4 ms·
Antiviruses are technically unsound as they fundamentally introduce great risks. As the slides mention, they inject themselves into every corner of the system,
by soraminazuki 2y ago
Antiviruses are technically unsound as they fundamentally introduce great risks. As the slides mention, they inject themselves into every corner of the system, intercepts and plays around with every data within reach. Since antiviruses are complex pieces of software, there's so many risk at play here.
First, there's the risk of sensitive data being leaked. There's also the risk of the antivirus itself coming under attack by the data it's fed. If there's malicious data in say, an HTTP request sent to a web server with antivirus installed, the antivirus will happily scan that data and get pwned. Despite that, numerous antivirus implementations open themselves up to privilege escalation attacks by running everything as root and using unsandboxed processes to scan potentially malicious data. To make things worse, they disable OS security mechanisms to make things easier for itself. The indifference and recklessness on display is egregious.
The effectiveness of antiviruses are also suspect to begin with. Defining what malicious programs are in a way that's clear enough for a computer to understand is an impossible feat. But even if we did manage that, computability theory tells us that it's impossible to write a computer program that can tell us whether there are any malicious code in any given program. Antiviruses defy math.