Kaspersky Lab Moving Core Infrastructure To Switzerland (securityweek.com)

wiredmikey writes: As part of its Global Transparency Initiative, Russia-based Kaspersky Lab today announced that it will adjust its infrastructure to move a number of "core processes" from Russia to Switzerland. The security firm has faced challenges after several governments have banned Kaspersky software over security concerns, despite no hard evidence that Kaspersky has ever colluded with the Russian government. As an extension to its transparency initiative, announced in October 2017, the firm is now going further by making plans for its processes and source code to be independently supervised by a qualified third-party. To this end, it is supporting the creation of a new, non-profit "Transparency Center" able to assume this responsibility not just for itself, but for other partners and members who wish to join. Noticeably, Kaspersky Lab does not link the move specifically to the effects of the U.S. ban, but sees wider issues of global trust emerging.

Comments

Wait...

[Locke2005]

So, what you are saying is there is more evidence that Trump has colluded with the Russian government than there is evidence that Kapersky has colluded with the Russian government? What a world we live in!

How will moving location change anything?

[jellomizer]

Kaspersky is being accused of aiding the Russian government in its espionage. Being that the company makes security software which by definition needs to be run these systems normally with elevated privileges.
Despite if the claims are true or not, people are not choosing Kaspersky software due to its connection with Russia, and the Russian government does have a trend of getting involved in its companies. Companies with sensitive information are not using the software.

Moving to Switzerland doesn't seem to really fix anything, because all it will take is a request for the CEO to send or "Backup" their data to a Russian Data center, or to an 3rd party data-center that Russia may have access too.

The only way I think they would be considered safe, is if they provide the source to all the countries they are trying to sell too, have them review it, and compile it with their own tools and redistribute it to its citizens. Any data collection would need to be done by 3rd party resellers who have no direct connection to the actual company.

Re: How will moving location change anything?

[jellomizer]

There are ways around that normally. Lets say there is a remote offsite backup in UK. Where their privacy may be compatible for Switzerland to send data to them, but UK Laws may allow sending data to Russia.

I am not saying UK laws will or will not allow this, I am just giving an example.

Re:How will moving location change anything?

[Bert64]

Why is a russian company worse than an american, chinese or european company?
Sure, the russian government is known for spying, but so are governments of various other countries especially the us. The us is also known for having secretive courts, mass surveillance etc.

You can't trust any software which does not have publicly disclosed source code, and even then you should conduct your own audits and builds if its for a critical system. If the code is open, you may not have the skills or time to audit it, but as the code is open to everyone then its open to be inspected by various groups with competing interests, as it's unlikely that opposing governments would all collude together to backdoor software.

Unless you are actually working for a government, it actually makes sense to prefer foreign software, as a far away foreign government is unlikely to have any interest in you, or influence over you.

Not sure that'll help

[Artem S. Tashkinov]

Eugene Kaspersky still lives in Moscow and he's still an ex-KGB agent. These two facts alone make look Kaspersky highly untrustworthy considering that the Kremlin is waging e-war with the rest of the world.

Re:Not sure that'll help

[BlueStrat]

Eugene Kaspersky still lives in Moscow and he's still an ex-KGB agent. These two facts alone make look Kaspersky highly untrustworthy considering that the Kremlin is waging e-war with the rest of the world.

No, even if true Kaspersky A/V is still the far more trustworthy choice as I'd trust Putin over the US government as far as their interest in and ability to screw with me as an individual.

You have to understand that any A/V made by companies in "Five Eyes" nations or their allies is intentionally and deliberately broken out of the box. Kaspersky A/V will happily identify/remove US/Western LEA/TLA spyware, etc. That's really what this is about.

If the US government forces me to be spied on then whenever possible I'll choose to be spied on by the US's enemies over allowing the US to do so.

Strat

Re:Not sure that'll help

[giggleloop]

Exactly what could the Russian government do to a private citizen who will likely never step foot on their soil? Now what could your own government do to you? Sure, it's paranoid thinking either way, but the latter example certainly has more capacity for causing you damage personally.

Re:Not sure that'll help

[jamlam]

Exactly what could the Russian government do to a private citizen who will likely never step foot on their soil?

Errr, attempt to poison them? http://www.bbc.co.uk/news/uk-e...