News for hackers. Stuff that matters.
Re:Disable Your Antivirus Software (Except Microsoft's) by deckiedan on Wednesday May 24, 2017 @03:51AM (#14408228)
Anyone know what the state of AV on android is? $employer requires ESET on all windows machines, and I'm trying out the android app now. It doesn't seem to make my phone any slower...
Re:Disable Your Antivirus Software (Except Microsoft's) by avar on Wednesday May 24, 2017 @04:41AM (#14408451)
I used to work for an AV vendor and we sold AV for the likes of Linux, Solaris, AIX etc.

Now, that can be directly useful for e.g. mail or file servers on those platforms, but a lot of customers simply had to buy AV everywhere for compliance reasons. They'd be running the AV scan in cron checking for Windows viruses on AIX.

Discussions with those people were funny. They knew what they were buying was worthless and made that clear, we knew our product was worthless to them and made that clear. But their boss's boss had obligated them to buy AV, so sure, if they wanted it anyway we were going to make it and take their money.

I suspect Android AV exists for much the same reason.

Re:Disable Your Antivirus Software (Except Microsoft's) by yellowapple on Wednesday May 24, 2017 @09:52AM (#14409986)
Android is a bit of a different situation:

- Android "administrators" (read: end users) are generally less likely to be cognizant of potential viral vectors than a traditional Linux/AIX/Solaris/etc. administrator.

- Android is capable of providing root access to applications should a user configure the device to do so, thus giving malicious software an avenue to break out of what's otherwise a pretty decent per-app sandbox. This is a concern due to the point above.

- Variation between Android installations (as far as malware authors might be concerned) is far less than the variation in Linux/Unix installations (especially server installations), so there's a higher probability of one exploit or vector being applicable elsewhere.

- Pirated software is more common on an Android device than on a Unix server.

A good AV solution on Android is therefore valuable, especially considering that Android malware does exist in significant quantities. It's less valuable if you've never rooted your phone and have never installed apps outside of the Play Store (or something else that uses its repository, like the Yalp Store), but still does offer some value beyond compliance reasons.

Re:Disable Your Antivirus Software (Except Microsoft's) by veeti on Wednesday May 24, 2017 @03:58AM (#14408262)
Utterly worthless, because apps on Android are sandboxed. Third-party AV can't do anything useful, and Play Services already provides built-in app scanning.
Re:Disable Your Antivirus Software (Except Microsoft's) by icebraining on Wednesday May 24, 2017 @05:06AM (#14408582)
Devil's advocate: there are APK extractors (which work without root), so it's definitively possible for an AV to scan those files and report if there's something weird.
Re:Disable Your Antivirus Software (Except Microsoft's) by yellowapple on Wednesday May 24, 2017 @09:55AM (#14410010)
An AV on a rooted phone would not have that restriction. Seeing as how rooting significantly increases the probability of malware infection on Android, such an AV would also be installable when it's needed the most.