations_of_Rus

Cautionary note: many entities do not allow running Kaspersky software including this tool. https://en.wikipedia.org/wiki/Kaspersky_bans_and_allegations_of_Russian_government_ties https://en.wikipedia.org/wiki/Kaspersky_bans_and_allegations...

psychphysic 3y ago
Or just read the 300 lines of python it entails
- seanhunter 3y ago
  ...and any transitive dependencies. Or you can save yourself the time and say that Kaspersky have proved themselves untrustworthy over an extended period of time and just avoid it and take everything they say as probably either propaganda or marketing or both. Even if you trust them, their product causes such extreme degredation of usability that one place I worked decided the cure is worse than the disease and removed Kaspersky from all its machines to the general celebration of all users. I was unaffected because I was the sole linux user so had been spared the Kaspersky virus on my machine.
  - psychphysic 3y ago
    That's a lot of accusations with few (no) sources.
chewmieser 3y ago
Good point but it's also a pretty small open source python script. Looks like everything is handled on-device in this case (at least at the time of writing this comment).
- kfrzcode 3y ago
  That doesn't necessarily matter to your enterprise device usage agreement.
AHOHA 3y ago
FUD by other AV makers.
- dwater 3y ago
  FUD stands for Fear, Uncertainty, and Doubt. But the comment you're replying to is a factual article that lists what entities have restricted use of Kaspersky software and under what circumstances. You may think that the arguments against Kaspersky are FUD, but this post is not.
  - neximo64 3y ago
    Its an open source python script that doesn't really fit that description
    - George83728 3y ago
      Do you think you would enjoy the process of trying to convince a court that their laws don't apply to python scripts? (they do, btw)
      - neximo64 3y ago
        The fact you need to ask whether an open source python script needs a court to prove its a product and the lack of certainty is how FUD works. - What if you fork it, edit it, re-publish it as yours? - And what if other anti virus vendors do this?
        George83728 3y ago
        The fact that you think you can just handwave away legal obligations like this with common sense is certainly telling. It says you don't know what you're talking about. You could reasonably assert that the government's ban of Kaspersky's software is motivated by FUD. However the ban itself is very real, violating the ban can get you into a world of trouble, so warning people to stay out of trouble for violating that ban is not FUD. Explained by analogy: Them: "Smoking marijuana can get you into trouble with the government." You: "That's just FUD, it's a harmless plant from my garden, it's not going to hurt me."
quenix 3y ago
Literal FUD. It's a 300 line python script.
- tom_ 3y ago
  Written by some people whose code you are getting paid to not run! On the plus side, since it's a 300 line Python script, you can read it (which does not involve running it), figure out what it's doing, explain it to somebody else in broad terms, and get them to write some equivalent code.
  - deleted 3y ago
    [deleted]
  - cdchn 3y ago
    Someone is furiously converting this to Rust as we type.
    - permo-w 3y ago
      300 lines is probably short enough to do it with a single 8k gpt-4 API call
      - cdchn 3y ago
        A new variant of the "reimplement everything in the language du jour" game.
    - amoss 3y ago
      [flagged]
- annoyingnoob 3y ago
  I've committed to the US Government, in my own name, that I will not use or provide certain products. If you service a government contract that includes FAR 52.204 then you are agreeing not use Kaspersky products[0]. If you claim to be compliant and then have an incident where you've used prohibited products, the government can come after you with the False Claims Act[1]. There is no way I'm going to just download and run that script because I'm honest and I like not being in prison. [0] https://www.acquisition.gov/far/52.204-23 https://www.acquisition.gov/far/52.204-23 [1] https://www.justice.gov/opa/pr/deputy-attorney-general-lisa-o-monaco-announces-new-civil-cyber-fraud-initiative https://www.justice.gov/opa/pr/deputy-attorney-general-lisa-...
dfadsadsf 3y ago
According to the link you shared, it seems Kaspersky has been prohibited solely on governmental computer systems in certain nations which Kaspersky previously revealed as deploying malware against their adversaries, correct? I doubt many on HN work for those entities and besides I am not sure Python script fit the definition of Kaspersky software.
- 8organicbits 3y ago
  The US Federal government is the largest employer in the world, with well over two million civilian employees. Lots of people on HN are unable to use Kaspersky at work based on that prohibition. A carve out for python scripts is a dubious claim.
- pc86 3y ago
  It's a Kaspersky repository, it's 100% Kaspersky software. Not sure how the fact that it's a Python script changes that at all.

psychphysic 3y ago

Or just read the 300 lines of python it entails

seanhunter 3y ago
...and any transitive dependencies. Or you can save yourself the time and say that Kaspersky have proved themselves untrustworthy over an extended period of time and just avoid it and take everything they say as probably either propaganda or marketing or both. Even if you trust them, their product causes such extreme degredation of usability that one place I worked decided the cure is worse than the disease and removed Kaspersky from all its machines to the general celebration of all users. I was unaffected because I was the sole linux user so had been spared the Kaspersky virus on my machine.
- psychphysic 3y ago
  That's a lot of accusations with few (no) sources.

chewmieser 3y ago

Good point but it's also a pretty small open source python script. Looks like everything is handled on-device in this case (at least at the time of writing this comment).

kfrzcode 3y ago
That doesn't necessarily matter to your enterprise device usage agreement.

AHOHA 3y ago

FUD by other AV makers.

dwater 3y ago
FUD stands for Fear, Uncertainty, and Doubt. But the comment you're replying to is a factual article that lists what entities have restricted use of Kaspersky software and under what circumstances. You may think that the arguments against Kaspersky are FUD, but this post is not.
- neximo64 3y ago
  Its an open source python script that doesn't really fit that description
  - George83728 3y ago
    Do you think you would enjoy the process of trying to convince a court that their laws don't apply to python scripts? (they do, btw)
    - neximo64 3y ago
      The fact you need to ask whether an open source python script needs a court to prove its a product and the lack of certainty is how FUD works. - What if you fork it, edit it, re-publish it as yours? - And what if other anti virus vendors do this?
      - George83728 3y ago
        The fact that you think you can just handwave away legal obligations like this with common sense is certainly telling. It says you don't know what you're talking about. You could reasonably assert that the government's ban of Kaspersky's software is motivated by FUD. However the ban itself is very real, violating the ban can get you into a world of trouble, so warning people to stay out of trouble for violating that ban is not FUD. Explained by analogy: Them: "Smoking marijuana can get you into trouble with the government." You: "That's just FUD, it's a harmless plant from my garden, it's not going to hurt me."

quenix 3y ago

Literal FUD. It's a 300 line python script.

tom_ 3y ago
Written by some people whose code you are getting paid to not run! On the plus side, since it's a 300 line Python script, you can read it (which does not involve running it), figure out what it's doing, explain it to somebody else in broad terms, and get them to write some equivalent code.
- deleted 3y ago
  [deleted]
- cdchn 3y ago
  Someone is furiously converting this to Rust as we type.
  - permo-w 3y ago
    300 lines is probably short enough to do it with a single 8k gpt-4 API call
    - cdchn 3y ago
      A new variant of the "reimplement everything in the language du jour" game.
  - amoss 3y ago
    [flagged]
annoyingnoob 3y ago
I've committed to the US Government, in my own name, that I will not use or provide certain products. If you service a government contract that includes FAR 52.204 then you are agreeing not use Kaspersky products[0]. If you claim to be compliant and then have an incident where you've used prohibited products, the government can come after you with the False Claims Act[1]. There is no way I'm going to just download and run that script because I'm honest and I like not being in prison. [0] https://www.acquisition.gov/far/52.204-23 https://www.acquisition.gov/far/52.204-23 [1] https://www.justice.gov/opa/pr/deputy-attorney-general-lisa-o-monaco-announces-new-civil-cyber-fraud-initiative https://www.justice.gov/opa/pr/deputy-attorney-general-lisa-...

dfadsadsf 3y ago

According to the link you shared, it seems Kaspersky has been prohibited solely on governmental computer systems in certain nations which Kaspersky previously revealed as deploying malware against their adversaries, correct? I doubt many on HN work for those entities and besides I am not sure Python script fit the definition of Kaspersky software.

8organicbits 3y ago
The US Federal government is the largest employer in the world, with well over two million civilian employees. Lots of people on HN are unable to use Kaspersky at work based on that prohibition. A carve out for python scripts is a dubious claim.
pc86 3y ago
It's a Kaspersky repository, it's 100% Kaspersky software. Not sure how the fact that it's a Python script changes that at all.