Reply to thread

Message

<blockquote data-quote="RejZoR" data-source="post: 860349" data-attributes="member: 57233">LMAO AHAHAHAHA. You&#039;re&nbsp; going that route and calling me avast! fanboy. AHAHAHAHAHA. Dude, this is thread about Kaspersky. KASPERSKY. So I must be avast! fanboy. I&#039;m in defense of things that I&#039;m well aware and know things about. I know avast! and Kaspersky well. I couldn&#039;t give a ##### about stupid AVIRA though I might step in their defense if people spread some obviously wrong info.Also I don&#039;t care where you were employed, it&#039;s just what you&#039;re actually saying that makes no sense. I mean, your surprise that Kaspersky literally collects ENTIRE binary files is what&#039;s telling that you don&#039;t understand things. Yes, you need a whole file in today&#039;s cloud systems, because they need to train the system. Having only hash of the file is of absolutely no use to them other than knowing if they already gathered the exact same file (which in case of server side polymorphic malware means nothing as they can churn out thousands of same EXE files with different hashes). They&#039;ll collect them all thinking it&#039;s new unique files if only hash is taken into account and when fed into their ML systems, the system will realize they are all the same.</blockquote>

[QUOTE="RejZoR, post: 860349, member: 57233"] LMAO AHAHAHAHA. You're going that route and calling me avast! fanboy. AHAHAHAHAHA. Dude, this is thread about Kaspersky. KASPERSKY. So I must be avast! fanboy. I'm in defense of things that I'm well aware and know things about. I know avast! and Kaspersky well. I couldn't give a ##### about stupid AVIRA though I might step in their defense if people spread some obviously wrong info. Also I don't care where you were employed, it's just what you're actually saying that makes no sense. I mean, your surprise that Kaspersky literally collects ENTIRE binary files is what's telling that you don't understand things. Yes, you need a whole file in today's cloud systems, because they need to train the system. Having only hash of the file is of absolutely no use to them other than knowing if they already gathered the exact same file (which in case of server side polymorphic malware means nothing as they can churn out thousands of same EXE files with different hashes). They'll collect them all thinking it's new unique files if only hash is taken into account and when fed into their ML systems, the system will realize they are all the same. [/QUOTE]

Verification