Comments on: Open source a natural for anti-virus software?

Some argue that open source could actually make the world's virus problems worse. Those people are smoking something.

[deshpaaa]

Open Source is a good solution

I second you. Open Source approach for a anti-virus should work as a good approach. A more community driven intiative will be a more natural way.
Amit
http://www.amit-deshpande.com/

[sam_sw17]

Best Antivirus

The Best Antivirus of all is Nod32
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]

[fatalflaw]

Not so hot

First: open source = downloadable source code = too much information for VXers. Second - what if the guy responsible for releasing new signatures has a problem at work or with girlfriend/wife/cat that day? I'm not persuaded that there would be sufficient motivation to see it's covered. So we are exposed. Third - there is an increased risk that a VXer masquerading as a legit contributor could add code for his/her own purposes. Conclusion: I prefer a secretive, financially motivated, paranoid a/v provider.

[PACSferret]

Clearly the message....

Hasn't got through. Another quote from Peter Schwankl:
"
an open source community wouldn?t have the dedicated resources that a company does to produce consistent, worthwhile, and stable-running AV software
"
Haven't we heard that line before?

[royrusso]

Flawed Argument

@fatal

[http://Second - what if the guy responsible for releasing new signatures has a problem at work or with girlfriend/wife/cat that day? I'm not persuaded that there would be sufficient motivation to see it's covered. So we are exposed. Third - there is an increased risk that a VXer masquerading as a legit contributor could add code for his/her own purposes.|http://Second - what if the guy responsible for releasing new signatures has a problem at work or with girlfriend/wife/cat that day? I'm not persuaded that there would be sufficient motivation to see it's covered. So we are exposed. Third - there is an increased risk that a VXer masquerading as a legit contributor could add code for his/her own purposes.]

What if the guy working at a corporate anti-virus vendor has a bad day? Since their code and processes are a black box to us, we'd never know.

The point of OSS is that their are many (sometimes hundreds) of eyeballs looking at code committals. Any deceptive practice by one individual will likely not pass the smell test.

[fatalflaw]

Still not so hot

@Flawed

[http://What if the guy working at a corporate anti-virus vendor has a bad day? Since their code and processes are a black box to us, we'd never know.|http://What if the guy working at a corporate anti-virus vendor has a bad day? Since their code and processes are a black box to us, we'd never know.] First: any top-tier a/v provider will have rotas and plans to cover situations like this, they can afford to, and they can't afford not to, and they didn't become top-tier by screwing that kind of thing up. My argument is not concerned with resources, it's the management of those resources, which IMHO is necessarily too diffuse in an open source community. Second: If an OS a/v vendor's processes are open, that is again giving too much information to VXers, allowing them for example to pick their moment to launch a more effective attack because fred and barbara are away for the weekend.

[http://deceptive practice by one individual will likely not pass the smell test.|http://deceptive practice by one individual will likely not pass the smell test.] Yes ok I accept that.

Still ... it just feels wrong to me to open this stuff up, like saying it's ok to leave your car unlocked because it has an immobiliser.

[royrusso]

Hot is hot

@fatal

[First: any top-tier a/v provider will have rotas and plans to cover situations like this, they can afford to, and they can't afford not to, and they didn't become top-tier by screwing that kind of thing up.]

If they're so awesome, why do we still have an ongoing virus problem, and why are their products becoming infinitely bloated? I can tell you from personal experience, from years of training and consulting in corporate environments... I've dealt with an awful lot of pinhead developers and IT managers at very large corporations. Just because they're "big and successful" doesn't mean they exactly have decent coding practices. (Often, good marketing + inertia wins over good tech).

[Second: If an OS a/v vendor's processes are open, that is again giving too much information to VXers, allowing them for example to pick their moment to launch a more effective attack because fred and barbara are away for the weekend.]

Then why is Linux so much more secure than Windows? (Note: I am a Windows user and not a Linux shill)

[http://Still ... it just feels wrong to me to open this stuff up, like saying it's ok to leave your car unlocked because it has an immobiliser.|http://Still ... it just feels wrong to me to open this stuff up, like saying it's ok to leave your car unlocked because it has an immobiliser.]

A better analogy, I'd argue, is saying your car is much safer with a neighborhood watch program than with the local police watching it. I'd bet on the neighbors, as they have a vested interest in keeping the neighborhood clean.