back to article China: Our approved vendor list – Kaspersky, Symantec are not on it

Security firms Kaspersky Labs and Symantec appear to have both been booted off China’s list of approved vendors for government agencies. This development comes as the country continues to tighten up against foreign tech firms in the wake of the NSA surveillance revelations. The People’s Daily reported first in a tweet that …

  1. Aquilus

    Hmm

    If you're going to hide a filesnarfing rootkit, then an anti-virus product is pretty much the ideal place to put it. It gets installed on every machine, scans every file nightly, is allowed to install kernel mode drivers, and needs holes punched in the firewall to let it download updates.

    So yeah. What does China know about those two firms, the NSA, and national security letters, that we don't?

    1. Arachnoid

      Re: Hmm

      Well actually you may find its the other way round in that the "incredibly useful" Chinese state software may be getting flagged as a security issue by such vendors packages.

      1. Anonymous Coward
        Anonymous Coward

        Re: Hmm

        Bingo!

    2. Robert Helpmann??
      Childcatcher

      Re: Hmm

      You might add hooks into email and backup services. As far as firewalls are concerned, those holes for updates should be in-bound only, not that aren't ways around this to get information back out.

    3. Anonymous Coward
      Anonymous Coward

      Re: Hmm

      The key question is: are the Chinese doing this to protect their people from outside spying, or to permit state control of products that might detect domestic spying?

      Or both?

    4. Peter2 Silver badge

      Re: Hmm

      > "So yeah. What does China know about those two firms, the NSA, and national security letters, that we don't?"

      To be honest, they don't need to know any more than we do. I wouldn't consider either of them for future use. Having just come off of a years subscription to Kaspersky we opted to pay 3x more for Sophos just to get something that we knew would work.

      Kaspersky (v10) provably caused over 75% of the support issues in our environment and while it was a third of the price of Sophos it wasn't worth even that much. Frankly, based on my experience I wouldn't use it if it were free- it slows the computers down massively and parts of the program randomly malfunction even when disabled (ie; the network attack blocker blocking print servers; i'm looking at you!)

      That wasn't the worst part. I could live with computers being ground to a halt if it caught the viruses. Sadly however, it failed in this fairly important aspect, and was thus totally useless.

      Symantec wasn't quite that bad when I used it like 5 years ago, but to be fair it could have improved since.

  2. Anonymous Blowhard

    Antitrust?

    If ever a word fitted the situation perfectly...

  3. Anonymous Coward
    Anonymous Coward

    Im surprised Symantec was ever on the list in the first place. Not because of backdoors but because its just crap at stopping viruses!

  4. Anonymous Coward
    Anonymous Coward

    Kaspersky?

    I'm surprised by the exclusion of Kaspersky, that must be more because of their consistent refusal to mark *any* government spyware as safe..

  5. JeffyPoooh
    Pint

    Six years too late

    "Kaspersky Labs and Symantec have both been booted off China’s list of approved security vendors..."

    I booted Symantec off *my* personal list of approved security vendors in about mid-2008. At that point, the dark clouds of IT doom parted, the brilliant sunshine of PC stability joy poured forth from the heavens, and my life has been significantly improved.

    Kaspersky always struck me as raving loons, perhaps due to their drooling lunatic fanboi network. They were never on my approved list.

    AVG was okay for a while. But they're gone too.

    A bit of MSSE should be enough for anyone. Life is *much* better without any of these aftermarket coder drones ruining your PC. It's hard enough keeping MS in line, no need for all the IT Class of 2013 'C' Students to have a go at it.

    1. Someone Else Silver badge
      Paris Hilton

      @ JeffyPoooh -- Re: Six years too late

      It's hard enough keeping MS in line, no need for all the IT Class of 2013 'C' Students to have a go at it.

      Who do you think Micorsoft is hiring?

      1. JeffyPoooh
        Pint

        Re: @ JeffyPoooh -- Six years too late

        SE: Who do you think Micorsoft is hiring?

        'B' students. Obviously.

    2. Anonymous Bullard
      Linux

      Re: Six years too late

      I've booted *all* anti-virus producers off my personal list, since making the switch.

    3. JeffyPoooh

      Re: Six years too late

      It's amazing how much I agree with the above.

  6. Gis Bun

    Hmmmm. Maybe China is allowing any company that has weak network security. Obviously security companies like Symantec and Kaspersky is a problem for them.

  7. Someone Else Silver badge
    Meh

    It's entirely possible...

    ...that IT security in the PRC just got better....

    </sigh>

  8. Anonymous Coward
    Anonymous Coward

    I wonder if the NSA is going to start selling porno's of the Chinese people?

  9. Anonymous Coward
    Anonymous Coward

    Magic 8 ball says

    "Signs point to yes" for graft and bloatware in the Chinese government's IT future.

    1. Cipher

      Re: Magic 8 ball says

      Or something close to that. Good new fashioned Chinese, ahem, Capitalism...

      What I doubt is any NSA related reason for the move. The stuff the NSA is interested in likely does not reside on internet facing machines...

  10. Wzrd1 Silver badge

    "China has never been particularly chuffed about the allegations but it is even less amused these days after former-NSA-operative-turned-whistleblower Edward Snowden revealed the extent of the US's data snooping."

    Yet then rejects antivirus software well known to be connected with the USA and Russia.

    Then, promotes their own malware, erm, antivirus software.

    The reality of it is, anyone who has more than an E1 connection is doing it at a national level.

    Frankly, the *only* nation I'm aware of that isn't is Somalia. Hell, Libya still is online.

    Just get used to it, as I've yet to hear a *realistic* solution to resolve the problem. And to be blunt, I have no solution either.

    Got a solution? Shoot it my way, I'll see to it that you're wealthier than the royal family in spades.

    I'll settle for three million dollars. One to work for me, one to be riskier invested, one to be "safely" invested.

    I'll not expect a realistic reply. :/

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like