“AV is my single biggest impediment to shipping a secure browser.”

Re:“AV is my single biggest impediment to shipping a secure ... by Canada on Thursday December 01, 2016 @03:45PM (#13083353)

Microsoft had the biggest market share, and a near monopoly on unskilled users who don't understand the consequences of their actions. Other operating systems didn't have much better security, but they were less attractive to malware authors.

Now the mobile systems are the mass market thing. AV never took off because the sand boxing and app vetting, while not perfect, is more effective than AV ever was.

Though I must say, Microsoft did create a mess with its office macros and handling of file extensions. For a while they were certainly guilty of offering an environment that made it tough for the layman to know the manner in which something would open.

[ Parent | on HN ]

Re:“AV is my single biggest impediment to shipping a secure ... by tracker1 on Friday December 02, 2016 @10:39AM (#13089444)

Well, allowing script to run in email, and insult to injury, running them in "local" (ie full privileges) security zone didn't help... not locking down the filesystem and jet (which has fs access) active-x controls earlier on from browser (and flash, ugh) access were significant.

It wasn't just IE though, Netscape had plenty of points to exploit.

[ Parent | on HN ]

Re:“AV is my single biggest impediment to shipping a secure ... by yuhong on Thursday December 01, 2016 @04:48PM (#13083848)

Yea, that is what Vess worked on back in the late 1990s, dating back to the WordBasic days.

[ Parent | on HN ]