Comodo Antivirus Tech Support Feature Lets Anyone Connect To Your PC (softpedia.com) 33
An anonymous reader writes: Google Project Zero security researcher Tavis Ormandy has discovered that one of Comodo's tech support tools packed with many of the company's security products leaves the door open for attackers to connect with admin privileges on the user's PC. He discovered that to blame for this problem was a remote desktop tool called GeekBuddy, which Comodo was bundling with its security software. This tool either used no password, or used a simple system to create the password which tech support staff would use to connect to user PCs. Ormandy previously discovered a similar issue in Comodo software, related to the company's Chromodo browser.
GeekBuddy ðYðY (Score:3, Funny)
Re:GeekBuddy (Score:3)
It boggles the mind!
Re: (Score:3)
Have you tried to use Remote Assistance? Trying to get a non-techie user to set it up so you can get in takes an hour if at all.
I use Join.me, which people can generally do in about 5 minutes.
Re: (Score:2)
Perhaps because the developer believe that they can do better than Microsoft. This is something that might not be all that high of a bar to hurdle generally speaking.
USA DoJ mandates Apple install ... (Score:5, Funny)
Comodo Anti-virus on all iPhones, "it is irresponsible of Apple to not protect its users using this fine software" -- next week's news.
Why do these bozos still exist? (Score:1)
Their certificate booboo wasn't their fault? I don't believe it. They just successfully dodged the blame.
Instead of a three strikes law against consumers, I want one against obviously incompetent security companies.
Comodo is amateur security (Score:2, Informative)
Comodo was also plagued with security issues on both their so called secure browsers based either on Firefox or Chrome. Neither of them stay up to date with the browser versions. I called them out on this a year or more ago. I said, how can you call these browsers secure? When it takes you weeks to update to the latest version release? After a dismal response I decided their motives were not genuine in protecting users. Stay away.
Re:Comodo is amateur security (Score:4, Insightful)
Wasn't there a thing where Comodo was issuing false certificates for Google, Microsoft, etc. too a few years ago? I think their servers got breached too... Oh yeah, there was.
These guys have repeatedly been in the news for having problems like this. It certainly does not make for a very compelling reason to trust your security to them.
Re: (Score:3, Informative)
They basically crawl the whole web looking for expiring certificates and call everyone, pretending to be the issuer.
Telling them to fuck off doesn't do anythying; they're still calling every time we have a certificate due to expire within a few months.
Oh and they're th
Re: (Score:1)
Follow the money:
The anti-virus industry is a multi million dollar industry. The malware / virus / ransomware et. al. industry is potentially a multi-billion dollar industry with security breeches netting millions worth of data (banking data etc) in single hauls.
It doesn't seem so far fetched to believe that the people making security software are taking back handers to do a bad job on purpose. Pure speculation of course but this does fit with how the world works. At best, even with the best intentions and
Comodo: Firewall good, AV bad (Score:1)
Comodo's firewall program is pretty nice for blocking things that you don't want to phone home, things that just shouldn't need internet access, or things that you want to disable automatic updates on.
I've used it for a long time, although after struggling with a recent UI update that made things more naggy and less useful, I recommend searching for "old version" and getting version 5.3.
One of the things the newer versions nag about is installing the antivirus and "GeekBuddy" crap.
So, assuming that this sec
Re: (Score:1)
who asked them to bundle that crap? just give me the damn AV... when i buy bread, nobody bundles the peanutbutter
Restaurant:
- You forgot to give me any butter!
- ??, that will be $2.
How are they still in business? (Score:2)
I don't understand how a company that claims to be in the security business, can screw up so much, and so often, and still be in the security business.
They severely botched their browser, their support tools, their certificates.... You couldn't trust these people to warm up a pre-cooked hot dog without giving you salmonella.
It's amazing how instead of taking companies like these to task over their continual screw ups, they are either ignored at best, or rewarded at worst.