Reply to thread

Message

<blockquote data-quote="Zero Knowledge" data-source="post: 867319" data-attributes="member: 57429">I would more worried about supply chain attacks, harden all you like but you can not stop trusted programs doing funky stuff unless you have meassures in place to observe and watch what it is doing, you trust the source so you install without thinking. But what if a exploit is shipped within that installer so you get hosed. AV/AM won&#039;t be able to stop that, it&#039;s debatable if AppGuard/ReHips/OSArmour can even protect you because to run that installer you have allow it&#039;s install behavior and protection from those programs is rendered useless. Getting struck by lightning is not nice btw <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite115" alt=":p" title="Stick out tongue&nbsp; &nbsp; :p" loading="lazy" data-shortname=":p" />I think Kaspersky is the best of the bunch, but it&#039;s firewall/network protection and trusted apps leave holes. I know they do this for usability because most users would go bonkers with so many alerts so you need to automate them. But I am at that stage where I want those alerts.</blockquote>

[QUOTE="Zero Knowledge, post: 867319, member: 57429"] I would more worried about supply chain attacks, harden all you like but you can not stop trusted programs doing funky stuff unless you have meassures in place to observe and watch what it is doing, you trust the source so you install without thinking. But what if a exploit is shipped within that installer so you get hosed. AV/AM won't be able to stop that, it's debatable if AppGuard/ReHips/OSArmour can even protect you because to run that installer you have allow it's install behavior and protection from those programs is rendered useless. Getting struck by lightning is not nice btw :P I think Kaspersky is the best of the bunch, but it's firewall/network protection and trusted apps leave holes. I know they do this for usability because most users would go bonkers with so many alerts so you need to automate them. But I am at that stage where I want those alerts. [/QUOTE]

Verification