funsec mailing list archives
Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!]
From: Drsolly <drsollyp () drsolly com>
Date: Thu, 29 Dec 2005 16:32:16 +0000 (GMT)
But this site will not only provide the bad guys with samples (which they'd be stupid to use)
A) Some (possibly most) of the Bad Guys are stupid (I could cite various viruses in support of this). B) You can take bedbug.a.12.b (which is detected by Wonderscan) and with a few modifications create bedbug.a.12.c, which isn't detected by Wonderscan.
Making the samples (at least of viruses) freely available is entirely undesirable and ethically indefensiblt, but making the (detailed) analysis of _any_ "clever", "advanced" or otherwise "useful" malware technique publicly available, we have the supposed good guys openly assisting (especially) the less clueful bad guys. That is a very bad thing and turns the purported "good guys", and especially those providing the mechanism of that assistance, into contributory bad guys _despite_ the best of their good intentions in setting up the system... Without vetting the site's membership, Val is providing much more valuable assistance to the bad guys than the good guys will ever get.
Of course, by making the virus and malware situation considerably worse, he'll be improving the profits of the AV companies, especially the ones with the largest manpower resources. Maybe I should write an antivirus ... _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!], (continued)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Blue Boar (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Dude VanWinkle (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Nick FitzGerald (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Blue Boar (Dec 30)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 30)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Blue Boar (Dec 30)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Nick FitzGerald (Dec 30)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Gadi Evron (Dec 30)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Blue Boar (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Gadi Evron (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Dude VanWinkle (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Dude VanWinkle (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Dude VanWinkle (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] val smith (Dec 28)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Drsolly (Dec 29)
- Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!] Joe Jaroch (Tera Innovations, Inc.) (Dec 29)