Full Disclosure mailing list archives

Re: win2kup2date.exe ?


From: Über GuidoZ <uberguidoz () gmail com>
Date: Fri, 3 Sep 2004 02:02:10 -0400

Ahem, *blush*

Be cautios with your words

Should be, as you probably guessed: "Be cautious with your words". Damn typos.

-- 
Peace. ~G


On Fri, 3 Sep 2004 01:58:24 -0400, Über GuidoZ <uberguidoz () gmail com> wrote:
Hey, the man asked for help, so I offered it. Simple as that... I'm a
helpful guy, it's what makes me tick. Dedicated my life to a
non-profit organization that helps the average consumer FOR FREE with
security consulting, technical support, and personal privacy. Not
because I'm trying to collect anything. Not because I'm trying to get
a foothold on any business. Simply for the fact that I remember how
frustrated and helpless I was when I didn't understand anything. I try
to make sure others don't have to suffer the same fate.

Be cautios with your words. You never know who you may be speaking to,
or how they will take it. General advise; not necessarily relating to
this situation beyond common courtesy.

As for VirusTotal.com, to be honest I have never cared why they
provide the service they do. I also could care less if they are
keeping copies of the viruses that are sent to them... they are
available all over the Internet. (Google it...) When someone has an
unknown malware EXE and they need a quick way to identify it to fix a
problem, why not go with what works? Their business practices isn't
any business of mine. The fact that they answer the question I ask,
however, IS.

A little respect is all I ever ask. =)

--
Peace. ~G

On Fri, 03 Sep 2004 11:19:41 +1200, Nick FitzGerald


<nick () virus-l demon co uk> wrote:
Über GuidoZ wrote:

...  If you want to email me a copy of it, I'll
rip it apart and see what can be seen.

And world plus dog should entrust you with such material because???

P.S. Send it to [...] - it's my "catch all" for
virus/unknown files. Just be sure to ZIP it up or else the web host
won't let it through. Otherwise I have disabled all checks/scan.
Downloads directly to a secured Linux box.

That's all very nice, but alone, far from the makings of someone to
entrust arbitrary, suspected malware samples to.

I'm also rather suspicious of your promotion of Virus Total.  Hispasec,
as far as I can tell (Spanish being something I have to have translated
via online services), has no antivirus or similar product of its own,
yet it has set up, and some folk seem to be promoting, what is
effectively a sample collection mechanism.  I've also heard vague
rumblings that Hispasec/Virus Total does not have suitable licenses for
at least some of the scanners used in its service (and strongly suspect
that several of the AV vendors whose products are currently used would
not allow their products to be licensed for use in a service of the
kind Virus Total offers anyway because it paints a rather disturbing
trust picture -- "You can trust me because I can run a virus
scanner...").

Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: