Anti Virus thread

[Leno]

Howdy

I have always been an ESET Anti Virus fan, seemed to be the least impact on system resources etc.

A while back they started forcing you to use the whole Cyber Security Suite, and not just the Anti Virus
Cyber Security includes a web proxy which seemed to break and slow down a lot of things

If you disable it, each time you reboot there is a bug and you dont have any network access,
so you have to enable it, then disable it again.

I only want the file protection as every now and again I download a non
app store app which is pretty much Russian Roulette

I am trying out Bitdefender 30 day trial, at least it seems they dont impose the web proxies on you.
Will update the thread on how it goes

I am interested in any other recommended anti virus

 

[shadow_man]

No - it's *Unix - largely just don't elevate privileges for stupid things and you'll be fine.

AV's cause all sorts of problems on *nix systems by acting as a middle man, taint kernels, and all in all just cause a huge drop in production / reliability.

Far safer / easier for you to probably just use a VM / container --> blast it as needed.

 

[Leno]

No - it's *Unix - largely just don't elevate privileges for stupid things and you'll be fine.

AV's cause all sorts of problems on *nix systems by acting as a middle man, taint kernels, and all in all just cause a huge drop in production / reliability.

Far safer / easier for you to probably just use a VM / container --> blast it as needed.

I was waiting for someone to say this
Mac got away with it for years as it simply was not attractive to attackers, having such a low install base

Apple patches iOS and macOS zero-day exploited in the wild

Apple has released security updates today to patch a new zero-day vulnerability that Google\'s security team said it\'s been exploited in the wild to compromise user devices.

therecord.media

the CVE list is quite long

Apple Mac Os X : Security vulnerabilities, CVEs

Security vulnerabilities of Apple Mac Os X : List of vulnerabilities affecting any version of this product

www.cvedetails.com

Hell even good old sudo on linux had a bad one this year

CVE-2021-3156 sudo Vulnerability Allows Root Privileges

A severe heap overflow vulnerability in sudo allows an unprivileged user to to elevate privileges to root without authentication.

blog.aquasec.com

The reality is, to work with any company that follows GDPR etc your laptop will need anti virus at the very least

 

[Rocket-Boy]

I was waiting for someone to say this
Mac got away with it for years as it simply was not attractive to attackers, having such a low install base

Apple patches iOS and macOS zero-day exploited in the wild

Apple has released security updates today to patch a new zero-day vulnerability that Google\'s security team said it\'s been exploited in the wild to compromise user devices.

therecord.media

the CVE list is quite long

Apple Mac Os X : Security vulnerabilities, CVEs

Security vulnerabilities of Apple Mac Os X : List of vulnerabilities affecting any version of this product

www.cvedetails.com

Hell even good old sudo on linux had a bad one this year

CVE-2021-3156 sudo Vulnerability Allows Root Privileges

A severe heap overflow vulnerability in sudo allows an unprivileged user to to elevate privileges to root without authentication.

blog.aquasec.com

The reality is, to work with any company that follows GDPR etc your laptop will need anti virus at the very least

Most of the bigger companies have moved away from traditional antivirus and run stuff like Qualys, Crowdstrike and Cisco Umbrella for web sanitization.
Its been a long time since I saw a normal AV product in the wild.

 

[shadow_man]

No - it's *Unix - largely just don't elevate privileges for stupid things and you'll be fine.

AV's cause all sorts of problems on *nix systems by acting as a middle man, taint kernels, and all in all just cause a huge drop in production / reliability.

I was waiting for someone to say this
Mac got away with it for years as it simply was not attractive to attackers, having such a low install base

Apple patches iOS and macOS zero-day exploited in the wild

Apple has released security updates today to patch a new zero-day vulnerability that Google\'s security team said it\'s been exploited in the wild to compromise user devices.

therecord.media

the CVE list is quite long

Apple Mac Os X : Security vulnerabilities, CVEs

Security vulnerabilities of Apple Mac Os X : List of vulnerabilities affecting any version of this product

www.cvedetails.com

Hell even good old sudo on linux had a bad one this year

CVE-2021-3156 sudo Vulnerability Allows Root Privileges

A severe heap overflow vulnerability in sudo allows an unprivileged user to to elevate privileges to root without authentication.

blog.aquasec.com

The reality is, to work with any company that follows GDPR etc your laptop will need anti virus at the very least

You get given a gun - you shoot (elevate privs) yourself in the foot --> that's on you.

Additionally you're pointing at a CVE list which is hardly the same thing as custom written malware - it's a list of exploits or bugs in an application, which an OS upgrade will likely fix --> not something prevented by a random AV client.

It's not to say the OS doesn't have flaws or can't be exploited - but the Unix philosophy is one of least privilege --> escalate only when needed. If you're going to give everything root access, then go and use a Windows machine.

 

[SauRoNZA]

MacOS has XProtect built in.

You don’t need any other kak except using half a brain and not doing obviously stupid things.

 

[Mirai]

Howdy

I have always been an ESET Anti Virus fan, seemed to be the least impact on system resources etc.

A while back they started forcing you to use the whole Cyber Security Suite, and not just the Anti Virus
Cyber Security includes a web proxy which seemed to break and slow down a lot of things

If you disable it, each time you reboot there is a bug and you dont have any network access,
so you have to enable it, then disable it again.

I only want the file protection as every now and again I download a non
app store app which is pretty much Russian Roulette

I am trying out Bitdefender 30 day trial, at least it seems they dont impose the web proxies on you.
Will update the thread on how it goes

I am interested in any other recommended anti virus

I've been using Bitdefender AV for some years now. Does not appear to have much effect on performance.

You could also upload any funny files to Virustotal and have many scanners review them before installing.

 

[Leno]

MacOS has XProtect built in.

TIL , thanks!