上位 200 件のコメント表示する 500

[–]netseclurker3241 256ポイント257ポイント  (28子コメント)

What role do you think that embedded devices will have in the future development of malware. Today it's allready common with compromised routers. Do you think that devices other than network gear, such as IoT type devices will play any significant role in "cyber crime" in the future.

[–]mcafee_amaMcAfee AMA - John McAfee[S] 708ポイント709ポイント  (26子コメント)

Holy shit. It will play the main role. Example: here's what's happening with IoT. Everyone who makes a toaster is rushing to make the first smart toaster. At DEF CON I attended a talk by Bishop where the BRINKS smart safe (touted as best safe in the world). Brinks knows how to make safes, their trucks are like tanks, but their smart safe came with the Windows OS and a USB port on it. The way they got into it was unscrew the front and there was a monitor and a red button. If you pushed the button it'd let you boot from other devices. It was insane, there was no components that were not off-the-shelf you can't get at Best Buy. It took these hackers 30s to hack into the safe. THIS IS BRINKS, the make safes. You can't expect a smart fridge to be any better. They all talk to each-other. China is probably waiting for us to tie everything together to electrocute everyone.

I had a long talk with sidragon that the hacks could have been done remotely over the internet. We're in a dangerous situation with IoT.

[–]TheKillingVoid 236ポイント237ポイント  (15子コメント)

They found a botnet controlled fridge almost two years ago - http://www.cnet.com/news/fridge-caught-sending-spam-emails-in-botnet-attack/

I'm not mentally ready to police an IOT household. My Android phones and old Windows pc's give me enough headache.

[–]harrybalsania 13ポイント14ポイント  (2子コメント)

This kind of shit is the reason I have a job. It is amazing to see how people build the software of such things. Really fascinating. I recently got to look into thing related to android media scanner. It blows my mind.

[–]jbplaya 113ポイント114ポイント  (14子コメント)

How do you feel about the country of Belize overall?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 275ポイント276ポイント  (11子コメント)

The most beautiful in the world. It has a barrier reef, 2nd in the world. I had 5 boats on the beach on the ocean, you try that anywhere else. It has jungles and ruins that haven't even been explored. The problem is that it has people there, people descended from pirates.

There is nothing illegal that the government there is not into. The government is smart if you just go there as an American you will not be bothered. I lived in the jungles where I was the only white person, and they were on to me. They asked me for $2M, weeks later 40+ armed men stormed my house, shot my favorite dog, and held me in the sun with my hands tied. The next day the congressman came and apoligized and asked for the $2M again. I should have done that rather than tell him to get the fuck off my property.

[–]MachinTrucChose 16ポイント17ポイント  (2子コメント)

Just curious, how different would your answer be if you weren't as rich as you are?

If a lower-middle-class Canadian like me was to go there, would I get extorted by the local cops? Would I have to worry about getting mugged while going out for coffee?

[–]YoshiSatoshi 71ポイント72ポイント  (0子コメント)

That's rough. You should've talked em down to 40k and called it a day.

[–]harps86 16ポイント17ポイント  (0子コメント)

Belize is great for a trip and fortunately I didnt have a run in with the authorities. Also met an Allison Adonizio who I believe worked with you at one point.

[–]zenonu 21ポイント22ポイント  (0子コメント)

... so what do you think of the movie John Wick?

[–]panjadotme 10ポイント11ポイント  (0子コメント)

I studied abroad in Belize once. I would love to go back. If you ever feel like going on vacation there again...I'd be down to join. :P

[–]xnecrontyrxTrusted Contributor 139ポイント140ポイント  (35子コメント)

Hey John, you have famously said that "Antivirus is dead."

I don't disagree, and I am curious what security technologies you see as equally not useful. What are the next things that are going to "die"?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 325ポイント326ポイント  (33子コメント)

Here's the problem we're having, people never factored smart-phones into the equation. People use their personal smart-phones to send work texts/email/docs. There are over 10k phone trojan apps disguised. We are in a new paradigm and the hacker world is leading by an order of magnitude. The first order of business is to develop better software. People hack code together, then do pen-testing later, that's garbage. In the future, pair-programming between devs and hackers will allow for instant security feed-back.

The problem with many 0-day exploits take years to fix as they may be architectural in nature. We need hackers (white-hats) in the loop.

[–]sevaaraii 102ポイント103ポイント  (20子コメント)

The problem is, even when these 0days become known, most people responsible for their companies servers genuinely do not give a shit. I mean, look at how many servers are still vulnerable to Heartbleed.

[–]Kijad 25ポイント26ポイント  (2子コメント)

Not only that, but companies still don't equate security with cost savings since there is no outright "dollar value" to the company.

And yet we still have massive breaches every other week - there's a common denominator here.

[–]StubbsPKS 35ポイント36ポイント  (6子コメント)

I love the idea of pairing a dev and hacker to bake security in as you go. That's gold.

[–]Scare_crow 763ポイント764ポイント  (71子コメント)

Your "How to Uninstall McAfee Antivirus" video is one of the greatest things i've ever watched and something I still regularly share when someone asks how they can replace it with a different piece of software.

How hard was it to keep a straight face while filming it?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 1696ポイント1697ポイント  (66子コメント)

It was pretty difficult, everyone on stage was laughing, especially my wife who was the black woman who came and kissed me on the cheek. Everyone was calling me crazy, why not make a parody of myself, sniffing bath salts, etc. Also McAfee is one of the worst products on the fucking planet, so why not?

[–]WYLD_STALLYNS 909ポイント910ポイント  (27子コメント)

Also McAfee is one of the worst products on the fucking planet, so why not?

Direct from the source. Thanks, John!

[–]thecustodian 70ポイント71ポイント  (11子コメント)

I can attest to the trash that is McAfee... I have to deal with what used to be NITRO on a daily basis

[–]Pirate2012 26ポイント27ポイント  (0子コメント)

Respect for that video ; you have some quality acting chops there.

but again, you were not acting were you? :) just being yourself

[–]slanket 10ポイント11ポイント  (0子コメント)

Also McAfee is one of the worst products on the fucking planet, so why not?

You're alright man. You're alright.

Edit: Also, thanks for doing this AMA. It was both entertaining and informative.

[–]sslink1 3ポイント4ポイント  (1子コメント)

One time back in 2009 or 2010 McAfee had an update the completely destroyed my operating system. I read later that apparently it happened to numerous people and that it was McAfee's fault. Honestly it was a good thing because I learned a lot about computers trying fix the problem. Ended up just reformatting though.

[–]RandomMandarin 10ポイント11ポイント  (0子コメント)

So good. Think I'll watch it again.

[–]amundae 188ポイント189ポイント  (10子コメント)

Would you say that people in the government who initiate attacks against our privacy (For instance some high-up within the NSA) genuinely do it out of concern for terrorist attacks etc, or are there people in charge who do not have our best interest in mind?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 470ポイント471ポイント  (9子コメント)

I would be far more concerned about my gov's use of hacking tech to control/track my movements than terrorist attacks. Terrorists are not typically focused on a single person, whereas the gov targets me. What is the goal of a dictatorship? Knowledge of everyone, not control over everyone. 1984 was government knowledge. We can fight terrorists, we cannot fight our government. When the gov becomes more paranoid than I am supposed to be, then we are fucked.

[–]NetSecPentester 84ポイント85ポイント  (2子コメント)

I'm definitely with you on that. I worked in Iraq as a contractor along side military intel units and I can say it is definitely scarier than most people think. I know first hand as I was one of the guys who had the equipment/tools to track phones of the bad guys there. When they offered me a job in the US doing the same thing I was blown away. I didn't even realize they were doing the same operations in the US. With the power we had to listen in on any calls without trace, it was plain scary and we were mature about it. Imagine all the guys who aren't and what they are listening to.

By the way, how did you like Defcon this year? Saw you while leaving a party and at the Drunk History event.

Check it out

[–]IntHatBar 49ポイント50ポイント  (6子コメント)

Having spent much of your career detecting intrusion and evidence of unscrupulous computing must give you an interesting view of society. Can you apply lessons you've learned to other aspects of society? What the hell is wrong with us?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 167ポイント168ポイント  (5子コメント)

Here's what I;ve learned. People will be people, you can trust no one. It's not a bad thing/cynical. I trust people to be people, to act in their own self-interests. If you understand that, you can use that! People will be disloyal, I've heard there are wives that sleep around, etc. We are disloyal, bu loving, kind, gracious. We are a contradiction, the negatives are not bad if you see them for what they are. You cannot trust people, big deal, you CAN trust them to be self-interested, and I use that all the fucking time.

[–]xiko 19ポイント20ポイント  (0子コメント)

I'm learning a ton of things through your posts. Thanks.

[–]Katana__Blazing Crimson 110ポイント111ポイント  (9子コメント)

My own question -

For those of us within the security community, what are the majority of us doing wrong? Is there something common to many that is counterproductive in its very nature?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 225ポイント226ポイント  (8子コメント)

What we're doing wrong is not standing together. We're not out in the streets with signs. We let things like this young man who built the ProxyHam, which we all need and want, get crushed. And we did nothing. If we say enough is enough, and that without privacy, we are automatons, without freedom we are not people. Until the government lets people out of the box do something amazing, we are fucked. We have to do something together, we cannot tolerate this shit. Security cannot be a perfect thing if we're too afraid to to stand up.

[–]Technogen 20ポイント21ポイント  (1子コメント)

What are you personally doing to promote these sort of things? I don't mean that as an attack but honest question. There is the website http://www.whoismcafee.com/ and then Twitter, but what else are you doing to help with things like ProxyHam? With that what can we do to help based on what you are doing?

[–]EpicNoob1983 11ポイント12ポイント  (4子コメント)

I think it was cancelled because it had one major vulnerability, encrypted transmissions on the 900mhz band would stick out like a sore thumb and therefore be easy to locate.

I think this security company cancelled it to avoid bad publicity.

[–]yuhongTrusted Contributor 45ポイント46ポイント  (6子コメント)

OT, but do anyone know exactly what went wrong with McAfee after the founder left the company?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 128ポイント129ポイント  (5子コメント)

It grew, it got big, like every company. When I started, there were 4 of us. Generating $10M/yr, we could have lived happily for our lives on that. VCs came and offered to make it bigger, we had to grow, we didn't have sales, marketing, etc. I gave it away, unless you were a government, corporation, etc.

Once I went public, I had 1000 bosses, investors, FTC, SEC, all my time in meetings and interviews. I hired a programmer/day for over a year! I used to spend time taking apart viruses, not I was an accountant. Once a company gets big, it becomes slow, and cannot survive in its current form.

[–]gepeto42 46ポイント47ポイント  (3子コメント)

What is the business model behind demonsaw? It claims to be ad-free, Bitcoin mining free, free forever and not have ads. Where would the money be coming from?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 83ポイント84ポイント  (2子コメント)

That's not my issue, but Eijah's, I don't worry about money up front, I gave away AV for free and it worked out. I met Eijah at HackMiami and instantly knew he was one of the best programmers in the world. Social encryption can be as complicated as you want, if you want to communicate, you can use shared past experience without out-of-band risk of compromise. I think it's brilliant from any number of aspects. Most people don't have the technical experience to understand encryption and fail to protect their keys, shared social experience is something you never forget. Suddenly, you and your group has something that no one else knows.

Secondly, it is indeed a file-sharing application, I insisted he removed file-sharing from the marketing and use information sharing to prevent being beaten down by the record companies.

[–]gepeto42 9ポイント10ポイント  (0子コメント)

Thanks, it'll be interesting to watch the next few years regarding secure file sharing/messaging/collaboration tools.

[–]onetabtwotab 110ポイント111ポイント  (5子コメント)

Hey John, do you have any insight into what happened with ProxyHam? Do you think the project was pulled due to government agency pressure?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 208ポイント209ポイント  (3子コメント)

No one talked about it at DEF CON that pissed me off. It was a great product, everyone needed one, it cut off the NSA and FBI. I asked to try to get the guy help, and people were too terrified to reach out and help him. Didn't we create the government for our purposes, and no, we're too afraid, it's now a living life-form. Now it's all about self-perpetuation. I want everyone to take a vacation for some years, nothing will go wrong.

It was terrible, I contacted him, and contacted the EFF to make sure it all was free, and he was too scared.

[–]doomxscanner 68ポイント69ポイント  (8子コメント)

Hello John, Can you foresee a true open source, linux based smart phone OS becoming available to the public? I feel that having absolute configuation control over my smartphone (like I do with my linux devies) would give users more privacy and freedom. Why hasn't this happened yet?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 157ポイント158ポイント  (5子コメント)

I tiwll not happen because it's not in the interests in the people who make phones. Has it ever occurred to you why they push so much down to you? It will kill current economic structure: information is money. What money does Google get other than ads? Information is power, privacy and anything that reduces information takes away their powerful.

I expect to be arrested because I speak out against everything that is holding this economy together: information.

[–]DoesntGetItGuy 134ポイント135ポイント  (3子コメント)

What do you think about KimDotCom and his Mega ventures?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 335ポイント336ポイント  (0子コメント)

Well, I think it's a very tragic event, I think proper wording might have saved him. I think that any gov with enough power to force another gov to allow them to come in and forcibly take another citizen is scary. Think about what the US did, not what KimDotCom did. We tolerate it, we say that's too bad. When it happens to you, you'll see the truth of it and it'll be more than too bad.

[–]destroythenseek 63ポイント64ポイント  (15子コメント)

Hey John, Big fan!

Whats your secret to staying alive?

Keep it up!

[–]mcafee_amaMcAfee AMA - John McAfee[S] 265ポイント266ポイント  (14子コメント)

I move very fast, and I try to think ahead of my opponents, who are devious mother-fuckers. The government is not trying to kill me, the people Belize hired are trying to kill me. I donated laptops to ministers' kids knowing they'd be taken. I listened in and found out horrible things. Minister of defense is the largest human trafficker in central America. In Sept, one person who was working for me turned me in.

[–]andrew_balls 38ポイント39ポイント  (7子コメント)

Sometimes it feels like it's only okay to be a strange person if you're also successful. At what point in your life did you go from being considered another weirdo to a brilliant weirdo?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 114ポイント115ポイント  (6子コメント)

I don't think I am brilliant. If I were, I wouldn't be in this shit I'm in. I knew I was different when I didn't pledge allegiance to the flag. I'm just out of the box. I was arrested last week for drunk driving with loaded weapons, which in TN is very serious offense, though in my mug shot I look blissfully happy. I think more insanity than brilliance.

[–]micmaniana 59ポイント60ポイント  (3子コメント)

I can appreciate a rebel, but drunk driving is just stupid mate.

[–]andrew_balls 15ポイント16ポイント  (0子コメント)

Thanks for your response John.

You do look blissfully happy in the mug shot.

[–]xandout 22ポイント23ポイント  (0子コメント)

Dope is tons of fun, guns are as well. Drunk driving they should have beat you sober.

Other than that keep being awesome.

[–]bartblaze 28ポイント29ポイント  (1子コメント)

What do you think of the recent allegations against Kasperky? I imagine such a scenario is not impossible, but what does it say about us in infosec if true (regardless of which AV or other vendor)? Reference: http://www.reuters.com/article/2015/08/14/us-kaspersky-rivals-idUSKCN0QJ1CR20150814 && http://www.securityweek.com/kaspersky-denies-faking-malware-hurt-competitors

[–]mcafee_amaMcAfee AMA - John McAfee[S] 69ポイント70ポイント  (0子コメント)

Anything that can happen in cyber-warfare is going to happen, we know this for a fact. Look at Hacking Team, collecting 0-day opportunities, they were a bunch of scumbags pitting everyone against everyone else just to make a dime. If there's money in it, it'll happen.

[–]RmcAZ 64ポイント65ポイント  (7子コメント)

Hi John,

Do you think that lack of trust on the Internet (advanced malware, phishing, stolen certificates, and general lack of reputation) will eventually get to a point where people will start to simply not use it, en masse?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 139ポイント140ポイント  (6子コメント)

No. Here's why, when something becomes useful, it will not go away, and what cannot be more useful than looking up a bee-sting bite and finding out what to make it go away. Of course people will mis-trust it, and they should, but it will not go away. I have spoken to many people at keynotes about the perils of smartphones, and no one has given theirs up, even I still have one, though I use my flip-phones more.

[–]bob___dull 26ポイント27ポイント  (3子コメント)

Good afternoon doctor.

Besides the obvious parallels between you and Harrison Ford (Fugitive), what is a crazy ass, anecdotal, short-story that happened to you but sounds like it belongs in a movie?

You're doing the Lord's work.

[–]mcafee_amaMcAfee AMA - John McAfee[S] 60ポイント61ポイント  (2子コメント)

Obviously my experiences in Belize when the soldiers came and destroyed my house. It's that story, the refusal to bend to a corrupt system, and the fight, bringing it to the press. I wanted an apology from the prime minister for burning my house and killed my dog. Do you know what being questioned in Belize is? They put on a football helmet, and tie you by your feet and beat you with a bat to not leave bruises. I fled with my wife and journalists.

[–]MachinTrucChose 4ポイント5ポイント  (0子コメント)

What happened to your property there (house, boats, cars) after you fled? Were you renting? If not, were you able to sell something and recoup some money, or was it all gone?

[–]edi25 66ポイント67ポイント  (28子コメント)

What is your favourite operating system and which one do you use right now? OS X? Windows? Linux?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 162ポイント163ポイント  (27子コメント)

I use them all, none of them are safe, I use Windows, Android, IOS. The reason I do that is it makes it more difficult for the people trying to tap me, NSA, CIA, FBI. Wherever I go there's a convoy following me. So if I continuously change, it really pissed them off when they can't locate me. The old arts of spying has really disappeared, my favorite is Android, for ease-of-use. The first thing I do is root it with towelroot to remove update capabilities, then remove bloatware, then unroot it of course.

[–]Pushkatron 59ポイント60ポイント  (17子コメント)

Any reason to unroot it? Is it only because you have no use for root or does root create security holes?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 193ポイント194ポイント  (16子コメント)

Because if you keep it rooted, any asshole can get in there and do anything he wants.

[–]HansomMan 41ポイント42ポイント  (6子コメント)

I'm so happy to hear you say that. So many enthusiasts go on and on about the custom ROM they are running, and all that it allows them do, but never listen to anybody that says it's incredibly stupid to have a rooted smart phone.

I sometimes had to tap smart phones at a previous job (red team), and if it was rooted, then it made my job so easy. If not, I usually had to come up with a much more complicated way to get the outcome.

[–]Artemis2 5ポイント6ポイント  (2子コメント)

What's your opinion on Windows Phone and Blackberry, security-wise? They both have good interfaces and the fact that they have a very minor market share can be a small advantage.

[–]ninzor 67ポイント68ポイント  (10子コメント)

Do you have any comment on your Ashley Maddison account being exposed?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 166ポイント167ポイント  (9子コメント)

There's going to be a shitload of stuff going down. The hacker said they were going to release. If it were me, I'd had come clean immediately to my wife. I had a TS clearance at Lockheed, and you have no idea what questions they asked. "Have you ever fucked a sheep?". When the OPM hack happened, I wrote an article where I came clean to everything.

[–]IAmAZoophile 52ポイント53ポイント  (5子コメント)

Hah! Funnily enough, I started backing out of pursuing a career in security once I realized that any moderate level of success would put me under enough scrutiny that it'd look like I was into some pretty sketchy stuff. Good to know I made the right call there.

[–]jbplaya 75ポイント76ポイント  (14子コメント)

Are you being followed/spied on right now in your life? By who?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 173ポイント174ポイント  (13子コメント)

Yes, of course. Think about it, I came back from Central America under the cloud of murder and drugs. If the CIA was asked what's McAfee up to and didn't know, that guy would be fired. Of course they're following me, and I'm glad. The Belize government has people out there to "quiet" me and they are smart enough not to try anything with all the other feds watching me.

[–]cryptogramTrusted Contributor 77ポイント78ポイント  (4子コメント)

How do you feel about McAfee [slowly] moving under the name Intel Security? Is this a win in your book?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 194ポイント195ポイント  (3子コメント)

You have no idea how glad I am about that. It's become the worst piece of SW on the planet. You cannot uninstall, scans all the time, slow as shit, I'd have fired them, thank goodness I've freed from association with that.

[–]speedrussr 25ポイント26ポイント  (2子コメント)

You have a long history in hacking and in security, and I'm sure you've watched the landscape change a lot, over the last couple of decades. I know you made your own money in security, and as a hacker, but do you think we've reached a point where money may have started putting the final nails in hacker culture?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 61ポイント62ポイント  (1子コメント)

Of course it does! First of all, your father probably told you, power corrupts, absolute power corrupts absolutely. Money corrupts. Once you have enough money, you have no friends, none, even the most dedicated friend you had cannot stop thinking about his mortgage, or new car, or new wife, and friendship ends.

Second, your life becomes a nightmare. I was getting 1000/day asking for help, or asking for me to invest (the best was rocket-power roller skates, I almost invested). Money now has become information, how does Google live? They gather information on smartphones and their services. This is far worse than paper. Paper doesn't try to get into your head, to find out who you're fucking, etc. We are all jealous, hopeful and ambitious, and as long as that exists we'll all have chaos.

[–]IntHatBar 48ポイント49ポイント  (11子コメント)

I am tired of remembering passwords and proving my existence through some digital service.

What will the next 10 years bring in identity management?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 58ポイント59ポイント  (2子コメント)

Yea, passwords will be around in the social standpoint, like what Eijah did with demonsaw. The passwords will be our shared knowledge, be it with 1 person, 3 people, 50, as many as you want. Eventually everyone will lose their minds, though I'm 70 and still have my memories.

We are all abstractions and unique experiences, personal identidy only comes with privacy and freedom.

[–]amundae 23ポイント24ポイント  (5子コメント)

Do you think it would be possible for you to go underground? Or is surveillance to heavy on you that there's no way you could escape?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 73ポイント74ポイント  (4子コメント)

It would be very difficult. I live deep in the woods deep in the a little town in TN. I'd already spotted 3 people in trees. I don't want to go underground, I want to get arrested to make people see what happens when people tell the truth.

[–]amundae 24ポイント25ポイント  (2子コメント)

What historical figure do you most admire/aspire to be like?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 97ポイント98ポイント  (1子コメント)

Charlies Darwin, without question. He lived in an age where belief was the creator, and the act of creation was supreme. Even scientists could not think in terms of 1000000s of years. And here's a man who came up with the most beautiful theory. I read the book cover-to-cover many times, it is the most moving book I've ever read. The man has changed my life, and given me hope for humanity, he's the man.

[–]Maikusan 45ポイント46ポイント  (5子コメント)

What advice could you give a new software engineering trying to make a breakthrough or the next big piece of software?

Edit: I am geeking out so hard right now about getting a response. Thank you, Mr. McAfee!

[–]mcafee_amaMcAfee AMA - John McAfee[S] 81ポイント82ポイント  (4子コメント)

That;s a tough one. get out of the box no1. REALLY out of the box. Abandon every social norm, esp those closest to you. Then look at the world with objective eyes. Look what is the thing to do? Every entrepreneur I know (I know Steve Jobs, and he was out of the box) went out of the box. If you can't go work for someone else.

[–]theleller 25ポイント26ポイント  (9子コメント)

Do you believe that the world will ever fully adopt a cryptocurrency as our primary form of currency?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 75ポイント76ポイント  (8子コメント)

It will have to happen, it will not stop, praise god. I don't know how governments will collect taxes, but it cannot be stopped.

[–]slainthejabberwock 34ポイント35ポイント  (23子コメント)

Which anti-virus software do you use/prefer?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 121ポイント122ポイント  (21子コメント)

I don't use AV, I think it's dead and based on an ancient tech that is no longer relevant. Hacker kits come out 10x faster. AV is a meaningless system. I use phones, flip phones without GPS. I use my samsung phone if I want internet and buy a new one every 2 weeks.

[–]gepeto42 30ポイント31ポイント  (10子コメント)

Do you give your old phones to people who would look at them to try and see if they were compromised, or do you simply set them on fire?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 125ポイント126ポイント  (9子コメント)

I just hand them to other people, so the CIA/NSA has to chase them down for a while until they realize it's the wrong person.

[–]Technogen 31ポイント32ポイント  (4子コメント)

You should setup a mailing list to send them to, that would be cool as heck randomly getting a John Mcafee phone in the mail. Though I guess the feds would notice that it moves though the mail system at that point.

[–]xdig2000 11ポイント12ポイント  (1子コメント)

Why would they follow you? (Or am I out of the loop?).

[–]Kijad 11ポイント12ポイント  (3子コメント)

I'm curious - how do you feel about mathematical model-based AV (no signatures) such as Cylance?

[–]keithschm 45ポイント46ポイント  (4子コメント)

With everything you have done and everything you have been through, what is your greatest accomplishment? and what do you hope to achieve in the future? What was your biggest failure? What is the most important lesson you have learned in life?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 122ポイント123ポイント  (3子コメント)

surviving 3 marriages and finding a woman who is my peer

[–]aswecirclethedrain 9ポイント10ポイント  (0子コメント)

I am more interested in an elaboration on this point than anything else in this AMA.

[–]sprkyco 15ポイント16ポイント  (1子コメント)

Do you spend as much time on the computer as you used to doing "technical" things? i.e. other than e-mail, browsing etc.

[–]mcafee_amaMcAfee AMA - John McAfee[S] 54ポイント55ポイント  (0子コメント)

Depends on what you mean technical. Architecturally I spend far more time. Coding compared to Eijah, no. How things fit together, how your phone connects to your car to your fridge, yes, I spend a lot of time thinking it out and talking to my hacker friends. Example: there was a hack at a London car telephone factory, they stole MACs/information. China can use that to send texts: "STOP CAR NOW" and halt the UK traffic. I think the human race has lost its mind.

[–]unsupported[🍰] 17ポイント18ポイント  (3子コメント)

Mr. McAfee, do you have any regrets?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 76ポイント77ポイント  (0子コメント)

I have none. The way we reach the place the place we are is by making the mistakes we did, and doing the right things at the right time. There is nothing I regret.

[–]penguinopusredux 18ポイント19ポイント  (12子コメント)

What's the deal with the bath salts :)

Seriously however, do you think the intelligence services will ever be reined in?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 58ポイント59ポイント  (11子コメント)

There is no secret that I have taken every drug. I am what's called the rec drug experimenter. You make a drug and I'll try it. I am not addicted, I'm out of the box, I could afford quality cocaine, but I was to try everything in case there's something magical out there.

[–]leaknoil 17ポイント18ポイント  (6子コメント)

Most of the time your first experience with a new drug is always the best experience you have with it. It's never the same again. Sounds like you may be chasing that rather than anything magical.

[–]p0lm_SmokeLeet 31ポイント32ポイント  (2子コメント)

Back in the days, where you ever approached by NSA or similar agencies with requests for implementing backdoors or disabling detection of certain infections, or anything else that would compromise customers' security? If so, please do elaborate!

[–]hermajordoctor 22ポイント23ポイント  (2子コメント)

What career advise do you have for us?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 97ポイント98ポイント  (1子コメント)

Do what you love. And do it with all of your heart. And if you find yourself in a position where you don't want to get up in the morning and do your job, you are in the wrong job. I don't care if you want to make shoes, but do what you love and something magical will occur.

[–]gsuberlandTrusted Contributor 10ポイント11ポイント  (0子コメント)

Eloquently put, and a sentiment I share.

It's also important to keep in mind that some things don't turn out like you expect. You might love something as a hobby, go into it as a job, and hate it. But out of that you can find a new passion that you actually enjoy and find satisfying to work with.

[–]QforQ 13ポイント14ポイント  (1子コメント)

Which security niches or areas of focus are you most interested in at the moment?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 30ポイント31ポイント  (0子コメント)

two areas, corp intranets, because we do have to have a secure corp world or the world will collapse. The world may be collapsing watching the Ashley Madison hacks already. I have one STTarx where the protocols and keys change, and withstood a 4 month university pen-tests.

The 2nd is smart-phones, we are carrying around the world's most sophisticated spy devices in the world. I estimate 10% of phones are running untraceable spy devices. You can download and install towelroot without making any physically visible changes.

We need to change this because carrying around a device designed to track everything, it is impossible to make a product to fix it as it's a design issue. I have a product called DCentral that locks down the phone, it's not a perfect solution, but certainly the most powerful solution yet, and I'm not happy with it yet, because it's not yet invisible.

[–]surlyclay 13ポイント14ポイント  (2子コメント)

With Future Tense Central and all the products you offer...

Can we Trust you? Should we trust you?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 32ポイント33ポイント  (1子コメント)

Why not? Do you think my personal life, think about this, if you're out of the box, you have no rules, no limits, nothing you can't do. Obviously I'm going to be arrested a lot, and will be accused a lot. The things that I do, are because I live outside the box, and I'm seeing things from a different perspective, the things I build are not me, not my arrests, they are something else. Renoir's paintings are not him. It has nothing to do with trust, I will do go something illegal/etc. means nothing to the products I build, which I promise you are the best in the world.

[–]rainbowlazerunicorn 9ポイント10ポイント  (1子コメント)

Thanks for the AMA!

In times of rising automated software, what do you think about an AI developing software? Good/Bad/Why?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 47ポイント48ポイント  (0子コメント)

You're opening a can of worms here, we have to have AI here, if we had AI, when I got the password from Ashley Madison (I wanted to see how difficult to get the password with no technical skills). I asked Active Life who's in charge of software dev, they gave me his name. Then I got everyone else who worked there, and called them all to find someone not there, then called back with an urgent call from the person not there. Some social engineering and I was able to get passwords. If we had AI, that shit wouldn't happen. The end of AI is the extermination of the human race. We're soft creatures with anger and lust, etc. AIs will say, fucking hell, these weak being should work for us. We need to understand the risks with creating a life form.

[–]gepeto42 16ポイント17ポイント  (5子コメント)

Why did you create BlackCert, and what advantage does it provide over the other offerings?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 23ポイント24ポイント  (4子コメント)

It provides better security. We are working on adding things to the certification process, seriously, how many certification processes give you viruses? I can count thousands, I'm not ready to release the full details yet, the sooner you release something, the sooner the hackers start working on it.

[–]gepeto42 11ポイント12ポイント  (3子コメント)

So the main advantage of BlackCert over other certificate providers right now is that it does not "give viruses"?

Mozilla has about 180 trusted CAs, a lot of which are related to the same company, so I am wondering where these thousands of CAs that provide free viruses are.

Wasn't there something about a huge liability/warranty that you mentioned in previous interviews?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 17ポイント18ポイント  (2子コメント)

We have the ability to monetize BlackCert to our own goals, and I promise you it'll be surprising.

[–]frog51 16ポイント17ポイント  (1子コメント)

With the balance between truth, media fud and government fud it is very difficult for the public to know how to weigh up any new claims about you or by you. Other than this AMA, do you have any thoughts on how to win back confidence/assurance? Or is it not that important to you?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 36ポイント37ポイント  (0子コメント)

I don't care who has any/none confidence in me at all. A man and his products are different. Many people who are assholes make amazing products, they have to be judged differently.

[–]hermajordoctor 19ポイント20ポイント  (4子コメント)

Do you have a bucket list and if you do, what are the top five things you want to do before you die?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 67ポイント68ポイント  (3子コメント)

I have done them all I don't have one

[–]vartmp 10ポイント11ポイント  (1子コメント)

You're awesome. Stay awesome. How many cats do you own and what do you think of todays IT security climate?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 20ポイント21ポイント  (0子コメント)

I have 4 dogs which is fewer than normal, and no cats.

[–]daaryll 9ポイント10ポイント  (8子コメント)

What can we do now to protect ourselves for the future?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 59ポイント60ポイント  (7子コメント)

Go back to flip-phones ;P Do not download shit you do not need (games, etc...). Be aware that everything that is free is not free! There is nothing free in this world. People don't spend $1M on an application to give it to you for free. They have a reason, and it's not good for you, I promise that.

[–]eiais 14ポイント15ポイント  (3子コメント)

Are you planning on going to defcon next year?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 26ポイント27ポイント  (2子コメント)

Yes, of course, I was there this year!

[–]grizzly_wintergreen 22ポイント23ポイント  (1子コメント)

Hey John,

Great party you had at the Hustler Club at Defcon, had a great time :D

[–]mcafee_amaMcAfee AMA - John McAfee[S] 48ポイント49ポイント  (0子コメント)

You liked the women :) We had the largest party at DEF CON, 3000+ people and I worked to make sure everyone had a good time.

[–]dguido 7ポイント8ポイント  (3子コメント)

How did you come to start the company bearing your name? What's the origin story behind McAfee Associates?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 40ポイント41ポイント  (2子コメント)

It just seemed like the easiest thing to do, didn't it? Just use my name. Stupid because it brought me 2000 law suits. In USA law suits follow money. I've been sued 15x for trip-and-fall suits where people would travel 1000s of miles to come trip on my property.

[–]walkingthelinux 10ポイント11ポイント  (3子コメント)

Your video on "How to uninstall McAfee antivirus" was classic. Any plans on future videos along the same lines?

Personally I'd like to see you have your own reality show: Being John McAfee

[–]mcafee_amaMcAfee AMA - John McAfee[S] 29ポイント30ポイント  (2子コメント)

No TV show. I am working on a new video. I'm called to save the world and my wife has shrunk my super-suit. It's coming up soon!

[–]rc0de 11ポイント12ポイント  (5子コメント)

What do you think about cybersecurity investments?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 55ポイント56ポイント  (4子コメント)

Depends on the type of investment, old ideas will flop, new ideas will be extremely lucrative. As an aside, I'm looking out the window and watching an NSA operative, he's an idiot wearing black in a green forest.

[–]pcvcolin 10ポイント11ポイント  (5子コメント)

What is your philosophy of life?

Favorite fruit?

Do you use altcoins, (e.g. BCN, SDC, etc.) if so which are your preferred ones?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 26ポイント27ポイント  (2子コメント)

I don't have a preference (LTC/BTC/ETC). A company in Uraguay has improperly used my name. They have a currency named SwiftCoin, with vaults. You can with a private email you can convert SwiftCoin into gold bars in their vaults. You can check out the press release which used my name improperly "McAfee SwiftCoin", so do not believe it. But the idea that you can convert your currency into hard gold without anyone in the world knowing, that's pretty hot.

[–]mcafee_amaMcAfee AMA - John McAfee[S] 18ポイント19ポイント  (1子コメント)

Good god, must be a papaya, the big 50lbs ones that are sweet, with strawberries.

[–]_rsTrusted Contributor 9ポイント10ポイント  (1子コメント)

John,

How many exploits have you written, is there anything public?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 33ポイント34ポイント  (0子コメント)

No exploits, none public. Finding 0-days is like carrying water through the ocean, there are plenty of hackers out there, and they don't need me in the mix.

[–]itz_working 6ポイント7ポイント  (3子コメント)

What do you think about the HBO show Silicon Valley? What was your experience like back in your heyday or prior to your success?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 35ポイント36ポイント  (2子コメント)

I haven't watched TV in the last 30 years, people tell me about it. Wait, there is one exception, Game of Thrones is my only entertainment.

[–]scuba323 11ポイント12ポイント  (2子コメント)

What made you get into helping block viruses instead of creating them. (Blackhat/Whitehat)

[–]mcafee_amaMcAfee AMA - John McAfee[S] 33ポイント34ポイント  (1子コメント)

More money in it at the time

[–]walkingthelinux 8ポイント9ポイント  (9子コメント)

I contacted you during the time you were on the run and we conversed a bit. Did you ever look into cerebrolysin?

Also, what can you tell us about the extent to which the US government has infiltrated private data spaces? Anything you can add that has not already been made public?

Also, do you view Snowden as a patriot, traitor, or what?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 26ポイント27ポイント  (8子コメント)

re: Snowden, what an odd question. I did an interview with a Russian magazine, their first question was "do you think Snowden is real? Was he a US/CIA/NSA plant to mess with our minds" That's why I prefer the Russian press. Personally I'm glad he told me, would you rather not have known?

[–]px403Trusted Contributor 5ポイント6ポイント  (1子コメント)

Hey John, you're great. If you had a button you could press that would topple governments/companies/organizations, what would be the first three groups would you use it against?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 28ポイント29ポイント  (0子コメント)

Ok, here's the button I would push: the button for the executive branch, congress and the senate to make them swear they will never show up at their office and move to the Bahamas and fish for 4 years.

We have too much government, we all need a fucking break from the government, if I had the money I'd send them all to Fiji for 4 years, I just don't have the money.

[–]gsuberlandTrusted Contributor 4ポイント5ポイント  (1子コメント)

What's your opinion on the progress (or lack thereof, if you view it that way) of open source offerings such as Clam in the home security software market?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 16ポイント17ポイント  (0子コメント)

Open source is a double-edged sword. It gives black hat hackers instant access to all the problems, and there will always be problems until we can develop better code. I don't believe open-source code is any better than closed. The first manufacturer of computer opened it up to anyone, who won that battle? IBM or Apple (with a closed system). I

[–]redenti 2ポイント3ポイント  (1子コメント)

how many av companies are actually writing their own viruses to sell more copies of their products?

[–]mcafee_amaMcAfee AMA - John McAfee[S] 26ポイント27ポイント  (0子コメント)

I think none. The reason, there are enough people writing viruses to not waste your money writing more. No one in the AV industry I've talked to, no one has ever done that because it's the most senseless thing in the world.

[–]gsuberlandTrusted Contributor[M] 94ポイント95ポイント  (0子コメント)

John McAfee is a guest of /r/netsec and has volunteered to answer questions; please treat him with due respect. Comment rules will be strictly enforced, and uncivil or rude behavior will result in a loss of privileges in /r/netsec. We invite users to read the foreword for this AMA, and the rules in the sidebar.

I would like to remind everyone that /r/netsec is a security subreddit. While we are relaxing the content rules a little for this AMA, questions and comments should remain reasonably on-topic. For those of you unfamiliar with /r/netsec's quality requirements and strict moderation, please read the rules on the sidebar and the content guidelines. We have a strong desire to keep the signal to noise ratio high here, so please avoid excessive jokes and off-topic comment threads. Memes, trolling, and other blatantly off-topic / offensive content will be deleted and dealt with appropriately.

Thank you all for your cooperation.

EDIT: That's a wrap folks. Thanks to everyone who asked questions, and massive thanks to John for answering so many! :)

[–]yourgoddamnrite 9ポイント10ポイント  (1子コメント)

I wanted to say your Ask Slashdot interview was probably the best they've ever had, especially your answer to the "What's in your day-to-day carry bag?" question.

Your time in Central America was colourful to say the least -- I don't want to ask if you're still chemically enhanced, but hypothetically: what's in that bag? Is it a distraction or enhancer for your work?

[–]sevaaraii 4ポイント5ポイント  (2子コメント)

The only question I have is regarding IoT. Currently, we're making moves to start implementing IoT into absolutely everything. Yet we still can't keep current infrastructure safe. Infrastructure that has been here for decades and still gets exploited daily. I personally think that IoT is a complete security disaster, what are your views on this? Do you think we're ready for IoT?

[–]gheide 3ポイント4ポイント  (0子コメント)

About 1990, before the Michelangelo virus, I worked at a computer shop and knew pascal (borland turbo pascal). I found source code for a basic exe dropper virus on the newsgroups. I compiled it, ran it on a test system, and McAfee found it. I added a millisecond delay, but didn't change the rest of the runtime. It changed the filesize and of course the checksum. Virus still operated, albeit with a small delay, but McAfee didn't detect it. How many viruses to this day go without being discovered?