Wednesday, November 21, 2012

Sophail: Tavis and Sophos

Tavis continues his damning analysis of Sophos AV.  The latest full disclosure post has a good summary, and includes links to sophail1 and sophail2 papers, and a very well-commented working exploit for Sophos on the Mac.  If you use Sophos you should seriously consider the benefits it is providing vs. the increased attack surface it brings.

Sophos' latest official response is quite different from the tone of previous interactions with Tavis.

No comments: