Captain Nemo wrote on May 22^nd, 2024 at 11:01am:



I still use Norton.
I seem to have avoided: malware, spyware, Trojan horses and viruses
so I'll stick with it.
But - as I implied in my opening post - emails are not protected by Norton or anything else.

Captain Nemo wrote on May 22^nd, 2024 at 11:01am:


For a long long time Norton packages have been way too bulky and dominate way to much computer resources. They have always been among the worst. However a full antivirus suite is a different product to Microsoft's security.

Microsoft defender seems to work well enough.

Dnarever wrote on May 22^nd, 2024 at 7:26pm:



I don't have any trouble with Norton using up resources -
but I have an 8 core CPU with 32 Gig of RAM and an SSD.

Bobby. wrote on May 22^nd, 2024 at 7:31pm:


Norton is a lot better than it was at one time. There was a period where it didn't matter how much resource you had it would happily use it all. It does however still use enough resources to be noticeable on the majority of computers.

You may want to check what the Norton disk usage is like. Apps that write to an SSD a lot will reduce its life.

Bobby. wrote on May 22^nd, 2024 at 7:31pm:


You don't need third-party tools anymore.  Windows Defender and a properly configured Windows Firewall, plus some common sense online, are all you need.

As someone in the biz, this incident has been fascinating.

It should have never happened, but clearly their focus hasn't been on security for a long time.

Google and Amazon and shown us how the mega tech companies can actually focus on security, it's not impossible.

Microsoft hasn't prioritised security for a long time, and they keep changing their technology behind Azure that it doesn't get a chance to be battle-hardened and is so complex that I sometimes wonder if even they fully understand it themselves.

It also doesn't help that it's entirely black-boxed, not open-source, so there is no way for us to really know and understand how it works, how secure it is etc.

While the incident should never have happened, how they lied about the response is what angers me the most.

To today, they still don't know exactly how the breach happened.

They know how the key material and the legitimately signed certs, but not how it was gathered or created or how far-reaching the access was.

The technique they used could have given them access to any Exchange online mailbox across their entire network, not just a single tenant.

It's actually quite terrifying.

Bobby. wrote on May 22^nd, 2024 at 9:03am:


Email is sent(man in the middle) and stored in plain text or HTML(server admins). Anyone with access can read them unless you(public key)/all ends points use encryption(pops/imaps/smtps) .