@thomrstrom@triangletoot.party
Post #3148390
2026-03-27 00:00 UTC
I've poured hundreds of hours (and thousands of dollars' worth of GPUs, RAM, and storage) into Atomdrift because it's well past time the open-source community had a solution. While ClamAV served us well for the past 23 years, its design always assumed that malware samples were static, well-known, and in binary form. That's not the case in 2026.
Replies (1)
-
@thomrstrom@triangletoot.party 2026-03-27 00:00
The concept is simple: decompose a program into atoms, identify the unique mal-ecule that makes up the program, and use a fast local ML to keep the false-positive rates low. Treat binaries and source code as first-class citizens, with automated reverse-engineering of both sets. We still have a long way to go, but if you want to check out where we are today (including a web portal for analyzing samples), see https://atomdrift.org/