6 ms·
This is why I don't run third party AV. I'm fairly good at distinguishing between what's a virus and what's not a virus. 99% of things are in the latter catego
by taspeotis 13y ago
This is why I don't run third party AV.
I'm fairly good at distinguishing between what's a virus and what's not a virus. 99% of things are in the latter category care of fairly non-dubious web surfing habits.
The last time I got a virus was sometime back when Vista was the new kid on the block. I was searching high and low for a keygen for a really obscure program and I thought I'd finally found one.
Windows Defender was all up in my face like "don't run this, it's a virus!" and I was like "damnit Windows Defender, I want this key" so I ran it.
Lesson learned. Viruses don't infect PCs. People infect PCs.
- derefr 13y agoLesson learned: wear a <s>condom</s> virtual machine.
- u12481632 13y agoOr as lighter solution use a sandbox program like sandboxie.
- bagels 13y agoThere's always good old fashioned drive by Java exploits served up by ad networks.
- ramidarigaz 13y agoPrecisely because of that I have "click to play" for all plugins in Chromium. I feel a million times better about it, and it's a very minor hassle.
- bcoates 13y agoI'm pretty sure click to play on Chrom* only keeps honest sites honest-- it doesn't prevent a site from activating its own plugin.
- ramidarigaz 13y agoNah. It seems to stop even the sleaziest sites (not that I would know... hah). Jokes aside, one of the major reasons for introducing click to play was to keep those drive-by Java exploits from happening. Not much point if the website can disable click to play :)
- deleted 13y ago[deleted]
- ksrm 13y agoWhat do you need to have a Java plugin installed for these days? I uninstalled it ages ago.
- ramidarigaz 13y agoMy university has a bunch of stuff in Java applets :( It's really pathetic...
- klt0825 13y agoAgreed, don't run AV at all. It is always fun to take something from metasploit, see that is detected by most AVs - change one or two strings that are obvious choices for signatures and watch detection rates drop to close to 0. Even behavioral or heuristic detection is absurd sometimes (IE is writing into the process memory of notepad? Probably fine). It is a really tough problem to solve, to be fair to AV vendors.
- gizmo686 13y ago>IE is writing into the process memory of notepad I don't have much experience in this area, but shouldn't that be prevented by the kernel unless IE got specific permission to do so?
- yuhong 13y agoNot in most cases as far as I know, unless it is specifically sandboxed.
- kibibyte 13y agoDumb question: since modern CPUs and operating systems support virtual memory, shouldn't it be impossible for processes to access memory of other processes, since processes no longer have to deal with shared memory? ...unless you're alluding to security exploits that manage to subvert that mechanism.
- bcoates 13y agoWindows subverts that mechanism by providing APIs that unprivileged apps can use to access each other's memory. On Windows, any programs sharing a desktop are within the same security boundary and are not protected from each other by design.
- kibibyte 13y agoHuh...I never knew that. I wonder why the APIs were designed this way; there has to be legitimate uses for this, right?
- yuhong 13y agoWindows Defender did not have anti-virus until Win8.
- orf 13y agoHow can you be sure that's the last time you got a virus?