Re: The Anti-Virus/IDS fantasy world

["Paul Melson" <pmelson () gmail com>]

> I would suggest you are talking about different people.
> The malware analysts at any AV company probably dig through more malware
samples than you do on a 
> regular basis.

I would hope so, seeing as it's at the top of their job description.  But
you know who's probably not elbow-deep in malware these days?  Mark Harris.


> Underestimating your opponents is a fatal mistake either way. The best
malware analysts I know are well 
> aware of the skills of the authors. Likewise so are the authors I know
aware of the skills of the 
> analysts. 

In fairness to Mark Harris, the malware submission that sparked his post 1)
didn't run and 2) contained furry pr0n.  Maybe he's not underestimating in
this one case.

PaulM


_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave