On Mon, 09 Sep 2013 19:14:46 -0700, Patrick Elliott wrote:

> Oh, and.. more to the point, now that they have something semi-decent,

What, you mean MS Security Essentials?  You think a /reactive/ tool is 
semi-decent?  One that isn't based on behaviour, but based on pattern 
matching?

> they still block networking tools why? Its not like the botnet code is
> going to, unless there is something fatally wrong with their "solution",

Which there is - it's REACTIVE, not PROACTIVE or BEHAVIOURAL in nature.

The best types of behavioural technology are things like AppArmor and 
SELinux, but those actually require a fair amount of expertise and skill 
to set up - there isn't an "out of the box" configuration that works for 
everyone, and it's not something your grandmother is going to be able to 
set up reasonably.

Jim

Post a reply to this message