funsec mailing list archives

Re: Re: Malware sharing? People are full of shit [was: Get your computer viruses here!]


From: Drsolly <drsollyp () drsolly com>
Date: Thu, 29 Dec 2005 16:32:16 +0000 (GMT)

But this site will not only provide the bad guys with samples (which 
they'd be stupid to use) 

A) Some (possibly most) of the Bad Guys are stupid (I could cite various 
viruses in support of this).

B) You can take bedbug.a.12.b (which is detected by Wonderscan) and with a
few modifications create bedbug.a.12.c, which isn't detected by
Wonderscan.

Making the samples (at least of viruses) freely available is entirely 
undesirable and ethically indefensiblt, but making the (detailed) 
analysis of _any_ "clever", "advanced" or otherwise "useful" malware 
technique publicly available, we have the supposed good guys openly 
assisting (especially) the less clueful bad guys.

That is a very bad thing and turns the purported "good guys", and 
especially those providing the mechanism of that assistance, into 
contributory bad guys _despite_ the best of their good intentions in 
setting up the system...

Without vetting the site's membership, Val is providing much more 
valuable assistance to the bad guys than the good guys will ever get.
 
Of course, by making the virus and malware situation considerably worse, 
he'll be improving the profits of the AV companies, especially the ones 
with the largest manpower resources.

Maybe I should write an antivirus ...

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: