Re: another VX site?

[Drsolly <drsollyp () drsolly com>]

On Sat, 7 Jan 2006, Gadi Evron wrote:

> Pierre Vandevenne wrote:
> > Good Evening,
> >
> > Saturday, January 7, 2006, 5:59:37 PM, you wrote:
> >
> >
> > > > Hey, that's a great idea. Why didn't anyone think of it before!
> >
> > OS> I am well aware of CME-
> >
> > There were earlier attempts. That one for example
> >
> > A New Virus Naming Convention
> > At a CARO meeting in 1991, a committee was formed with the objective
> > of reducing the confusion in virus naming.  This committee consisted
> > of Fridrik Skulason (Virus Bulletin's technical editor) Alan Solomon
> > (S&S International) and Vesselin Bontchev (University of Hamburg).
>
> Who are these bozo's? Never heard of `em!
>
> Especially that guy Solomon, who is he? 

Some loser.

> Next you will tell me he would 
> give me socks for my vote.

Put a sock in it.
 
At the time, we sorted out the names for all the viruses there were (maybe
1000?), and laid down naming conventions, that are still being followed.

The essential problem remains. You get a new "thing", you want to make 
detection for it immediately, so you need a name for it, and you don't 
really want to spend a week with 1000 other AV companies etc, working out 
whether the file that you have in front of you is the same malware as the 
one they have (remembering that you can have the same malware in different 
files) before including it in the product. And afterwards, reconciling the 
names that 1000 companies have chosen, is really non-trivial, expecially 
if there's 1000 new malwares per month.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.