Reply to thread

Message

<blockquote data-quote="SomeRandomCat" data-source="post: 926031" data-attributes="member: 90137">Honestly, any properly coded default-deny security-software such as SecureAPlus, Comodo, Kaspersky - they are all going to be extremely easy to use for the average person.&nbsp; The reason I say this, is because the average person won&#039;t be downloading anything that isn&#039;t already in said product&#039;s white-list, so they won&#039;t have to answer prompts or check the sandbox.I think its good these test include such software, especially since it is the default configuration when installing them. It has always been absolutely insane to me that so many AntiVirus companies depend on blacklisting. There are always going to be 0-day threats and for both the experienced PC user and novice alike, those are the real problem.For a couple hundred bucks just about anyone can pay an experienced coder to whip a reliable RAT up and bypass signature detection (even more so now days, than 20 years ago). The average user isn&#039;t going to have heuristics on high, and even if they did, most products still wouldn&#039;t be likely to properly detect something properly packed with a cert.I do think it&#039;s a bit scary though that they all trust certificates signed by certain companies by default, but I guess those are more rare cases.I played around with SecureAPlus a couple weeks ago, and I thought default-deny was setup out of the box, but maybe I remember wrong and had to set it to that.</blockquote>

[QUOTE="SomeRandomCat, post: 926031, member: 90137"] Honestly, any properly coded default-deny security-software such as SecureAPlus, Comodo, Kaspersky - they are all going to be extremely easy to use for the average person. The reason I say this, is because the average person won't be downloading anything that isn't already in said product's white-list, so they won't have to answer prompts or check the sandbox. I think its good these test include such software, especially since it is the default configuration when installing them. It has always been absolutely insane to me that so many AntiVirus companies depend on blacklisting. There are always going to be 0-day threats and for both the experienced PC user and novice alike, those are the real problem. For a couple hundred bucks just about anyone can pay an experienced coder to whip a reliable RAT up and bypass signature detection (even more so now days, than 20 years ago). The average user isn't going to have heuristics on high, and even if they did, most products still wouldn't be likely to properly detect something properly packed with a cert. I do think it's a bit scary though that they all trust certificates signed by certain companies by default, but I guess those are more rare cases. I played around with SecureAPlus a couple weeks ago, and I thought default-deny was setup out of the box, but maybe I remember wrong and had to set it to that. [/QUOTE]

Verification