4 ms·
> just because it happened to see a pattern of bytes in the binary It’s bizarre. I built an app and it was flagged by numerous AVs, and many of them had a “sub
by klabb3 3y ago
> just because it happened to see a pattern of bytes in the binary
It’s bizarre. I built an app and it was flagged by numerous AVs, and many of them had a “submit false positive” thing which eventually removed them. There’s no way that involved manual review so I assume bad actors can do the same.
Apparently these misclassifications are extremely common, and affect certain devs more than others. For instance, I had a Go binary which was flagged for a certain Trojan/worm and it was apparently common with other Go projects on GitHub.
- NegativeK 3y agoWithout any knowledge of what they're really doing: automated sandbox analysis is a common tool. They could also be doing reputation analysis of the submitter.