Re:Ask HN: Do you still use Antivirus in 2017?
by ocdtrekkie on Tuesday April 11, 2017 @02:30AM
(#14085362)
Yes and no. I technically have antivirus, but Windows Defender is a built-in OS component, so I'm not paying for it or installing any third party software. The OS pretty much maintains itself.
Re:Ask HN: Do you still use Antivirus in 2017?
by bradknowles on Friday April 14, 2017 @01:23AM
(#14112849)
IMO, the classic antivirus solution stopped working years ago.
You can't just scan for known bad fingerprints anymore -- most malware these days is polymorphic and has already gone through a virus checking service run by other blackhats (kind of like VirusTotal).
You can't just analyze the code in a virtual environment -- it's too easy for a malware author to determine if they're running in some sort of VM and then choose not to activate.
Moreover, most antivirus software is poorly written and is a bigger security risk than not having it at all. Many malware authors will specifically attack antivirus software, because that's the easiest way to get maximum permissions.
I do use anti-malware programs on my Mac. But it's all based on looking for system activity signatures that are typical of malware attacks. Classic antivirus software just isn't that useful.
Little Flocker is a good start, but has recently been sold to F-Secure, and I'm not sure if it will remain good.
BlockBlock is good. So is KnockKnock. And OverSight. And RansomWhere. All by the same author. Lots of these things are also covered by Little Flocker, if you prefer that option.
Little Snitch is great, but takes a bit of work at first to train it for what kind of behavior is okay on your system.
I still have ClamAV on my machine, but it is far from the first line of defense. It may catch the dreckage that is still out there and hasn't been updated with more modern obfuscation methods, but that could still be a net positive.
Of course, I also have FileVault turned on for volume encryption, and the Sierra network/application firewall enabled, and GateKeeper to ensure that all apps have good crypto signatures or they can't be installed or run.
And then there might be some other things that I won't talk about publicly. ;)
Re:Ask HN: Do you still use Antivirus in 2017?
by beauchef on Tuesday April 11, 2017 @08:27PM
(#14093767)
I use Bitdefender on Windows. In 2017 more than ever, you definitely need protection. Sure, Windows is the most obvious target for viruses. But Microsoft is also the company that invest the most in security. If you know just a tiny bit about security, you know that MacOS is not more secure than Windows. It's just less attacked: http://www.ibtimes.com/nope-apple-computers-arent-more-secur...
And then you got this kind of report (to be taken with a grain of salt:
http://thehackernews.com/2015/02/vulnerable-operating-system...
Re:Ask HN: Do you still use Antivirus in 2017?
by NTripleOne on Wednesday April 12, 2017 @10:32AM
(#14098021)
It's decent barebones protection but it doesn't play nicely with some software (games usually), with "antimalware service executable" gobbling up CPU as (I assume, at least) it scans stuff as it's being executed.
Re:Ask HN: Do you still use Antivirus in 2017?
by beauchef on Wednesday April 12, 2017 @06:48PM
(#14102458)
Windows Defender is OK. But you don't have the kind of protection you get from a product like Bitdefender Total Security or Kaspersky Total Security. I think it is wise to invest in a reputable product.
Re:Ask HN: Do you still use Antivirus in 2017?
by behnamoh on Tuesday April 11, 2017 @02:40PM
(#14091082)
Percentage increases don't tell you the whole story.
For example suppose you have only "1" malware for your OS. Next year you have "2", a 100% growth rate.
Now suppose you have a shitty OS with 1000 malware. Next year it has 1200 malware, a 20% growth rate.
Someone without this knowledge would go about and claim the second OS is "safer", but the truth is both OS's are just experiencing an exponential growth rate, the first OS is just at the first stages of the curve.
Re:Ask HN: Do you still use Antivirus in 2017?
by telebone_man on Tuesday April 11, 2017 @04:01AM
(#14085720)
I genuinely thought this was going to end with a /s... Really?
I shut down my Windows 10 Laptop before leaving work yesterday. I forgot to sign into the newly setup wifi. So I connected my Windows 10 phone to it.
My Windows 10 phone has my Windows Live account on it. As does my Windows 10 Laptop.
Today, I logged into my Windows 10 laptop using my Windows Live username and password, and yesterdays WiFi settings (that I setup on my phone) instantly sync'd with my Windows 10 laptop.
At the same time, my Onedrive account sync'd all the files I'd been working on last night, on my Windows 10 desktop.
You can get the same 'least amount of work' experience if you fully invest in the Microsoft ecosystem (onedrive.. live.. etc..).
Re:Ask HN: Do you still use Antivirus in 2017?
by Blinks- on Wednesday April 12, 2017 @12:02PM
(#14098976)
At work for windows/Mac machines I use Webroot, after an infection though I will run superantispyware or malwarebytes from an external media device (they seem to have a higher detection rate). I usually run a software side firewall like tinywall on Windows or littlesnitch on Mac just to see what's making requests in the background. Interestingly enough at work Macs receive a lot more detections per machine then windows boxes these days.
Re:Ask HN: Do you still use Antivirus in 2017?
by dnel on Thursday April 13, 2017 @11:30AM
(#14107810)
I installed AV once on my android phone after doing something stupid, luckily I got away with it and uninstalled soon after due to irritating pop-up annoyances from the AV app.
Desktop-wise I've been on Linux for well over a decade, I've never used AV except to (rarely) clean out infected files I might share and infect others with, not necessarily for my own protection.
Re:Ask HN: Do you still use Antivirus in 2017?
by 0x54MUR41 on Wednesday April 12, 2017 @03:56AM
(#14095670)
No, I don't. Currently, I use Linux Ubuntu and OS X El Capitan. Linux Ubuntu for my personal development and OS X for working in the office (it's my first time using it). I don't know about those two. I believe that virus on Linux are rarer than Windows.
You can't just scan for known bad fingerprints anymore -- most malware these days is polymorphic and has already gone through a virus checking service run by other blackhats (kind of like VirusTotal).
You can't just analyze the code in a virtual environment -- it's too easy for a malware author to determine if they're running in some sort of VM and then choose not to activate.
Moreover, most antivirus software is poorly written and is a bigger security risk than not having it at all. Many malware authors will specifically attack antivirus software, because that's the easiest way to get maximum permissions.
I do use anti-malware programs on my Mac. But it's all based on looking for system activity signatures that are typical of malware attacks. Classic antivirus software just isn't that useful.
Little Flocker is a good start, but has recently been sold to F-Secure, and I'm not sure if it will remain good.
BlockBlock is good. So is KnockKnock. And OverSight. And RansomWhere. All by the same author. Lots of these things are also covered by Little Flocker, if you prefer that option.
Little Snitch is great, but takes a bit of work at first to train it for what kind of behavior is okay on your system.
I still have ClamAV on my machine, but it is far from the first line of defense. It may catch the dreckage that is still out there and hasn't been updated with more modern obfuscation methods, but that could still be a net positive.
Of course, I also have FileVault turned on for volume encryption, and the Sierra network/application firewall enabled, and GateKeeper to ensure that all apps have good crypto signatures or they can't be installed or run.
And then there might be some other things that I won't talk about publicly. ;)
Don't listen to hearsay... you need protection.
- https://raw.githubusercontent.com/Homebrew/homebrew-core/mas...
- http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security/clam...
It's unobtrusive, and I can fully control its behaviour (under usual circumstances a simple `freshclam && clamscan -i -r $PATH` is enough).
2017 will be even bigger. The more users you have - the more malware you get.
[0] https://www.macrumors.com/2017/04/06/mac-malware-up-744-perc...
For example suppose you have only "1" malware for your OS. Next year you have "2", a 100% growth rate.
Now suppose you have a shitty OS with 1000 malware. Next year it has 1200 malware, a 20% growth rate.
Someone without this knowledge would go about and claim the second OS is "safer", but the truth is both OS's are just experiencing an exponential growth rate, the first OS is just at the first stages of the curve.
I shut down my Windows 10 Laptop before leaving work yesterday. I forgot to sign into the newly setup wifi. So I connected my Windows 10 phone to it.
My Windows 10 phone has my Windows Live account on it. As does my Windows 10 Laptop.
Today, I logged into my Windows 10 laptop using my Windows Live username and password, and yesterdays WiFi settings (that I setup on my phone) instantly sync'd with my Windows 10 laptop.
At the same time, my Onedrive account sync'd all the files I'd been working on last night, on my Windows 10 desktop.
You can get the same 'least amount of work' experience if you fully invest in the Microsoft ecosystem (onedrive.. live.. etc..).
MS was the last to implement it though...
Peace
Desktop-wise I've been on Linux for well over a decade, I've never used AV except to (rarely) clean out infected files I might share and infect others with, not necessarily for my own protection.
on linux i mostly feel content with SELinux
I'm a GNU/Linux user since 2000.