<story><title>German Government Agency warns about using Kaspersky</title><url>https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2022/220315_Kaspersky-Warnung.html</url></story><parent_chain><item><author>c0l0</author><text>I will go on the record here and one-up them, warning against the use of &lt;i&gt;any&lt;/i&gt; antivirus product. SO many vulns and gaping, smoking holes in that kind of software over the years, it&amp;#x27;s not even funny. Faux-security is what most vendors are peddling.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;GossiTheDog&amp;#x2F;status&amp;#x2F;1427935182200492039&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;GossiTheDog&amp;#x2F;status&amp;#x2F;1427935182200492039&lt;/a&gt; is one of my favourite bugs from recent years. I acknowledge this bug is not specific to an antivirus product (but of course, Fortigate offers that as an optional component for traffic inspection - and I keep wondering what that sub-component&amp;#x27;s code quality is like 8-)), but anyone who tries WILL find examples for grave problems aplenty.</text></item></parent_chain><comment><author>st_goliath</author><text>Yes, basically this. On the one hand, being able to parse every protocol and file format under the sun in search for malware means high complexity and a lot of attack surface. On the other hand, being able to read every file, intercept all network traffic, or peek into any processes memory means pretty much highest system privilege level. Big attack surface and high privilege level are a &lt;i&gt;bad&lt;/i&gt; combination.&lt;p&gt;And regarding the point that the BSI is trying to make here: A high privilege process with an auto-update channel back home (as modern software tends to have), is basically an extremely powerful backdoor. That&amp;#x27;s definitely not something you want to have installed across loads of systems across your countries industry and critical infrastructure.&lt;p&gt;It&amp;#x27;s funny that they apparently only realize this &lt;i&gt;now&lt;/i&gt;. The same reasoning in the article can be used pretty much regardless of the AVs country of origin.</text></comment>
<story><title>German Government Agency warns about using Kaspersky</title><url>https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2022/220315_Kaspersky-Warnung.html</url></story><parent_chain><item><author>c0l0</author><text>I will go on the record here and one-up them, warning against the use of &lt;i&gt;any&lt;/i&gt; antivirus product. SO many vulns and gaping, smoking holes in that kind of software over the years, it&amp;#x27;s not even funny. Faux-security is what most vendors are peddling.&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;GossiTheDog&amp;#x2F;status&amp;#x2F;1427935182200492039&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;twitter.com&amp;#x2F;GossiTheDog&amp;#x2F;status&amp;#x2F;1427935182200492039&lt;/a&gt; is one of my favourite bugs from recent years. I acknowledge this bug is not specific to an antivirus product (but of course, Fortigate offers that as an optional component for traffic inspection - and I keep wondering what that sub-component&amp;#x27;s code quality is like 8-)), but anyone who tries WILL find examples for grave problems aplenty.</text></item></parent_chain><comment><author>qwertox</author><text>Most insurances expect you to have an AV installed.</text></comment>