Application whitelisting is beginning to look more and more appealing. Don't get me wrong. It's had merits all along. What's happened is I've seen way too many failures of antivirus lately against bots, which is making me rethink some things. In fact, I'm almost getting to the point where I feel like I'm doing a disservice to people when they ask me how they can protect themselves from malware and I spill out my standard response.
