Re: AV for OSX

["Ryan" <randomrhythm () rhythmengineering com>]

I personally would go with yes but it of course comes down to the individual and their risk assessment. I agree with 
John that if you are targeted by an experienced and determined attacker AV won't likely get in their way.  For that 
scenario you best have your systems locked down and other defenses in place.  As John has said in the past you should 
design your security as if you don't have antivirus at all.  However, I will say not all attackers are as skilled and 
knowledgeable as John Strand.  Antivirus is a last line of defense and if it can block, interfere or identify a 
percentage of attacks then it may be worth the performance hit and bugs. 

I also fully agree with John that antivirus adds system load and may make your system or applications unstable.  Those 
are real side effects and risks of running antivirus.  Adding appropriate scan exclusions, turning off real-time 
scanning, upgrading or switching products can usually help out with those if you've got the time to fool with it.  At 
minimum doing a scheduled scan at some interval could still add value if simply to tell you the system was compromised. 
 Some people won't know they were hacked until someone or something tells them like a virus detection alert.  

I recommend Sophos but I'm sure there is a ClamAV port that may fit your needs.

Ryan
  ----- Original Message ----- 
  From: John Strand 
  To: PaulDotCom Security Weekly Mailing List 
  Sent: Wednesday, August 22, 2012 2:20 PM
  Subject: Re: [Pauldotcom] AV for OSX




  No.


  The reason?  I have yet to be on a test were it gets in the way. 


  I do know it causes your system to run slower and crash more.


  I would rather have a faster, less secure system than the illusion of security.







  On Wed, Aug 22, 2012 at 11:38 AM, xgermx <xgermx () gmail com> wrote:

    To run or not to run, that is the question. (Let's assume a home environment for this scenario)
    Why or why not?
    If yes, which product?

    Best,

    germ.

    _______________________________________________
    Pauldotcom mailing list
    Pauldotcom () mail pauldotcom com
    http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
    Main Web Site: http://pauldotcom.com






  -- 
  John Strand
  O: (605) 550-0742
  C: (303) 710-1171




------------------------------------------------------------------------------


  _______________________________________________
  Pauldotcom mailing list
  Pauldotcom () mail pauldotcom com
  http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
  Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com