3 ms·
Lesson: If you setup forums for your customers, dont go through deleting legitimate negative posts that concern your products. This magnifies the harm, not redu
by pmjordan 18y ago
Lesson: If you setup forums for your customers, dont go through deleting legitimate negative posts that concern your products. This magnifies the harm, not reduces it.
Particularly true for security software. You're supposed to be able to trust these guys with deep hooks in your operating system, yet they seem to be engaging in something resembling a "security by obscurity" strategy.
- tptacek 18y agoNews flash: virtually all security vendors keep mum on the design and implementation of their products. Many of the host-based security vendors actively compete with reverse engineers in vain attempts to prevent malware from patching around their products. There are even popular data-loss prevention products that hook the scheduler and interrupt handlers to keep the kernel itself from inspecting them. This is just not a news story.
- Zak 18y agoThis is just not a news story. The fact that the implementation details of Symantec's security products are proprietary is not a news story. The fact that their response to questions about their product generating suspicious alerts on users' systems is to delete forum posts asking about it is a news story. The correct answer in this situation is to tell users that the program is a legitimate part of Symantec's product.
- tptacek 18y agoI agree with you. It is notable that SYMC flubbed the PR on this. I think I'm trying to say, there's probably no story in the executable itself.
- deleted 18y ago[deleted]
- Raphael 18y agoSo a "security" program is really the ultimate virus, one the user is not only aware of but completely submits to.