Uninstall antivirus software - vendors are terrible
That is what an Ex-Mozilla developer states on his blog. He is not the first though, earlier on Google employees called on this one as well. The Mozilla engineer states that now he has left Mozilla he’s finally able to speak out about it.
He calls for users to no longer purchase anti-virus software and to uninstall any previously purchased anti-virus applications. He does add that uninstalling antivirus software should only be done on an up-to-date OS. Ex-Mozilla engineer Robert O’Callahan argues that only Microsoft’s antivirus solution can be safely used and that the others ‘poison the software ecosystem’. He writes, “AV [antivirus] products poison the software ecosystem because their invasive and poorly-implemented code makes it difficult for browser vendors and other developers to improve their own security.”
Here's a paste from his posting:
But you also need to your OS to be up-to-date. If you're on Windows 7 or, God forbid, Windows XP, third party AV software might make you slightly less doomed.)
At best, there is negligible evidence that major non-MS AV products give a net improvement in security. More likely, they hurt security significantly; for example, see bugs in AV products listed in Google's Project Zero. These bugs indicate that not only do these products open many attack vectors, but in general their developers do not follow standard security practices. (Microsoft, on the other hand, is generally competent.)
Furthermore, as Justin Schuh pointed out in that Twitter thread, AV products poison the software ecosystem because their invasive and poorly-implemented code makes it difficult for browser vendors and other developers to improve their own security. For example, back when we first made sure ASLR was working for Firefox on Windows, many AV vendors broke it by injecting their own ASLR-disabled DLLs into our processes. Several times AV software blocked Firefox updates, making it impossible for users to receive important security fixes. Major amounts of developer time are soaked up dealing with AV-induced breakage, time that could be spent making actual improvements in security (recent-ish example).
What's really insidious is that it's hard for software vendors to speak out about these problems because they need cooperation from the AV vendors (except for Google, lately, maybe). Users have been fooled into associating AV vendors with security and you don't want AV vendors bad-mouthing your product. AV software is broadly installed and when it breaks your product, you need the cooperation of AV vendors to fix it. (You can't tell users to turn off AV software because if anything bad were to happen that the AV software might have prevented, you'll catch the blame.) When your product crashes on startup due to AV interference, users blame your product, not AV. Worse still, if they make your product incredibly slow and bloated, users just think that's how your product is.
If a rogue developer is tempted to speak out, the PR hammer comes down (and they were probably right to do so!). But now I'm free!
Download Display Driver Uninstaller DDU version 15.7.0.1 - 11/25/2015 12:05 AM
Download Display Driver Uninstaller DDU version 15.7.0.0 - Display Driver Uninstaller is a driver removal utility for AMD/NVIDIA graphics card drivers and packages. This release includes support for ...
Download Display Driver Uninstaller DDU version 15.6.0.2 - 11/16/2015 10:16 AM
Download Display Driver Uninstaller DDU version 15.6.0.2 - Display Driver Uninstaller is a driver removal utility that can help you completely uninstall AMD/NVIDIA graphics card drivers and packages...
Download Display Driver Uninstaller (DDU) 1.4.0.0.0 - 02/26/2015 10:12 AM
The handy DDU / Display Driver Uninstaller is now at update 1.4.0.0.0 - Display Driver Uninstaller is a driver removal utility that can help you completely uninstall AMD/NVIDIA graphics card drivers...
Download DDU Display Driver Uninstaller v13.5.4.1 - 12/15/2014 01:24 PM
You can now download DDU as Ghislain has updated the popular DDU towards revision 13.5.4.1 isplay Driver Uninstaller is a driver removal utility that can help you completely uninstall AMD/NVIDIA g...
Download Display Driver Uninstaller DDU 13.2.0.0 - 09/25/2014 06:14 PM
Download Display Driver Uninstaller 13.2.0.0 - Display Driver Uninstaller is a driver removal utility that can help you completely uninstall AMD/NVIDIA graphics card drivers and packages from your s...
Member
Posts: 78
Joined: 2016-08-22
"argues that only Microsoft’s antivirus solution can be safely used and that the others ‘poison the software ecosystem’"
He lost me here.
I don't believe mentally challenged people.
Hah, you're so cool and edgy!
I mean, why would you trust multiple people who are very knowledgable about this when they speak up and give very reasonable arguments, right?
Senior Member
Posts: 12310
Joined: 2013-01-17
If I would use any 3rd party AV software I would install/activate only protection module which guards file system.
Senior Member
Posts: 3489
Joined: 2014-10-20
Octopuss
Good, bye, dont come back.
Member
Posts: 83
Joined: 2016-09-27
This is very true. I stopped using AV software approx. 4 years ago and just made sure my system is updated. Built-in MS anti-virus is ok for periodic scans.
AV typically just caused issues and made the system slower. Not to mention various notifications and popups and whatnot.
Finally, you have to be really careful about what you install and use. If you are downloading and installing crap, nothing will save you.
Senior Member
Posts: 866
Joined: 2012-05-14
"argues that only Microsoft’s antivirus solution can be safely used and that the others ‘poison the software ecosystem’"
He lost me here.
I don't believe mentally challenged people.