Jump to content

Nevi

Members
  • Posts

    8
  • Joined

  • Last visited

Kudos

  1. Upvote
    Nevi gave kudos to Marcos in Cracked Antivirus Issue   
    Since malware often disguise as a crack, keygen, etc. you should avoid using them regardless of whether it's for antivirus or another application.
  2. Upvote
    Nevi gave kudos to itman in Customer satisfaction survey 2021   
    Comments:
    7). Will not renew my EIS subscription unless LiveGuard capability is provided in EIS to block and submit for cloud scanning all locally detected suspicious Eset detection's. That is all currently files being submitted to LiveGrid but allowed to run.
    8). LiveGuard in ESSP currently does not include the ability to set detection confidence levels and receive a suspicious verdict based on those levels as exists in EDTD. This would also include a display of suspicious factors found.
    9). HIPS file wildcard specification capability that I have asked for years.
  3. Upvote
    Nevi gave kudos to Aryeh Goretsky in Gryphon Router   
    Hello,

    Hmm… this is kind of a long answer.  ESET is always looking at all sorts of new (and not-so-new) technologies and how we can better protect people, and the Internet of Things is one of those areas where there are a lot of challenges and a lot of interest.  We have done everything from finding vulnerable devices and reporting them to their vendors (under responsible disclosure guidelines, BTW), as well as looked at the space from the perspective of a higher level overview.  So, from that perspective, ESET does have interest in the space.

    But, that said, it is important to understand that there are a lot of non-obvious background activities that go into shipping actual hardware.  My last employer (before I joined ESET in 2005) was a telephony hardware manufacturer that made embedded systems like VoIP handsets, PoE switches, PBXes and the like.  While that may sound dissimilar to an "IoT device" at first glance, they are really largely the same:  General purpose (commodity) hardware and operating systems software that has been highly-optimized and engineered to perform a few set-purpose activities.  In the case of those devices, that involved things like taking and placing calls, handling voicemail, toggling MWI (message waiting indicator) LEDs and connecting to a variety of standards-based (SIP) and proprietary (Cisco) devices. 

    To get to all of that, though, the company had to go through all sorts of prototyping to design and then test the hardware, source component suppliers, find printed circuit board manufacturers, assembly partners, etc.  Doing all of that requires having lots of electronics engineering talent, with specialization not just in embedded but telecommunications and networking as well.  You have to design the plastics (or contract that out to a design firm), as well as do things like get certification from various regulatory agencies and safety organizations (FCC, UL, TUV and so forth).  You even have to design crush-proof packaging and foam inserts which is a highly-specialized field. 

    Getting device through certification is not always easy (when I left my last employer, they were going through a multi-month long process to get a Bluetooth radio module inside a handset certified for EU use) or cheap.

    And, once you've finally got a working, certifiable product, it gets even more complicated.  If you have a physical product like hardware, you have to have physical space for engineers to sit in, warehouse space for inventory, a shipping department, a QA/testing department, an RMA department for analyzing why units failed in the field and repairing them and so forth.  Also, expect to re-spin (revise) your product's hardware several times over its life-cycle to fix bugs in it.  Those will occur, no matter how much you design or test for them.  At my last employer, they had one product with a circuit board on revision H (8th revision) because revisions A though G had flaws in them.  Even something as simple as the Raspberry Pi 4 has design flaws that need to be fixed with a board redesign.
    All together, that is a lot of work, and while ESET has engaged in some activities-at-scale before which required some specialized engineering, making an IoT security device is in a different kind of direction than the has historically been in.

    That's not to say that you will never see an ESET IoT security device, but just not to expect anything in the near term, because there's a lot of work to do to get into the hardware space.  It may instead be more effective to partner with companies to provide that kind of functionality.  But, that's a discussion far beyond my area of expertise.

    Regards,

    Aryeh Goretsky
     
     
     
  4. Upvote
    Nevi gave kudos to cyberhash in Can anyone post...   
    Is it a full moon or something ???

    You are like a dog with a bone ................ Nobody is stupid enough to run known ransomware just to provide you with a "Screenshot".

    That's just like drinking poison to see if its strong enough ☠️
×
×
  • Create New...