News for hackers. Stuff that matters.

beaverden

Re:PayPal to acquire shopping and rewards platform Honey for $4B on Thursday November 21, 2019 @05:17AM (#21592807)
Reminds me of the Monese rush my colleagues have. I heard they're giving referral money to both the inviting and the invited. So far, I've seen only the person who actively invites people to actually use it, because no one else actually needs it in the heavy presence of Revolut in our market. Basically, if you give away money, make sure people are actually using the product
The data is empirical, based on comparative results of some files I've mananged to get my hands on over the years. I can't argue on MitM, because I haven't worked with traffic and traffic analysis, but when it comes to malicious executables and exploits, it's definitely worth the mitm inconvenience.

Ironically speaking, privacy concerned users are mostly IT-versed which can evade most of malware effects by just being attentive and caucios, while my mother, for example, doesn't care about MitM'ing her traffic, while I do care about her vising some shady sites while watching her beloved internet series.

Bottom line, if you are well versed, you probably can limit yourself to the default windows defender, but when it comes to successful unreleased exploits or a computer/user that is likely to download/run unknown executables some high-end vendor might be faster than other researches

What I can say from a more or less objective standpoint, the best vendors according to a response-time metric are Eset, Kaspersky and Bitdefender. Each of them have their own weaknesses and I do not know what is the performance impact for using them alongside defender
I disagree with the point you made about 0days and detection rates. Defender has less false positives, but almost never catch the files that actually matter, like important 0days or antiemulation and anti-unpack files. They are pretty slow with crafting generic detections.

While I understand that data from well known tests may support your point, as an employee for 2+ years at a security vendor I can say with certainty that defender falls way behind when it comes to fast generic detections and response time. I quite frequently find myself copying maliciois files to my work laptop with defender activated and the detection rate is pretty poor as shown by the actual number of files that got copied. Not even mentioning how it quietly scans my files and activates itself even though I singlehandedly shut it down a minute ago