3 ms·
For the same reasons there's antivirus software for Mac and Linux. People coming from Microsoft systems just expect it to be required, so there's demand for it
by berkes 2y ago
For the same reasons there's antivirus software for Mac and Linux.
People coming from Microsoft systems just expect it to be required, so there's demand for it (demand != need). And in hybrid environments it may remove a weak link: e.g. a Linux mailserver that serves mail to Windows users best has virus detection for windows viruses.
- klooney 2y agoIt's not just those darn windows admins. Alot of the certifications customers care about- SOC II, ISO whatever, FedRamp, have line items that require it.
- raffraffraff 2y agoI've had to install server antivirus onto my Linux laptop at 4 different companies. Every time it's been a pain in the ass because the the only antivirus solutions I've found for Linux assume that "this must be a file server used by Windows clients". None of them are actually useful, so I've installed them and disabled them. There, box-checking exercise done.
- astura 2y agoIt's not just fake demand, it's required in most instances (example- STIG requirements)
- sam_lowry_ 2y agofake requirements?
- sam_lowry_ 2y agoI spent some time on STIG website out of curiosity. There seem to be down-to-earth practical requirements but only for Windows, cf. https://public.cyber.mil/stigs/gpo/ https://public.cyber.mil/stigs/gpo/ Why does it justify running antiviri on Linux is beyond my understanding. Weak, impotent, speechless IT personnel that can not face off incompetence?
- TheNewsIsHere 2y agoI’m not defending CrowdStrike here. This is a clearly egregious lack of test coverage, but CrowdStrike isn’t “just” antivirus. The Falcon Sensor does very useful things beyond that, like USB device control, firewall configuration, reporting, etc. If your use case has a lesser need for antimalware you might still deploy CrowdStrike to achieve those ends. Which help to lessen reliance on antimalware as a singular defense (which of course it shouldn’t be).
- berkes 2y agoI know it isn't just antivirus. I was merely drawing a simpler analogy.
- buran77 2y ago> For the same reasons there's antivirus software for Mac and Linux. Because they can also get malware or could use the extra control CS provides, and the "I'm not a significant target so I'm safe" is not really a solid defense? Bad quality protection (as exemplified by the present CS issues) isn't a justification for no protection at all. Would you ignore the principle of least privilege (least user access) and walk around with all the keys to the kingdom just because you're savvier than most at detecting an attack and anyway you're only one person, what are the chances you're targeted? You're the Linux/MacOS of the user world, and "everyone knows those principles are only for the Windows equivalent of users".
- berkes 2y agoI'm not arguing that Linux or Mac need no protection. There are serious threats to any Linux machine. And if you include Android, there are probably far more Linux machines out there. Hell, including their navigation, router, NAS, TV, and car, my 70+ yo mom runs at least 5 Linux machines at her home. It's a significant target. And Mac is quite obviously a neat target, if only because the demographic usually has higher income (hardly any Bangladeshi sweatshop worker will put down the cash to buy a MacBook or iphone. But might just own an Android or windows laptop) I'm arguing that viruses aren't a threat, generally. Partly due to the architecture, partly due to their useage.
- giaour 2y agoNeither Linux nor OSX are immune to viruses, though malware is more commonly written to target Windows given its position in the market. Both iOS and Android are frequent malware targets despite neither being related to Windows, and consequently, both have antivirus capabilities integrated deeply into both the OS and the app delivery ecosystem. Any OS deployed on a user device needs some form of malware protection unless the device is blocked from doing anything interesting. You can generally forgo anti-malware on servers that are doing one thing that requires a smaller set of permissions (e.g., serving a website), but that's not because of the OS they are running.
- jtbayly 2y agoWut? You can’t run ClamAV on iPhone, can you?
- giaour 2y agoNo, ClamAV doesn't have an iOS version. There are plenty of iOS-specific AV programs available if you need one, though.
- jtbayly 2y agoI just looked, and your claim is very misleading. Sure, “AVG Mobile Security” is available, but nobody needs it, and it isn’t anything like antivirus software on a computer. It provides... a photo vault, a VPN, and “identity protection.” To tell people that they are vulnerable without something like this on their iPhone is ludicrous. Nobody meeds antivirus software or malware protection like this on their iPhone, unless they like just giving money away.
- rfoo 2y agoI'd say very special people need malware protection like this on their iPhone. Remember NSO Group? Or the campaign Kaspersky exposed last year? Apple successfully made malware on iOS very rare unless you are targeted. But right now, it is impossible for these targeted people to get any kind of protection. Even forensics after being compromised is extremely difficult thanks to Apple's walled garden approach.
- wpm 2y agoExcept at least on the Mac, your AV software is unlikely to be part of the boot process, and doesn't run in the kernel. Shit like today is precisely why Apple kicked Mac developers out of kernel-space for the most part.