Kaspersky AV injected unique ID allowing sites to track users in incognito mode

Re:Kaspersky AV injected unique ID allowing sites to track u... by throwamay1241 on Sunday August 18, 2019 @03:12AM (#20728726)

There's lots of 'Do we need Kaspersky' type questions in here already. The more pertinent question is whether AV is actually effective, or if stronger countermeasures like application whitelisting are needed?

https://www.youtube.com/watch?v=gvcgHkeZ1i4&list=PLqz80p7f6d...

[ Parent | on HN ]

Re:Kaspersky AV injected unique ID allowing sites to track u... by josefx on Sunday August 18, 2019 @06:52AM (#20729474)

You would need a document whitelist since many programs can be hijacked using buffer overflow attacks or outright support execution of arbritrary scripts.

[ Parent | on HN ]

Re:Kaspersky AV injected unique ID allowing sites to track u... by throwamay1241 on Monday August 19, 2019 @04:42AM (#20736000)

I'll also point out that defending against buffer overflows which are considered vulnerabilities is a far saner boundary than a blacklist of files which grows infinitely.

[ Parent | on HN ]

Re:Kaspersky AV injected unique ID allowing sites to track u... by throwamay1241 on Sunday August 18, 2019 @06:36PM (#20733405)

Or we could, you know, just stop using Microsoft Office and Adobe products which are a huge, if not the biggest culprit of that kind of crazy behaviour.

[ Parent | on HN ]