Reply to thread

Message

<blockquote data-quote="bazang" data-source="post: 1115960" data-attributes="member: 114717">Only a highly skilled pentest against a network and information systems with the security software installed to protect that network on the systems therein will give anybody an accurate and reliable notion of how effective that security software actually is.The whole youtuber test methodology of &quot;I executed a malware pack or I downloaded a file from the internet and executed it and entered a malicious URL to see what happens&quot; is so misleading. It creates a one-dimensional narrative of security software capability and quality that is completely false overall.It is &quot;users that want to use stuff&quot; testing, which is complete nonsense from a security perspective. To protect a system from &quot;users that want to use stuff&quot; is an exercise in utter futility. A bypass is assured despite the security software placing first in the test video ranking system.Change the sample set and the ranking order will be different. It will change with every different set of samples.POCs. Well they are just POCs until they aren&#039;t, and they&#039;re actively used as part of a malicious campaign. The POCs stolen from the US government were the basis of an entire slew of malware campaigns over the years.People getting so upset about what is posted about software. I think it is hilarious. Great entertainment. Shows people for what they really are.</blockquote>

[QUOTE="bazang, post: 1115960, member: 114717"] Only a highly skilled pentest against a network and information systems with the security software installed to protect that network on the systems therein will give anybody an accurate and reliable notion of how effective that security software actually is. The whole youtuber test methodology of "I executed a malware pack or I downloaded a file from the internet and executed it and entered a malicious URL to see what happens" is so misleading. It creates a one-dimensional narrative of security software capability and quality that is completely false overall. It is "users that want to use stuff" testing, which is complete nonsense from a security perspective. To protect a system from "users that want to use stuff" is an exercise in utter futility. A bypass is assured despite the security software placing first in the test video ranking system. Change the sample set and the ranking order will be different. It will change with every different set of samples. POCs. Well they are just POCs until they aren't, and they're actively used as part of a malicious campaign. The POCs stolen from the US government were the basis of an entire slew of malware campaigns over the years. People getting so upset about what is posted about software. I think it is hilarious. Great entertainment. Shows people for what they really are. [/QUOTE]

Verification