Reply to thread

Message

<blockquote data-quote="ExecutiveOrder" data-source="post: 961590" data-attributes="member: 93099">AV extensions have nothing to do with certificates for the encrypted connections, you have to disable encrypted connection scan right from the main UI of every AV but you should know that most malware is distributed from encrypted connections. It&#039;s still highly possible to block the threat after it gets downloaded, but it will be difficult in some cases like in supply chain attacks (because the update data are encrypted, it also could be used to run a script to execute file-less attack directly into memory), post-infection is also possible to remediate but should take not that it already bypassed some of the protection layers.uBlock Origin is safe but it can&#039;t be compared to this topic because the extension isn&#039;t just about Ad-Block as you can see from previous explanations, well because you can&#039;t use AV extension, then use uBlock it&#039;s safe and quite good for blocking ads and some other stuff.That news from Washington was from a 2017 issue about Kaspersky that ends up banning the software of Kaspersky on US government computers. If you look at every news and other things regarding the issue, it&#039;s more like &quot;caught in the geopolitical fight&quot;. Also, the news suggests that it was from the mechanism of AV product (a lot of vendors did this) specifically KSN (Kaspersky Security Network, other vendor has their own name for cloud infrastructure) and they just speculate that vendor A could be forced to cooperate for dirty work of their country and etc. So, if they did do the dirty job, you should disable KSN and secure the connection, this made the product far worse than the others (with full functionality, including 2 of these similar method). Even if &quot;silent signatures&quot; is complete, true, they can steal your data anyway, and you shouldn&#039;t trust their transparency report, two valid major business audits, and other things = just don&#039;t use Kaspersky.As a regular user (not a US govt employee), you shouldn&#039;t get distracted by this issue.There&#039;s a forum thread specifically talking about this with tons of opinions from multiple members:<a href="https://malwaretips.com/threads/is-kaspersky-trustable.110395/" target="_blank">Q&amp;A - Is Kaspersky trustable?</a></blockquote>

[QUOTE="ExecutiveOrder, post: 961590, member: 93099"] AV extensions have nothing to do with certificates for the encrypted connections, you have to disable encrypted connection scan right from the main UI of every AV but you should know that most malware is distributed from encrypted connections. It's still highly possible to block the threat after it gets downloaded, but it will be difficult in some cases like in supply chain attacks (because the update data are encrypted, it also could be used to run a script to execute file-less attack directly into memory), post-infection is also possible to remediate but should take not that it already bypassed some of the protection layers. uBlock Origin is safe but it can't be compared to this topic because the extension isn't just about Ad-Block as you can see from previous explanations, well because you can't use AV extension, then use uBlock it's safe and quite good for blocking ads and some other stuff. That news from Washington was from a 2017 issue about Kaspersky that ends up banning the software of Kaspersky on US government computers. If you look at every news and other things regarding the issue, it's more like "caught in the geopolitical fight". Also, the news suggests that it was from the mechanism of AV product (a lot of vendors did this) specifically KSN (Kaspersky Security Network, other vendor has their own name for cloud infrastructure) and they just speculate that vendor A could be forced to cooperate for dirty work of their country and etc. So, if they did do the dirty job, you should disable KSN and secure the connection, this made the product far worse than the others (with full functionality, including 2 of these similar method). Even if "silent signatures" is complete, true, they can steal your data anyway, and you shouldn't trust their transparency report, two valid major business audits, and other things = just don't use Kaspersky. As a regular user (not a US govt employee), you shouldn't get distracted by this issue. There's a forum thread specifically talking about this with tons of opinions from multiple members: [URL='https://malwaretips.com/threads/is-kaspersky-trustable.110395/']Q&A - Is Kaspersky trustable?[/URL] [/QUOTE]

Verification