Full Disclosure mailing list archives

Re: AV companies better hire good lawyers soon.


From: Frank Knobbe <frank () knobbe us>
Date: Tue, 14 Sep 2004 12:03:59 -0500

On Tue, 2004-09-14 at 08:14, Micheal Espinola Jr wrote:
[...] If your software is so important that you and
your user base cannot deal with possibly up-to a few days of
inconvenience due to a false-positive - then yes, you had better
coordinate with with that software vendor to make certain your
precious software is not one of them. [...]

Alternatively, software manufacturers can add their applications into AV
exclusion lists upon installation of their products. Applications
already have to "register" with the operating systems. Why not make it
register with the AV software if the software is prone to false
positives? Or at least advice the end-user of such recommended manual
step during installation.

If the user trusts the application, and does not trust the AV software,
he can override the AV checks for this software. If AV vendors present a
lot of false positives, my guess is that the trust of the end user in
those AV products will wane.

So, it is in the best interest for the AV vendor to ensure low/no false
positives. There is no need for software manufacturers to "register"
their products with AV vendors.

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: