The US Bans Kaspersky

Mental Outlaw

21 Jun 202409:53

Summary

TLDRThe US Department of Commerce has banned Kaspersky Labs from providing cybersecurity products in the country, citing national security risks. This follows past allegations of Kaspersky's ties to Russian intelligence and concerns over its potential use as a spying tool. The ban impacts not only government networks but also civilian use. The speaker reflects on their experience with Kaspersky at Geek Squad and its reputation for robust security, while also discussing the implications for Kaspersky's research contributions to the cybersecurity community.

Takeaways

📜 The Department of Commerce has issued a final determination prohibiting Kaspersky Labs and associated companies from providing cybersecurity products or services in the U.S. due to national security risks.
🔍 The U.S. government now officially labels Kaspersky Internet Security and its variants as spyware, stemming from concerns about ties to Russian intelligence agencies.
🇷🇺 The ban on Kaspersky products is based on the fear that the Russian government could compel the company to use its antivirus program as a spying tool.
🛡️ The speaker argues that it's prudent for any country to avoid using proprietary software from rival nations, especially in sensitive government networks.
💻 Antivirus programs, by their nature, have high system access and could potentially be exploited for malicious purposes, raising security concerns.
🛍️ In response to the 2017 ban, Best Buy removed Kaspersky from its shelves and offered alternatives to customers with ongoing Kaspersky licenses.
👨‍💻 The speaker's personal experience working at Geek Squad involved recommending Kaspersky for its high detection rate and security features on high-end computers.
🔑 The speaker expresses skepticism about proprietary software, assuming it to be spyware until proven otherwise, and highlights the ongoing debate about Kaspersky's true nature.
🔬 Kaspersky Labs' research has been valuable to the infosec community, including the development of a method to detect the Pegasus spyware tool.
🤔 There is speculation about the U.S. government's motives for targeting Kaspersky, with theories suggesting it could be to hinder the company's ability to detect spyware or出于 genuine concern for national security.
🏢 The future of Kaspersky's U.S. office in Massachusetts and the jobs there are uncertain following the ban, which could impact the company's research efforts.

Q & A

What action did the Department of Commerce take against Kaspersky Labs?
-The Department of Commerce issued a final determination that prohibits Kaspersky Labs and any associated companies from providing antivirus software and cybersecurity products or services in the United States or to any US person due to the risks these products pose to US National Security.
Why has there been debate over whether Kaspersky is a spyware tool?
-There has been debate because, despite allegations of Kaspersky's ties to Russian intelligence agencies and fears that the Russian government could compel Kaspersky to use its antivirus program as a spying tool, definitive proof has been a subject of controversy.
What was the Department of Homeland Security's stance on Kaspersky in 2017?
-In 2017, the Department of Homeland Security banned the use of Kaspersky antivirus on Federal computers and federal networks due to alleged ties to Russian intelligence agencies.
Why is it concerning for a government to use proprietary software from a rival country in their networks?
-It is concerning because proprietary software, especially antivirus programs that have high-level access to systems, could potentially be manipulated for malicious purposes, such as spying, by the software's developers or their home country.
What was the role of Kaspersky antivirus in Geek Squad's tech support program?
-Kaspersky was one of the antivirus programs that Geek Squad, a Best Buy service, offered with their paid tech support program. It was often recommended for high-end computers for its high detection rate and overall security.
Why did Best Buy decide to stop offering Kaspersky in 2017?
-Best Buy decided to pull Kaspersky from their shelves in response to the federal government's ban on its use in federal networks, as it was deemed a bad look for the company to continue offering a product that the government deemed a security risk.
What alternatives did Best Buy offer to Kaspersky customers after the ban?
-Best Buy offered customers the option to switch their remaining Kaspersky license to either Trend Micro or Webroot, two other antivirus programs they offered.
What is the speaker's personal opinion on proprietary software?
-The speaker leans towards considering all proprietary software as potential spyware until proven otherwise, due to the lack of transparency and the potential for misuse.
Why was Kaspersky of particular interest to the speaker during their learning of offensive security?
-Kaspersky was of interest because it was challenging to bypass its detection mechanisms, which was a useful learning experience for developing malware that could evade antivirus software.
What concerns does the speaker express about the future of Kaspersky Labs' research efforts?
-The speaker is concerned that the ban on selling Kaspersky products in the US might affect the company's cash flow and, consequently, its valuable research efforts, which have contributed significantly to the broader infosec community.
What is the speaker's speculation about the US government's motivation for targeting Kaspersky?
-The speaker speculates that the US government might be trying to hinder Kaspersky's ability to detect and mitigate spyware that they might want to deploy in the future, or that they are genuinely concerned about Russian spying on US citizens.

Outlines

00:00

🛡️ US Government Bans Kaspersky Products Over National Security Concerns

The Department of Commerce has issued a final determination that prohibits Kaspersky Labs and associated companies from providing antivirus and cybersecurity products or services in the United States due to national security risks. The US government now officially labels Kaspersky Internet Security and its variants as spyware, following allegations of ties to Russian intelligence agencies and fears of the software being used for malicious spying. This move is sensible given the high level of system access antivirus programs have, which could be exploited for spying if not trusted. The script also discusses the impact on Geek Squad and Best Buy, which had previously recommended and sold Kaspersky products, and had to pull them from their offerings in response to the ban.

05:00

🔍 Concerns Over Kaspersky's Role in Cybersecurity Amidst US Ban

The speaker expresses uncertainty about whether Kaspersky is indeed spyware, leaning towards yes due to the proprietary nature of its software. They recount their experience with Kaspersky during their time at Geek Squad and how it was known for its high detection rates and security, yet frustrating to bypass during ethical hacking practice sessions. The ban on Kaspersky in the US raises concerns about the future of the company's research efforts, which have been valuable to the cybersecurity community, such as their recent method for detecting the Pegasus spyware on iPhones. The speaker speculates on potential reasons for the US government's actions against Kaspersky, including the possibility of undermining the company's ability to detect spyware that the US might want to use or genuine concerns about Russian spying on US citizens.

Mindmap

Keywords

💡Kaspersky Labs

Kaspersky Labs is a Russian multinational cybersecurity and antivirus software company. In the video, it is central to the discussion as the Department of Commerce has issued a final determination prohibiting Kaspersky and associated companies from providing cybersecurity products or services in the United States due to national security concerns. The script mentions the historical context of the 2017 ban by the Department of Homeland Security on the use of Kaspersky antivirus on federal computers.

💡National Security

National security refers to the measures taken by a government to protect the country's interests, safety, and well-being from threats. In the video, the concern is that Kaspersky's antivirus software could pose risks to U.S. national security because of alleged ties to Russian intelligence agencies, potentially being used as a spying tool, which is why the U.S. government has labeled it as spyware.

💡Antivirus Software

Antivirus software is a computer program designed to detect, prevent, and remove malicious software (malware). The video discusses the high level of system access that antivirus software has, which makes it a potential risk if it falls into the wrong hands, as it can be used for spying or other malicious activities, as suggested by the U.S. government's actions against Kaspersky.

💡Proprietary Software

Proprietary software is software that is owned by an individual or a company, and the source code is not available to the public. The video script suggests a general distrust of proprietary software, especially when it comes from a rival country, as it can be potentially modified to include spyware or other malicious functions without the user's knowledge.

💡Spyware

Spyware is software that aims to gather information about a person or organization without their consent. The video script discusses the U.S. government's official labeling of Kaspersky Internet Security and its variants as spyware, implying that the software could be used to spy on U.S. citizens or steal sensitive information.

💡Best Buy

Best Buy is a prominent American multinational consumer electronics retailer. The script mentions Best Buy's decision to pull Kaspersky products from their shelves in response to the federal government's ban, reflecting the impact of the ban on commercial retail decisions and consumer trust.

💡Geek Squad

Geek Squad is Best Buy's in-house technical support service. The video script recounts the narrator's experience working at Geek Squad and how they recommended Kaspersky for its high detection rate and overall security, illustrating the role of antivirus software in tech support and consumer recommendations.

💡Pegasus Spyware

Pegasus is a notorious spyware tool developed by the NSO Group, capable of infiltrating iPhones and other devices. The video mentions Kaspersky Labs' research in detecting Pegasus, highlighting the company's contributions to cybersecurity and the potential implications of the U.S. ban on their research efforts.

💡Offensive Security

Offensive security refers to the practice of proactively testing and exploiting vulnerabilities in systems to understand and improve security measures. The script describes the narrator's interest in offensive security and their experience with Kaspersky's antivirus software in the context of developing malware that could evade detection.

💡NSO Group

The NSO Group is an Israeli technology company known for developing surveillance software. The video raises a speculative point that the U.S. government's actions against Kaspersky might be related to the company's ability to detect spyware like Pegasus, which was developed by the NSO Group, suggesting a possible geopolitical dimension to the ban.

Highlights

The Department of Commerce issued a final determination prohibiting Kaspersky Labs from providing cybersecurity products or services in the United States due to national security risks.

Kaspersky Internet Security and its variants are officially labeled as spyware by the U.S. government.

The ban stems from concerns over Kaspersky's alleged ties to Russian intelligence agencies and the potential for the Russian government to use their software for spying.

The use of proprietary software from rival countries in government networks is discouraged to prevent potential security breaches.

Antivirus programs have high system access, making them potentially powerful tools for malicious activities if compromised.

In 2017, the Department of Homeland Security banned Kaspersky antivirus on federal computers and networks due to security concerns.

Best Buy removed Kaspersky from their offerings in response to the federal ban, affecting their tech support program.

Geek Squad agents were instructed to recommend alternative antivirus software to customers who had Kaspersky.

Kaspersky was known for its high detection rate and overall security, making it a top recommendation for high-end computers.

The ban on Kaspersky has raised concerns about the impact on their research efforts and the broader cybersecurity community.

Kaspersky Labs' research has been valuable, including their recent method for detecting the Pegasus spyware on iPhones.

The future of Kaspersky's U.S. office in Massachusetts is uncertain, potentially affecting jobs and research.

The speaker expresses personal interest in Kaspersky due to its robust security measures that were difficult to bypass during their offensive security learning.

There is speculation about the U.S. government's motives for targeting Kaspersky, including the possibility of hindering their ability to detect spyware.

The NSO group, which developed Pegasus spyware, may be indirectly affected by Kaspersky's research, suggesting a possible motive for the U.S. government's actions.

The video encourages viewers to share their thoughts on the situation and offers a discount on merchandise from the speaker's online store.