Advice Request VoodooShield and VirusTotal policy change

[TheMalwareMaster]

Good evening! Do you know if VoodooShield will be forced to disconnect from VirusTotal due to their new policy?

 

[SHvFl]

VT will probably add VAi in their engines and VS will keep using VT like always. Ask the dev on the other forum i guess.

 

[Wave]

Sorry for the dumb question but do you have the change-log by any chance? (on the new VT policy)

 

[TheMalwareMaster]

Sorry for the dumb question but do you have the change-log by any chance? (on the new VT policy)

Here you are VirusTotal Policy Change (May 2016)

 

[Wave]

Here you are VirusTotal Policy Change (May 2016)

Thanks, sorry I thought you meant they rolled out a new one in the recent month or so! Hmm... I think that VoodoShield will be fine; VirusTotal (Google) themselves can give out exceptions to whoever they want as well, maybe that was already done.

Who knows, I guess only time will tell, but I doubt it'll cause a problem.

 

[TheMalwareMaster]

I see that Secure A Plus already switched to jotti, so maybe VoodooShield was allowed to stay with VirusTotal

 

[shmu26]

I understood that Voodoo has a certain technicality in the way it functions that provides them with a loophole to avoid the rule. Something to do with first blocking the file, and only afterwards looking up.

 

[Wave]

I understood that Voodoo has a certain technicality in the way it functions that provides them with a loophole to avoid the rule. Something to do with first blocking the file, and only afterwards looking up.

They probably got given permission to use a Private API key as well which is what I believe Crystal Security was allowed to do; this removes some of the limitations, allowing more queries in a shorter time for submissions, etc.

If you wish to use VT then you just speak to them and they can give you more if they want to allow you to use the service, otherwise you have to just make sure you're within the normal rule boundaries with the public API key.