<story><title>Kaspersky: SSL interception differentiates certificates with a 32bit hash</title><url>https://bugs.chromium.org/p/project-zero/issues/detail?id=978</url></story><parent_chain><item><author>nxc18</author><text>I don&amp;#x27;t understand how these antivirus vendors are still in business. Even when they do have marginally better detection rates than the built in solution, the licensing, annoying popups, system slowdown, and security-defeating &amp;#x27;features&amp;#x27; make them a losing proposition.&lt;p&gt;Pre-bundled and even purchased AV is so dramatically deleterious to PC performance that MS should kill it as public service. It gives the entire ecosystem a bad reputation and nowadays is completely unnecessary.</text></item></parent_chain><comment><author>WorldMaker</author><text>That&amp;#x27;s part of why I keep pointing new PC buyers to the &amp;quot;Signature Edition&amp;quot; program [1] where Microsoft does forbid pre-bundled AV on PCs sold through that program (at Microsoft Stores and participating Best Buys and other stores if you know to ask).&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.microsoftstore.com&amp;#x2F;store&amp;#x2F;msusa&amp;#x2F;en_US&amp;#x2F;cat&amp;#x2F;categoryID.69916600&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.microsoftstore.com&amp;#x2F;store&amp;#x2F;msusa&amp;#x2F;en_US&amp;#x2F;cat&amp;#x2F;categor...&lt;/a&gt;</text></comment>
<story><title>Kaspersky: SSL interception differentiates certificates with a 32bit hash</title><url>https://bugs.chromium.org/p/project-zero/issues/detail?id=978</url></story><parent_chain><item><author>nxc18</author><text>I don&amp;#x27;t understand how these antivirus vendors are still in business. Even when they do have marginally better detection rates than the built in solution, the licensing, annoying popups, system slowdown, and security-defeating &amp;#x27;features&amp;#x27; make them a losing proposition.&lt;p&gt;Pre-bundled and even purchased AV is so dramatically deleterious to PC performance that MS should kill it as public service. It gives the entire ecosystem a bad reputation and nowadays is completely unnecessary.</text></item></parent_chain><comment><author>Nadya</author><text>Antivirus are just another attack vector - and due to their often escalated privileges running on a machine, they are a &lt;i&gt;very attractive attack vector&lt;/i&gt;.&lt;p&gt;Not to mention the pitiful detection rate (&amp;lt;50%~ for nearly any antivirus software) makes them nearly useless: once you&amp;#x27;re pwned, you&amp;#x27;re pwned.</text></comment>