Ядро Windows: хукнуть или нет?

[Maitris]

http://www.windows-now.com/blogs/robert ... Vista.aspx

Особенно вот это понравилось:

I went to the Host Security product team and asked them if they got to hook the kernel - they did not. They said that the x64 version of their product for Windows Vista would use the defined interfaces, just like any 3rd-party security product. They said they'd have to re-implement certain aspects from the way things were previously done.
Next, I went to the Windows Firewall product team and asked them if they got to hook the kernel. The said no. A new Windows Filtering Platform (aka defined interfaces) had been introduced for Vista, which they would be using just like everyone else.

Имхо, Symantec это что-то вроде доктора-коновала... Лезет во внутренние органы грязными руками, что применимо к windows, понижает быстродействие системы на процентов так 70...

[FaKk2]

And they might even have to put some effort into doing it right. And that's a problem for a company who has been profiting from Microsoft's security problem for the last 15 years.

Собственно так оно и есть. По большому счету я как пользователь понятия не имею каким образом работает мой антивирус, и пользуясь этим симантек и все остальные пишут кривой код - лишь бы работал. А тут панимаш-ли придется нанять программистов, а не индусов-недоучек.