Hello, welcome to the Friday, December 13th, 2019 edition of the Sansonet Stormsandest.

Stormcast, my name is Johannes Ulrich, and then I'm recording from Jacksonville, Florida.

Malicious software, of course, often tries to disable anti-virus, and most software comes with a list of processes that it then attempts to kill.

Well, recently Xavier came across such a list and it was pretty extensive, 233 different items,

essentially just the names of executables that are commonly associated with anti-malware.

So he went ahead to take a look at where else he could find this list of 233 executables.

And well, he found with the help of a Twitter user, a GitHub page that actually has the exact same list.

And apparently it's shared among a couple of different malware authors that essentially just

copy that list and include it in their software.

Well, this just shows again how malware authors are learning from each other and are

sharing information pretty openly. I hope, well, and that's really what the Internet Storm Center is

all about, that we can do a better job at sharing information about how to defend our networks.

And in recent updates to Safari and to the underlying library web kit, Apple has improved its intelligent tracking protection.

Now the next step here is how to prevent a website from actually detecting if a user

does take advantage of tracking protection.

Some websites may, for example, just not allow you to use the site if you don't allow them

to track you.

Apple's John Wylander now published a blog post detailing some of the measures that

a WebKit is taking in order to prevent being tracked, but also in order to prevent

the tracking prevention from being tracked.

And kind of nice to see that actually Google helped out here somewhat.

So Google and Apple are kind of working together in defining some of these features.

...