News for hackers. Stuff that matters.
Re:The No More Ransom Project by happy-go-lucky on Sunday October 30, 2016 @05:25PM (#12832435)
My mini Ask HN:

Do you trust makers of security software?

Re:The No More Ransom Project by XparXnoiAx on Sunday October 30, 2016 @06:04PM (#12832644)
No, absolutely not. Even if their intentions are good, they still have shown some questionable competence, for example:

http://www.theregister.co.uk/2016/03/31/trend_micro_patches_...

http://www.pcworld.com/article/3020327/antivirus-software-co...

Re:The No More Ransom Project by TeMPOraL on Sunday October 30, 2016 @06:49PM (#12832964)
Not very much, no.

But in the context of ransomware, the advice presented here is game-theoretically sound (and proven by thousands of years of experience in dealing with criminals demanding ransom), so I do trust it.

Re:The No More Ransom Project by perlgeek on Sunday October 30, 2016 @06:01PM (#12832637)
Not the big ones that are well-known names in the PC market. There are quite some shady security software vendors out there, and a handful very competent ones that I trust if I have to.
Re:The No More Ransom Project by andrewl on Monday October 31, 2016 @07:43AM (#12835883)
Can you expand on that? Who are the good ones, and the bad ones?
Re:The No More Ransom Project by perlgeek on Monday October 31, 2016 @02:30PM (#12839598)
The bad ones are typically well-known desktop anti virus scanners that try to score by showing you a high number of threats they allegedly defeated. If you look at those threats in detail, they turn out to be browser cookies, or bookmarks, or something similarly trivial.

Identifying good vendors and products is generally harder. I've heard good things about canary.tools and bromium, for example. Both explain what they do in terms that don't make a techie roll their eyes (too much at least): https://canary.tools/#how-it-works and https://www.bromium.com/advanced-endpoint-security/our-techn...

A good (but not exhaustive) test is to look at what the vendors promise. If they promise you full protection of your machine or network, you know they are full of shit. If they talk only about one aspect (identifying attackers, reducing the attack surface on a browser), things start to look better.

Re:The No More Ransom Project by samstave on Sunday October 30, 2016 @05:43PM (#12832520)
I've seen Halt and Catch Fire, so no.
Re:The No More Ransom Project by jodrellblank on Sunday October 30, 2016 @06:41PM (#12832908)
I trust them not to be behind ransomware.

I don't trust them to make good quality software which works quietly and efficiently in my interest.

They basically sell a security theatre product where their motivations are to popup "PROTECTED BY ____" at all times so I don't forget it exists, and to look busy - typically by scanning the same files over and over even though they haven't changed in months - and to hook into everything to add more sales buzzwords to their product.

Re:The No More Ransom Project by r3bl on Sunday October 30, 2016 @06:44PM (#12832929)
I do love to read their analyses on APTs and things like that, but other than that, no. There's not a single security software vendor that I trust.
Re:The No More Ransom Project by SSLy on Monday October 31, 2016 @10:04AM (#12836759)
Yup, I trust grsec.