my tweets are severely limited by my lack of understanding of what I am doing.
Genuine fear: If you look at supply chain attack targets, #1 = Microsoft. They good. #2 = antivirus and InfoSec companies. Risky business.
Pokaż ten wątek
-
Until very recently one AV used just HTTP for updates and didn't check signatures. Big targets + InfoSec issues = red flag.
Pokaż ten wątek
Usually orgs only have one AV per system + they allow fully automated updates, inc code, as that's how AV updates work. No barrier.
-
-
just like all fields using one type of seed. Bad idea. One disease knocks out alll. SMTP AV != Web AV != desktop AV = != Server AV
Dziękujemy. Twitter skorzysta z tych informacji, aby Twoja oś czasu bardziej Ci odpowiadała. CofnijCofnij
-
-
-
This is what I've been trying to say w.r.t. why Kaspersky is such a big risk. Automatic updates, phone-home telemetry, SYSTEM permissions...
-
That's a different thing, 'how much do you trust the AV companies themselves re the countries they operate in', as opposed to attackers.
- Pokaż odpowiedzi
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.