3 ms·

> Once Kaspersky discovered that the code its antivirus software detected on the NSA worker’s machine were not malicious programs but source code in development

> Once Kaspersky discovered that the code its antivirus software detected on the NSA worker’s machine were not malicious programs but source code in development by the U.S. government for its hacking operations, CEO Eugene Kaspersky says he ordered workers to delete the code. Krebs is ranking lower in my eyes with writing like that. First, that’s obviously malicious software. Secondly, this is muddling binaries and source code. Is the claim that Kaspersky gathered the source for malware off the machine? That’s not typical behavior. If the claim is it gathered the binary that was built, that feels like a nothing burger. Even the response from Kaspersky makes Krebs seem alarmist for the sake of generating attention traffic rather than someone investigating if there’s anything out of the ordinary in the first place. Didn’t even give them a few days to respond before publishing the article.

antithesis-nl 2y ago
[flagged]
- deleted 2y ago
  [deleted]
- vlovich123 2y ago
  First, you are imputing a position onto me I have not taken. Kaspersky is an entirely different time zone and didn't even get 24 hours to respond and indicated this is an issue for them but one they can't solve directly and what that's the case. They said they're working with their vendor to get this situation rectified. This really is unnecessary alarmism unless the situation is still persisting. I generally have a very positive view of Kaspersky's actions in the security space and they generally are very very careful of their reputation despite the smearing that happens in Western media (the concerns may be valid but the blanket FUD smearing is uncalled for). They have a much higher reputation in my mind than companies like Symantec.
DaiPlusPlus 2y ago
> Secondly, this is muddling binaries and source code. It can be both: lots of malware exists in executable-source form, like PowerShell scripts and the like.

antithesis-nl 2y ago

[flagged]

deleted 2y ago
[deleted]
vlovich123 2y ago
First, you are imputing a position onto me I have not taken. Kaspersky is an entirely different time zone and didn't even get 24 hours to respond and indicated this is an issue for them but one they can't solve directly and what that's the case. They said they're working with their vendor to get this situation rectified. This really is unnecessary alarmism unless the situation is still persisting. I generally have a very positive view of Kaspersky's actions in the security space and they generally are very very careful of their reputation despite the smearing that happens in Western media (the concerns may be valid but the blanket FUD smearing is uncalled for). They have a much higher reputation in my mind than companies like Symantec.

DaiPlusPlus 2y ago

> Secondly, this is muddling binaries and source code. It can be both: lots of malware exists in executable-source form, like PowerShell scripts and the like.