Full Disclosure mailing list archives
RE: A suggestion to all AV vendors...
From: "Todd Towles" <toddtowles () brookshires com>
Date: Tue, 7 Dec 2004 13:28:24 -0600
Not exactly true..it is called freedom...drinking is bad for you when you take too much..but so are some vitamins are bad for you when you take too much...let the government tax cigs, if you don't want to buy the tax, don't buy them. Again we are way OT. Never go to excess, but let moderation be your guide. Cicero (106 BC - 43 BC) Water, taken in moderation, cannot hurt anybody. Mark Twain (1835 - 1910) -Todd
-----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Kenneth Ng Sent: Tuesday, December 07, 2004 11:34 AM To: Valdis.Kletnieks () vt edu Cc: bipin gautam; full-disclosure () lists netsys com Subject: Re: [Full-disclosure] A suggestion to all AV vendors... If you want an analogy, note that the US government says that smoking is bad for you. Yet, they won't ban smoking. Why? All the revenue they get from taxing cigerettes. On Tue, 07 Dec 2004 10:50:11 -0500, Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu> wrote:On Mon, 06 Dec 2004 19:29:26 PST, bipin gautam said:A simple yet effective solution would be, for AV vendors to (say) add the vulnerable system dll's, execudables etc... in a threat list (Refering to Microsoft's KB or something similar) And after completing the virus scan, suggest the users to download proper patches accordingly to threat level and directing the end users towards proper link to do so?Simple, effective, and Won't Happen In Our Lifetime. Remember - we're talking about a multi-billion dollarmarket segmentdevoted to fixing shortcomings in another company's software. And said segment doesn't want to kill the goose that laid thegolden eggs.Repeat after me: Most A/V vendors don't actually give asquat aboutyour security. They are there to sell you products andimprove theirbottom line, not yours. They don't care about your bottom line as long as your bottom line can still pay their invoices. The A/V vendors have known for several years now exactly how not to send "a virus was cleaned from your email by ShinyAV" spam,but theykeep doing it anyhow, just to get brainshare for ShinyAV. What business case is there for them to give you a pointer to vendor patches that will close some of the holes that let the malware in? (Also, keep in mind that if they don't point you at IE fixes, then when you get 0wned by an IE hole, they can just say "Hey,that's not avirus, that's an IE hole, Not Our Problem"...)_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- A suggestion to all AV vendors... bipin gautam (Dec 06)
- Re: A suggestion to all AV vendors... Valdis . Kletnieks (Dec 07)
- Re: A suggestion to all AV vendors... Ron (Dec 07)
- Re: A suggestion to all AV vendors... Valdis . Kletnieks (Dec 07)
- Re: A suggestion to all AV vendors... Kenneth Ng (Dec 07)
- Re: A suggestion to all AV vendors... Ron (Dec 07)
- Re: A suggestion to all AV vendors... Florian Weimer (Dec 12)
- Re: A suggestion to all AV vendors... Ron (Dec 07)
- Re: A suggestion to all AV vendors... colinm () clientsecure net (Dec 07)
- Re: A suggestion to all AV vendors... Mary Landesman (Dec 07)
- Re: A suggestion to all AV vendors... Kenneth Ng (Dec 07)
- Re: A suggestion to all AV vendors... Valdis . Kletnieks (Dec 07)
- <Possible follow-ups>
- RE: A suggestion to all AV vendors... Todd Towles (Dec 07)
- Re: A suggestion to all AV vendors... Stephen Menard (Dec 10)
- RE: A suggestion to all AV vendors... bipin gautam (Dec 10)