Nasty propaganda by

Nasty propaganda by "security tool" providers

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Nasty propaganda by "security tool" providers Volker Birk 08-05-2006
Posted by Leythos on August 5, 2006, 9:09 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
b__nice@hotmail.com says...
>
> >b__nice@hotmail.com says...
> >> On Sun, 06 Aug 2006 00:29:32 +0200, Sebastian Gottschalk
> >>
> >> >B. Nice wrote:
> >> >
> >> >>> So, it being detected means that he's got the right idea, about how the
> >> >>> actual malware works, but what he's failed to address is that his POC
is
> >> >>> worthless on a properly configured computer.
> >> >>
> >> >> What do you mean by "properly configured computer"?
> >> >
> >> >Please add at least a smilie when you know that he doesn't know an answer.
> >>
> >> Well, I'm actually just trying to understand Leythos' opinion.
> >
> >That's what bothers them - if you reason it out yourself and see that
> >anything that exploits a hole SHOULD be detected and blocked (AV,
> >Firewall, etc..) then you will understand that VB is just complaining to
> >get sympathy, not because anyone or anything is really out to get him.
>
> Sorry, but you will never be able to convince me that code doing
> nothing malicious should be detected as malware. We will just have to
> agree to disagree on that.

Explain this to me then - if a known malware takes advantage of an
exploit in program X, and a unknown program takes advantage of the SAME
EXPLOIT, how is either any different?

> BTW, I don't think "they" (whoever that is) care too much about what
> opinions I might form.

Explain to me why you consider two programs that take advantage of an
exploit, something that is known to compromise the integrity of the
OS/Application, should not be detected as a Threat?

--

spam999free@rrohio.com
remove 999 in order to email me

Posted by Sebastian Gottschalk on August 5, 2006, 10:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options