Focus on Apple
ClamXav for OS X 10.4 Aug 10 2007 02:43PM
Pfost William B (William Pfost ci irs gov) (4 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 09:28PM
Todd Woodward (todd_woodward symantec com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 12:07PM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 11 2007 02:33AM
Edward R Marczak (marczak radiotope com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 09:42AM
David Harley (david a harley gmail com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 01:18PM
Edward R Marczak (marczak radiotope com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 08:43PM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr) (1 replies)
RE: ClamXav for OS X 10.4 Aug 15 2007 10:14AM
David Harley (david a harley gmail com)
RE: ClamXav for OS X 10.4 Aug 13 2007 09:51PM
Todd Woodward (todd_woodward symantec com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 10:09AM
David Harley (david a harley gmail com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 08:32PM
Michael Dalling (mtdalling gmail com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 15 2007 09:53AM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 15 2007 07:32AM
Howard Oakley (h oakley btconnect com)
I am afraid that I find much of the recent argument about AV testing as
flawed as the 'FightClub' tests that sparked it off.

For start, I think that it was fairly obvious from everything that was
written that the 'FightClub' test was not intended to be a rigorous piece of
science. What was novel was that for once the tester tried to comply with
one of the key requirements, in making his test suite available to everyone,
so that anyone who wishes to can repeat his testing, analyse the samples
that were used, and so on. It is also relatively unusual as the products
were used under Linux.

Despite florid criticism of the test suite and the conclusions of the test,
I have yet to see that anyone has repeated the tests on the suite used, or
on a different suite. Thus the arguments so far put have been theoretical,
and unsupported by direct experimental evidence.

The conclusions drawn by the 'FightClub' tests are not entirely novel
either, although they make good Slashdot fodder. Several tests that have
been conducted away from the AV industry's suites and 'labs' have concluded
that commercial products can perform badly, and that free products can
perform quite well. Yet the stock response is often to slate the tests, the
testing methods, and even the testers, rather than to ponder why products do
not always perform as advertised.

David Harley makes one important issue very clear when he considers that
"Your test-bed apps have to be similar in functionality, and should be
configured carefully so that no single product has an unfair advantage."
Whilst I think it valuable in testing for the 'carefully configured' setup
to be one of the test conditions, in truth most users do not spend much time
studying the documentation and setting an AV product up so carefully.

One of the most important conditions in any comparative review of products
is 'as installed', i.e. the manufacturer's default configuration,
recognising that that is likely in the real world to be the way that each
product is used. If an AV product needs careful tuning and adjusting after
installation, then few users will ever complete that, and some may actual
misconfigure in that phase. One of the huge industry lessons from Apple that
has been largely ignored by others is Apple's ability to ship installers
that actually do an excellent job of configuring quite complex systems first
off - AirPort Utility being a recent example.

My deepest disappointment with the 'FightClub' and most other AV and
security product testing and review is the complete lack of attention that
has been devoted to the adverse effects of AV products in particular,
security and system utilities more generally. For instance, I know of one
photo library that is still trying to patch up the damage wrought by one
formerly popular commercial Mac AV product, that at one time led to corrupt
Photoshop files.

Currently most Mac users take the attitude that AV products have little to
offer them, and most can remember being burned by commercial products in the
past (and a few the free protection of Disinfectant). I do not know what the
prevailing attitude among Linux users is, but I can imagine that enthusiasm
for paying for update subscriptions may be anathema to many. Perhaps the
industry needs to improve still?

Howard.

Dr Howard Oakley
The Works columnist for MacUser magazine (UK)
http://www.macuser.co.uk/
http://www.ehnoakley.com/

[ reply ]
Re: ClamXav for OS X 10.4 Aug 10 2007 07:24PM
Rob DeWitt (diggertadmin gmail com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 08:53PM
David Harley (david a harley gmail com) (2 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 09:17PM
William Holmberg (wholmberg amdpi com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 11:41AM
David Harley (david a harley gmail com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 07:43PM
William Holmberg (wholmberg amdpi com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 09:16PM
Dave Mangot (dmangot terracottatech com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 09:41PM
William Holmberg (wholmberg amdpi com) (1 replies)
Re: ClamXav for OS X 10.4 Aug 14 2007 10:02PM
Dave Mangot (dmangot terracottatech com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 15 2007 01:29PM
William Holmberg (wholmberg amdpi com)
RE: ClamXav for OS X 10.4 Aug 10 2007 09:10PM
Dixon, Wayne (wcdixo aurora lib il us) (2 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 01:29PM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 11 2007 10:16AM
Radoslav Dejanoviæ (radoslav dejanovic opsus hr) (1 replies)
RE: ClamXav for OS X 10.4 Aug 14 2007 09:48AM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 10 2007 06:56PM
Tom Yarrish (tom yarrish com)
Re: ClamXav for OS X 10.4 Aug 10 2007 06:50PM
Roland Dobbins (rdobbins cisco com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 10 2007 07:35PM
Pfost William B (William Pfost ci irs gov) (1 replies)
Re: ClamXav for OS X 10.4 Aug 10 2007 08:09PM
Rob DeWitt (diggertadmin gmail com) (2 replies)
Re: ClamXav for OS X 10.4 Aug 10 2007 11:11PM
Paul Schmehl (pauls utdallas edu) (2 replies)
Re: ClamXav for OS X 10.4 Aug 12 2007 12:37PM
Casper Gasper (casper gasper gmail com)
RE: ClamXav for OS X 10.4 Aug 11 2007 12:13PM
David Harley (david a harley gmail com)
Re: ClamXav for OS X 10.4 Aug 10 2007 09:22PM
Kevin Finisterre \(lists\) (kf_lists digitalmunition com) (1 replies)
RE: ClamXav for OS X 10.4 Aug 11 2007 12:22PM
David Harley (david a harley gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus