Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

My review of SAV Mac HE & 4 issues

As a long-time Sophos user (in my former life, working for a Fortune 500 company or two), I was excited to see the free SAV announced for the Mac.

I installed it today, put it through its paces, found an (unexpected) piece of Windows spyware on my system, and came to some conclusions about the product.  I then wrote it up in an article on my blog.

Clean sweep:

 http://aaron.sakovich.org/blog/pivot/entry.php?id=637

My issues boil down to the following:

  1. Progress bar during installation does not start off accurately.
  2. Putting a "Remove" app in the Application folder is annoying.  Everyone else leaves it in the .dmg; hopefully, I'll never need this app!
  3. A quarantined item with a long path name can wind up being obfuscated -- SAV puts an ellipsis in the path; if you must manually remove this file, you've got to pull the info out of the log file or search for the file name manually -- you can't glean the needed info from the quarantine window right in front of you!
  4. After removing the Windows spyware from my email, I later got an alert from SAV that it had found it again -- this time in my Time Machine backup.  My TM disk resides on a network server; what happens to the sparsebundle when TM tries to prune that infected email out of my backup, and SAV flags it as quarantined?  Will my sparsebundle get corrupted?

That's it, though.  I love the product, and applaud Sophos for releasing this!!!  THANKS!

Aaron

:1000106


This thread was automatically locked due to age.
Parents

  • Alphaman wrote:
    • … My TM disk resides on a network server …

    … Time Machine backup … sparsebundle is a complex combination of data and metadata …

    … Selectively deleting old backups from TM is not the expected failure mode of how such a program would corrupt your backup.  You would much more likely see what the good doctor saw in his blog post -- a complete loss of ALL your TM.

    Time Machine will prune your backup.  SAV doesn't have the intelligence to do such.


    All true to the best of my knowledge, but I can think of at least three different Time Machine destination/target environments — one of which does not involve a .sparsebundle — and an obscure bug (not yet reported in the Home Edition area) that causes a volume unrelated to TM to be unexpectedly ejected — so I think it'll be prudent to separate the SAV versus TM puzzles into a separate topic. 

    Any objections? / Watch this space …

    :1000633
Reply

  • Alphaman wrote:
    • … My TM disk resides on a network server …

    … Time Machine backup … sparsebundle is a complex combination of data and metadata …

    … Selectively deleting old backups from TM is not the expected failure mode of how such a program would corrupt your backup.  You would much more likely see what the good doctor saw in his blog post -- a complete loss of ALL your TM.

    Time Machine will prune your backup.  SAV doesn't have the intelligence to do such.


    All true to the best of my knowledge, but I can think of at least three different Time Machine destination/target environments — one of which does not involve a .sparsebundle — and an obscure bug (not yet reported in the Home Edition area) that causes a volume unrelated to TM to be unexpectedly ejected — so I think it'll be prudent to separate the SAV versus TM puzzles into a separate topic. 

    Any objections? / Watch this space …

    :1000633
Children
No Data