The US Bans Kaspersky

Summary

The US Department of Commerce has banned Kaspersky Labs from providing cybersecurity products in the country, citing national security risks. This follows past allegations of Kaspersky's ties to Russian intelligence and concerns over its potential use as a spying tool. The ban impacts not only government networks but also civilian use. The speaker reflects on their experience with Kaspersky at Geek Squad and its reputation for robust security, while also discussing the implications for Kaspersky's research contributions to the cybersecurity community.

Takeaways

• 📜 The Department of Commerce has issued a final determination prohibiting Kaspersky Labs and associated companies from providing cybersecurity products or services in the U.S. due to national security risks.
• 🔍 The U.S. government now officially labels Kaspersky Internet Security and its variants as spyware, stemming from concerns about ties to Russian intelligence agencies.
• 🇷🇺 The ban on Kaspersky products is based on the fear that the Russian government could compel the company to use its antivirus program as a spying tool.
• 🛡️ The speaker argues that it's prudent for any country to avoid using proprietary software from rival nations, especially in sensitive government networks.
• 💻 Antivirus programs, by their nature, have high system access and could potentially be exploited for malicious purposes, raising security concerns.
• 🛍️ In response to the 2017 ban, Best Buy removed Kaspersky from its shelves and offered alternatives to customers with ongoing Kaspersky licenses.
• 👨‍💻 The speaker's personal experience working at Geek Squad involved recommending Kaspersky for its high detection rate and security features on high-end computers.
• 🔑 The speaker expresses skepticism about proprietary software, assuming it to be spyware until proven otherwise, and highlights the ongoing debate about Kaspersky's true nature.
• 🔬 Kaspersky Labs' research has been valuable to the infosec community, including the development of a method to detect the Pegasus spyware tool.
• 🤔 There is speculation about the U.S. government's motives for targeting Kaspersky, with theories suggesting it could be to hinder the company's ability to detect spyware or出于 genuine concern for national security.
• 🏢 The future of Kaspersky's U.S. office in Massachusetts and the jobs there are uncertain following the ban, which could impact the company's research efforts.

Q & A

What action did the Department of Commerce take against Kaspersky Labs?

The Department of Commerce issued a final determination that prohibits Kaspersky Labs and any associated companies from providing antivirus software and cybersecurity products or services in the United States or to any US person due to the risks these products pose to US National Security.

Why has there been debate over whether Kaspersky is a spyware tool?

There has been debate because, despite allegations of Kaspersky's ties to Russian intelligence agencies and fears that the Russian government could compel Kaspersky to use its antivirus program as a spying tool, definitive proof has been a subject of controversy.

What was the Department of Homeland Security's stance on Kaspersky in 2017?

In 2017, the Department of Homeland Security banned the use of Kaspersky antivirus on Federal computers and federal networks due to alleged ties to Russian intelligence agencies.

Why is it concerning for a government to use proprietary software from a rival country in their networks?

It is concerning because proprietary software, especially antivirus programs that have high-level access to systems, could potentially be manipulated for malicious purposes, such as spying, by the software's developers or their home country.

What was the role of Kaspersky antivirus in Geek Squad's tech support program?

Kaspersky was one of the antivirus programs that Geek Squad, a Best Buy service, offered with their paid tech support program. It was often recommended for high-end computers for its high detection rate and overall security.

Why did Best Buy decide to stop offering Kaspersky in 2017?

Best Buy decided to pull Kaspersky from their shelves in response to the federal government's ban on its use in federal networks, as it was deemed a bad look for the company to continue offering a product that the government deemed a security risk.

What alternatives did Best Buy offer to Kaspersky customers after the ban?

Best Buy offered customers the option to switch their remaining Kaspersky license to either Trend Micro or Webroot, two other antivirus programs they offered.

What is the speaker's personal opinion on proprietary software?

The speaker leans towards considering all proprietary software as potential spyware until proven otherwise, due to the lack of transparency and the potential for misuse.

Why was Kaspersky of particular interest to the speaker during their learning of offensive security?

Kaspersky was of interest because it was challenging to bypass its detection mechanisms, which was a useful learning experience for developing malware that could evade antivirus software.

What concerns does the speaker express about the future of Kaspersky Labs' research efforts?

The speaker is concerned that the ban on selling Kaspersky products in the US might affect the company's cash flow and, consequently, its valuable research efforts, which have contributed significantly to the broader infosec community.

What is the speaker's speculation about the US government's motivation for targeting Kaspersky?

The speaker speculates that the US government might be trying to hinder Kaspersky's ability to detect and mitigate spyware that they might want to deploy in the future, or that they are genuinely concerned about Russian spying on US citizens.