“AV is my single biggest impediment to shipping a secure browser.”
For everyone else who was lost like me (mined from this comment section and some googling):<p>- AV: Anti-virus software<p>- Vess: Security, AV expert, loves AV<p>- Justin Schuh: Chrome dev (security-related), hates AV<p>- AV needs deep access to the OS, opening the door for attacks if managed poorly<p>- Deep OS access is often hacky (due to lack of APIs?), thus potentially unsafe<p>- Vess and Justin Schuh both have bad manners<p>Is this about right?<p>Also, how is AV a (direct) impediment to a shipping a safe browser? It seems to me that a browser should be mostly agnostic toward AV.<p>Edit: It seems like the problem is that AV tries to penetrate browsers in a similar hacky way as for the OS, resulting in similar issues.<p>TL;DR: AV tries to help by supervising browsers because they&#x27;re allegedly not safe enough, but browsers think they&#x27;re already safe and want AV to gtfo.<p>Edit 2: Are there any AVs that don&#x27;t tamper with browsers at all? I&#x27;ve always been using Avast and switching off all browser-related features, but maybe there are better options.