Comment by dirkf | Hacker News Reader

Top New Best Ask Show Jobs

Comment by dirkf | Hacker News Reader

Parent Full thread

Take a look at the other articles from the same author where he investigated some popular anti-virus products. In particular Kaspersky is/was a mess:

- https://palant.de/2019/08/19/kaspersky-in-the-middle-what-co...

- https://palant.de/2019/11/25/kaspersky-the-art-of-keeping-yo...

- https://palant.de/2019/11/26/internal-kaspersky-api-exposed-...

- https://palant.de/2019/11/27/assorted-kaspersky-vulnerabilit...

McAfee:

- https://palant.de/2019/12/02/rendering-mcafee-web-protection...

And I expect that he will publish more articles in the future.

If you want to use anti-virus I would stick to their on-access scanning and stay away from their web protection...

More very entertaining evidence of how terrible most antivirus products are can be found be reading many of the Project Zero bug reports by taviso. https://bugs.chromium.org/p/project-zero/issues/list?q=owner... There are a lot of them!

I would like to have a low power ARM box just for scanning files, like PiHole but for AV but I think it would be limited only to Clam AV; does any other AV support linux on ARM(not android)?

Could you try qemu-i386 (or ExaGear with patching licensing... as it's dead) with https://github.com/taviso/loadlibrary (see the Windows Defender section)?

Yeah it's hacky, but might work well for your usecase.

Thank you, but both of those projects look dead; I'll check them out.

Reply on news.ycombinator.com