TrendMicro Node.js HTTP server listening on localhost can execute commands

Re:TrendMicro Node.js HTTP server listening on localhost can... by satuim on Monday January 11, 2016 @07:59PM (#10884837)

Is there any reasonable reason why anti-virus vendors often include shady or insecure software like this? It honestly the worst case of security theater where it looks like its helping but is honestly doing the opposite. And I really wish AVs didn't try to include extras, as this really lowers my disposition against the (scammy) Anti-Virus market. And this isn't the first time that an AV turned out to make the computer less secure.

I have Avira Free installed, But only have the AV part and have disabled Web/Mail Protection. So I am hoping that Avira are trustworthy enough and don't push anything my way.

[ Parent | on HN ]

Re:TrendMicro Node.js HTTP server listening on localhost can... by zAy0LfpBZLC8mAC on Monday January 11, 2016 @11:32PM (#10885568)

Of course, it's not the first time. As a matter of principle, antivirus software cannot work. The whole idea is a scam. So, how is it surprising that they bundle other equally useless/scammy software?

[ Parent | on HN ]