@topherWe need application layer firewalls.
We need realtime antivirus.
And like legit, reputable stuff in actual distro repositories. Not random stuff you have to compile yourself from some random github repo and pray isn't in fact just the fun side project of a Jia Tan type, because:
a) No normal person is ever going to do that anyways, and
b) It's nice to have software that doesn't feel like it came from the bottom of a box of breakfast cereal, and
c) It's cartoonishly stupid to whine about Linux adoption and why people still use commercial software when we don't have these basicmost expected security features.
Literally two of the three reasons why I so infrequently feel comfortable recommending #Linux as a desktop for normal people, who I might add are even willing to pay Peter Norton like $70 every single year to have an antivirus on their machines.
@kkarhan@infosec.space@topher #Antivirus is for the most part #Scareware aimed at scamming #TechIlliterates which at best only works against kniwn threats and at worst is literal #Malware in and of itself selling user data to bad actors.
- There are commercial AV options for major distros, like #ESET offers [www.eset.com] for all 3 big Desktop ones: @RedHat, #SUSE & #UbuntuLTS...
As for the rest one can just scan #Fileservers regularly and do so on #Mailservers, but existing tools to enforce quick and early updates on those distros already do most of the heavy lifting re: #ITsec...