4 ms·

On the flipside, Kaspersky will upload your confidential files to accidentally FSB-controlled servers and accidentally miss Russian state malware.

deknos 2y ago
that's something you still have to prove. also, it's not like the american-based companies will not do that with european data to america. :D
somenameforme 2y ago
Kaspersky took the US allegations very seriously, and moved all of their data collection and processing for the US (and quite a few other nations) to Switzerland. [1] They then made the facilities accessible to US and other "partners" to inspect the code at said facilities, compile it from source (to compare distributed binaries), audit their data handling/processing procedures, and so on. It'd be pretty easy to see if the software was missing Russian state malware both by inspecting the code, or simply installing it on a test machine and then running the scan. If this were the case, it's highly likely the news would be repeating it 24/7. So it seems safe to assume it's doing its job well. [1] - https://www.kaspersky.com/about/press-releases/2020_kaspersky-completes-its-data-processing-relocation-to-switzerland-and-opens-new-transparency-center-in-north-america https://www.kaspersky.com/about/press-releases/2020_kaspersk...
- creshal 2y ago
  The audits are a joke (iso 27001 means nothing in practice, as anyone working in a 27001 certified company can tell you), and what has been in the news is that the only foreign partner who signed up to this clown show promptly went bankrupt in 2022: https://www.cbc.ca/news/canada/new-brunswick/cyber-nb-shutting-down-1.6367234 https://www.cbc.ca/news/canada/new-brunswick/cyber-nb-shutti... So what, exactly, is this press release supposed to prove?
  - somenameforme 2y ago
    That Kaspersky gave the US every imaginable means of ensuring everything was on the up and up, and that the allegations were unjustified. Yet the US seemingly had no interest whatsoever in investigating their own claims.
    - creshal 2y ago
      The US correctly assessed that this was empty PR theatre and not worth enabling.
      - hulitu 2y ago
        > The US correctly assessed that this was empty PR theatre and not worth enabling. And they asked for it just to be sure. /s
hulitu 2y ago
On the flipside, Microsoft will upload your confidential files to accidentally NSA-controlled servers and accidentally miss US state malware.

deknos 2y ago

that's something you still have to prove. also, it's not like the american-based companies will not do that with european data to america. :D

somenameforme 2y ago

Kaspersky took the US allegations very seriously, and moved all of their data collection and processing for the US (and quite a few other nations) to Switzerland. [1] They then made the facilities accessible to US and other "partners" to inspect the code at said facilities, compile it from source (to compare distributed binaries), audit their data handling/processing procedures, and so on. It'd be pretty easy to see if the software was missing Russian state malware both by inspecting the code, or simply installing it on a test machine and then running the scan. If this were the case, it's highly likely the news would be repeating it 24/7. So it seems safe to assume it's doing its job well. [1] - https://www.kaspersky.com/about/press-releases/2020_kaspersky-completes-its-data-processing-relocation-to-switzerland-and-opens-new-transparency-center-in-north-america https://www.kaspersky.com/about/press-releases/2020_kaspersk...

creshal 2y ago
The audits are a joke (iso 27001 means nothing in practice, as anyone working in a 27001 certified company can tell you), and what has been in the news is that the only foreign partner who signed up to this clown show promptly went bankrupt in 2022: https://www.cbc.ca/news/canada/new-brunswick/cyber-nb-shutting-down-1.6367234 https://www.cbc.ca/news/canada/new-brunswick/cyber-nb-shutti... So what, exactly, is this press release supposed to prove?
- somenameforme 2y ago
  That Kaspersky gave the US every imaginable means of ensuring everything was on the up and up, and that the allegations were unjustified. Yet the US seemingly had no interest whatsoever in investigating their own claims.
  - creshal 2y ago
    The US correctly assessed that this was empty PR theatre and not worth enabling.
    - hulitu 2y ago
      > The US correctly assessed that this was empty PR theatre and not worth enabling. And they asked for it just to be sure. /s

hulitu 2y ago

On the flipside, Microsoft will upload your confidential files to accidentally NSA-controlled servers and accidentally miss US state malware.