4 ms·
How many genuine issues (not nonsense like “blah.con has stored a cookie” does your av pick up?
by midasuni 3y ago
How many genuine issues (not nonsense like “blah.con has stored a cookie” does your av pick up?
- consumer451 3y agoIt is very likely that a modern AV (I should have been saying EPP) will pick up your average re-encoded payload, or Metasploit fun time. Certainly they will pickup most known vulnerabilities. Endpoint Protection (EPP) orgs use the same CVE DBs that adversaries use. See another user's comment: https://news.ycombinator.com/item?id=38594247 https://news.ycombinator.com/item?id=38594247 Security is an onion, perfect is the enemy of good, etc... Why make it easier for the adversaries? While annoying, running EPP on your desktop OS is not exactly neuroscience. Ideally, it's furnished by the OS provider so that there are fewer parties to trust. I hate to say it, but Microsoft is now teaching by example. MS has factually one of the best-in-class Endpoint Protection agents on the market. If resources allowed, all other desktop OS providers should follow suit, otherwise they are just shirking responsibility.
- EricLeer 3y agoAny recommendations for a good AV/EPP for desktop linux (ubuntu)?
- consumer451 3y agoYou have asked the most important question. I should have asked it as well. Would love other input as I’m not an Ubuntu daily driver anymore. It turns out 22.04 has ClamAV “provided and supported,” but not installed by default. So it should easily install manually. That’s what I would go with first, as it’s officially supported. An OS vendor supporting a specific AV vendor is a really big deal imho. If that is not satisfactory by some metric, and this is just my personal and dated opinion… I used to like Eset. I was naive before, but next time I install desktop Ubuntu, I will install ClamAV immediately.
- midasuni 3y agoSo presumably you run it. How many bad things has it stopped in the last 2 months?