@Rook said:
@Thenomain said:
Except those reports every two months saying how your router's firewall can be actively bypassed because of Apparently Cool Feature X, nevermind the inherent network insecurities from The Internet Of Things.
Firewalls cannot be 'bypassed' if your router (any modern) uses stateful packet inspection. Nothing can just 'come in' unless you invite it in. The reports that state that your firewall can be actively bypassed are fear mongering, or written by someone who has no idea how they work.
That's dangerously not the case. Routers themselves are subject to software vulnerabilities, user-configuration issues, and (large-scale) ISP misconfiguration. There have been infections of cable modems. There's malware brought in by guests you let use your WiFi or wired LAN.
There's HTTP: The universal firewall bypass protocol. Your router trusts the connections you initiate, even if you shouldn't. Go to the level of DPI, that's defeated by SSL.
Regarding AV software, looking up Tavis Ormandy's Sophail paper. TL;DR: he decided to pick on Sophos because it was installed on computers he was given to use. He found that Sophos itself was 1) Using CRC32 for file sig matching, which is just bonkers bad, and 2) vulnerable to memory-corruption vulnerabilities that would allow a file to infect Sophos itself (running as System) just by being scanned.