News for hackers. Stuff that matters.

A comment on Avoid Non-Microsoft Antivirus Software. Parent comment

Re:Avoid Non-Microsoft Antivirus Software by Neil44 on Thursday January 26, 2017 @06:36AM (#13490535)
With Eset you get a message explaining the issue, similar to if your connection was blocked because malware was detected.

I don't think this practice is a big issue because the local machine would have to be compromised for it to be an issue, in which case it's irrelevant because the game is over already. Also the alternative is not scanning ssl traffic for malware which has it's own very real risks.

[ Parent | on HN ]
Re:Avoid Non-Microsoft Antivirus Software by raesene6 on Thursday January 26, 2017 @08:35AM (#13491139)
The issues I've mentioned (problems dealing with self-signed certs, Cert pinning and EV-SSL) don't have much to do with the client being compromised. They're examples of how SSL MITM (even assuming no implementation flaws) can damage user security by breaking the operation of SSL for user web access.
[ Parent | on HN ]