Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security Android Google Software

Two-Thirds of Android Antivirus Apps Are Total BS (tomsguide.com) 67

An anonymous reader quotes a report from Tom's Guide: Austrian antivirus-testing lab AV-Comparatives tested 250 antivirus apps in Google Play against 2,000 malware samples. They found that only 80 of the apps could stop even a minimal amount of malware. "Less than one in 10 of the apps tested defended against all 2,000 malicious apps, while over two-thirds failed to reach a block rate of even 30 percent," the lab said in a press release. To make sure you're protecting your Android device properly, stick to apps from well-known antivirus companies. Basically, AV-Comparatives said, most Android antivirus apps are phony, and many of them seemed to have been created only to display ads or promote a developer's career. "The main purpose of these apps seems to be generating easy revenue for their developers, rather than actually protecting their users," the AV-Comparatives report said.
This discussion has been archived. No new comments can be posted.

Two-Thirds of Android Antivirus Apps Are Total BS

Comments Filter:
  • As long as you're using your smartphone's official App Store, there's nothing that an antivirus has to do... bad code is recalled by the store, and there's little way to get around the rules of the store.

  • (Cost of incident) times (frequency the incident has happened)... equates to unknown times zero... antivirus is currently worthless.

  • is a shithole of junkware, anything good is buried under a thousands of shitware that is not worth bothering to download, Google should be ashamed of Google Play for allowing it to become just a HUGE pile of shitware
    • is a shithole of junkware, anything good is buried under a thousands of shitware that is not worth bothering to download, Google should be ashamed of Google Play for allowing it to become just a HUGE pile of shitware

      Proper vetting of apps would cost them too many Shekels.

      We can't have that now, can we?

    • by aybiss ( 876862 )

      Strangely though, I never feel the need to install thousands of apps to find that out, and love the apps that I know are good and have had installed on every phone for like 10 years now.

    • by brunes69 ( 86786 )

      Yeah, because the iTunes store is not also full of shitware...

      Have you ever tried searching for "Flashlight" on iTunes? How many apps are there? Tons of them are loaded with ads.

      Its the same Junkware on Apple store as Google store.

      • by dcw3 ( 649211 )

        Have you ever tried searching for "Flashlight" on iTunes?

        Um, no because my fucking iPhone comes with a built in flashlight and I normally search for apps in the App Store, not iTunes. But to the overall point of the article, how many iPhones, iPads, iEtc., have ever had a problem with malware compared to Android?

  • by SuperKendall ( 25149 ) on Wednesday March 13, 2019 @07:10PM (#58269882)

    I am highly suspicious there is even a single AV app that is of any use, even if not actively harmful.

    • The remaining third of them were "complete B.S."

      • by Anonymous Coward

        Frontline (that thing you put on your cat) stopped just as many viruses as most antivirus software. A&T basic OS updates do better than google itself

    • by ctilsie242 ( 4841247 ) on Wednesday March 13, 2019 @07:33PM (#58269976)

      I don't understand how AV can be of use on a phone, unless it was running as root. If it is running as just another unprivileged UID, it isn't going to do much.

      AV on computers may be justified to tick off checkboxes. On phones with mobile operating systems, the real security needs to be at the app stores.

      I wish Google could do a two tier security model:

      Tier 1 -- default tier, all apps are curated, scanned by Google's AI for potential mischief, and for an app developer to have an app in Tier 1, they must agree to more stringent requirements, and are put on notice that it doesn't take much for them to have their app chucked from the tier. This is what Amazon does with their Android app store.

      Tier 2 -- This is what would be the present state of the Google Play Store.

      From here, phones should default to only allow Tier 1, and just like sideloading, tell the user that they don't just walk into Mordor if they want to use Tier 2.

      This way, there can be a wide variety of apps, but users have a trustworthy source that is actively curated, and where there is zero mercy shown for developer shenanigans.

      • by brunes69 ( 86786 )

        - Google already does "Tier 1" as you have it above.

        - The purpose of AV apps on Android is to protect you when you allow sideloading. If you use the Amazon app store, or the Aptoide app store, or want Fortnite, then you have to allow sideloading. Enabling sideloading opens up more possibility for attack vectors, especially if it is chained with another bug in Chrome or Firefox to let a web page silently install an app somehow. The way they work is they insert themselves as a new app install handler (Android

      • This. Thank you The Android sandboxing that prevents a random application from making deep modifications to the OS or from accessing privileged information is the exact same sandboxing that prevents antivirus software from being able to scan the deeper operating system. Think of Android as a non-admin Windows session where UAC prompts fail by default or a sudo-less Desktop Linux session. There is no way you can install a antivirus from that session. Most of these Android "AVs" just fetch a list of installe
      • Tier 1 -- default tier, all apps are curated, scanned by Google's AI for potential mischief, and for an app developer to have an app in Tier 1, they must agree to more stringent requirements, and are put on notice that it doesn't take much for them to have their app chucked from the tier. This is what Amazon does with their Android app store.

        Isn't ES File Explorer still on the Amazon App Store? That's shady AF

  • and that's being extremely generous

  • ..ought to clue anyone in that the vast majority of them are absolutely bogus. there's probably less than a couple dozen legitimate developers of consumer 'antivirus' products, total, globally, with the resources to even have half a chance at developing and maintaining an 'anti malware' app for android that actually works.

  • by The Evil Atheist ( 2484676 ) on Wednesday March 13, 2019 @09:20PM (#58270380)
    Viruses haven't been a problem for a long time. Not when apps keep asking for permissions for things they shouldn't need, and trick/confuse the user into volunteering their personal data.
  • All the apps have very explicit permissions. Google blocks malware at the source at the Play Store when it is identified. I've never felt at all compelled to run antivirus on Android. What is the value?

  • by godel_56 ( 1287256 ) on Wednesday March 13, 2019 @09:38PM (#58270432)

    The top 25 programs tested scored a hundred per cent detection rate and there were more below that in the high nineties, so the negative judgement is bit harsh. Moreover the ones that passed are all the usual suspects like Kaspersky, Avira, Avast etc which anyone with any knowledge would be more likely to buy, rather than some weird unknown brand.

    The moral is to stick with the established brands that you know.

  • Considering that I have seen machines in my shop with every brand of antivirus on them, I tell my customers that if antivirus really worked, I wouldnâ(TM)t be in business. If itâ(TM)s a reputable antivirus and available for free, why pay for it? Whatâ(TM)s the real value of pay for antivirus? One day itâ(TM)s $9.95, the next itâ(TM)s $39.99 and the day after itâ(TM)s $79.99. Which tells me that itâ(TM)s value is whatever the market will bear.
  • When will Google rain down hell and fury at this nonsense? When will our own government take action against this reckless and fraudulent activity? In the age where there is no accountability in tech or simply no accountability anywhere... this is just another example of the shitshow we're all living through.
    • When will Google rain down hell and fury at this nonsense?

      After they have sold all the ice from a frozen hell.

    • by dcw3 ( 649211 )

      Do we really want the government dictating more online shit? How'd that work out for Net neutrality? How'd that work out for healthcare? How'd it work out for the partisan shit show that we've had for the last couple decades?

  • by Anonymous Coward

    A colleague of mine has a "hobby" of fuzzing various antivirus engines with his custom tools designed mostly to test our own products. The amount of crashes, busyloops and other nasty failures he's able to trigger simply by almost blind fuzzing is amazing. He does tell of his findings to the AV engine vendors, but they tend to become mysteriously unresponsive after couple dozen crash reports in a week, or still finding crashes after several iterations of fixes...

    On this basis it's not hard to think that a h

  • Don't download warez or other questionable software onto your phone, you idiots.
  • It's right there in TFS -- only 1 in 10 sussed out all the malware.

Ocean: A body of water occupying about two-thirds of a world made for man -- who has no gills. -- Ambrose Bierce

Working...