Nasty propaganda by

Nasty propaganda by "security tool" providers

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Nasty propaganda by "security tool" providers Volker Birk 08-05-2006
<
Posted by Volker Birk on August 5, 2006, 1:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

while my simple and harmless PoC codes how to ignore "Personal
Firewalls" already are found as "viruses" by many virus scanners,
now my tool "Shutdown Windows' services" is found as
"SPR/Tool.KillService" virus by AntiVir. A tool, which has nothing to do
with a virus, and improves security on a Windows 2000 or Windows XP host
before SP2.

The reason, why this is done, should be obvious. Just think twice.

I'm wondering, wether one at all could trust in AntiVir any more. How
many other things this tool is "detecting" because of political reasons,
ignoring the needs of the user?

Yours,
VB.
--
Ich würde schätzen, dass ca. 87% aller spontanen Schätzungen völlig für
den Arsch sind.

        Ralph Angenendt in debate@ccc.de

Posted by Leythos on August 5, 2006, 2:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Hi,
>
> while my simple and harmless PoC codes how to ignore "Personal
> Firewalls" already are found as "viruses" by many virus scanners,
> now my tool "Shutdown Windows' services" is found as
> "SPR/Tool.KillService" virus by AntiVir. A tool, which has nothing to do
> with a virus, and improves security on a Windows 2000 or Windows XP host
> before SP2.
>
> The reason, why this is done, should be obvious. Just think twice.
>
> I'm wondering, wether one at all could trust in AntiVir any more. How
> many other things this tool is "detecting" because of political reasons,
> ignoring the needs of the user?

As a POC, since you've stated that your tool can be shown how
ineffective certain tools are, it's being detected because of the way it
works and signature in how it work - like malware.

If you have a POC that works, then you already know that it mimics
malware and should be detected just like Malware.

Now, since your POC have flaws, since they don't actually work on a
properly configured system, what can you complain about?

There is no conspiracy, just proper detection being one - if you're
going to pretend to be malware then accept that you will be detected as
malware.

--

spam999free@rrohio.com
remove 999 in order to email me