RE: Re: Malware sharing? People are full of shit [was:Getyour computer viruses here!]

["Jason Geffner" <jasongef () microsoft com>]

One of the recurring themes I've seen in this thread is: It's easy for
bad guys to get samples, but difficult for good guys to get samples.

This idea has been questioned by many on this thread. If the statement
above is indeed true, then here's a possible reason why:

For a person to get access to a given sample-collection, they may first
have to vet themselves by sharing samples from their own collection (new
samples that they've written, rare samples that are hard to find, etc.).
A "good guy" may not want to give out samples, but a "bad guy" would be
willing to. As such, a bad guy can vet himself whereas a good guy can't.

This concept of vetting oneself by "uploading first" is extremely common
in many underground scenes.

- Jason

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.