Why I Hate Conventional
Scanners
(and the industry that produces them)
Below are excerpts from a very lengthy debate in a forum on another site. The quotes are from me...Mikey. "I think it is sad that so many still periodically rip the guts
out of their system while usually using multiple scanners and without even
a clue to what items they are removing. Then these same folks wonder why
their system and applications fail to function properly after they have
been ripped apart by various scanners."
"The industry continues to suck money from users with annual subscriptions
to lease (not sell) their wares. Of course they aren't going to innovate
to techniques and processes that really protect...that would decrease their
revenue...a revenue & market share now sought
after by every scam artist out there. Some vendors have even been
caught playing on both sides of the street."
"We don't want our system to be bogged down with massive bloatware
that uses half the available resources including tech support. We prefer
our file protections & redundant process filtering as well as our host
based content filtering that use a negligible amount of resources by comparison.
We don't want to maintain/update multiple signature DBs that are
ALWAYS going to be behind the infection instead of preventing it. If we
were to get a newer malware on board somehow, none of the conventional
scanners are likely to even detect it much less remove it properly anyway.
We don't want to spend the human resources required for clean up
after an infection that could have just as easily been avoided.
What we do want is 'control' and that is what we strive for. IMO
all resident signature based scanners are just dinosaurs."
"So, I really feel sorry for those folks who are still being exploited
by both the malware propagators and the anti-malware industry simultaneously."
"I'm certainly not blaming the user for the probs of the web. The
users are being scamed by the entire industry. However, no one on the planet
can go without knowing that the web can be dangerous. TV, radio, newspapers
and all media's have told the stories. Therefore, what kind of user goes
online without at least trying to learn how to do it properly. I do take
issue with morons who are to stupid or too lazy to even try learning safe
practices."
"Will all folks be willing to learn? Probably not. Most users have
been taught all the wrong ways when they could
have just as easily learned how to use the tools and techniques that really
work. We've known better for many years now. It really isn't rocket science.
Granted, there are many who are lost causes, but they will always be losers
and there isn't anything we can do for those who refuse to do for themselves.
I just don't believe that the majority of folks are morons. This
community doesn't even try to teach REAL security and the only reason I've
been able to see over the years is because it is less profitable.
Yes, some low level techniques like blocklist content filters are
suggested but only a handful of folks try to teach the real thing. Thus
the majority of users are led down the path to 'continual exploitation'
by both the propagators and the so called pri/sec community.
Developers can just as easily produce tools that work as the ones
they develop now. As an insider, I know first hand how corrupt this bogus
industry
is."
"Even one of the well established anti-malware developers (DiamondCS)
has now denounced the bogus and obsolete methods that have thus far been
predominant (scam) and they completely retooled their organization. More
and more honest developers will surely follow suit. If they don't, I hope
they get left behind. There have also been a rash of new products offered
lately. It's time for this long siege to end.
I also think that the majority of folks coming here for help and
guidance want to learn how to avoid infections. It would be nice to see
that actually happen."
|