At DonationCoder we've discussed False Positives and how they affect freeware/OSS developers. It's good to see an OpEd from someone in the security side of the industry and how it affects them as a company.Antivirus industry deluding itself
The one thing this doesn't address is the costs with submitting software for the "Trusted Source
" initiative, both in man hours and money, and the fact that to people that don't make a living off of selling software, it can seem like this is aimed at squeezing out Freeware and OSS contributors.
In fact, if you look at the bottom of the announcement from Google
, you'll see that this isn't just an idle fear.
So what are the next steps? We are looking to grow our collection of trusted software, if you happen to be a very large software development company you might want to contact us in order to share this data and help us mitigate the issue of false positives. Please note that this initiative is not open to potentially unwanted applications and adware developers.
And the bad thing? The emphasis isn't mine.
So where does this leave you with google automagically blocking and deleting files that the user downloads if you're not large enough to be one of the trusted vendors?
Out in the cold.