Dailydave mailing list archives

Re: VPC


From: Thierry Zoller <Thierry () Zoller lu>
Date: Sat, 23 Feb 2008 03:17:46 +0100

Dear Andrew ,
(and I hope you mean
performance because I do not believe "performant" is an englih word)
You get 10 points for your guessing skills, how difficult was it to get
the intented meaning out of "performant" ? ;)

My point in testing was mainly this one, if your sandbox is detectable
there is no need to have one, since the malware code will simply decide
to act differently... easy with cwsandbox, easy with norman, difficult
with joebox.


-- 
http://secdev.zoller.lu
Thierry Zoller

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave


Current thread: