funsec mailing list archives

Re: Re: Malware sharing? People are full of shit [was: Getyour computer viruses here!]


From: Gadi Evron <ge () linuxbox org>
Date: Fri, 30 Dec 2005 12:51:27 +0200

Drsolly wrote:
On Thu, 29 Dec 2005, Gadi Evron wrote:


Pierre Vandevenne wrote:

Good Morning,

GE> Because researchers today find it HARD to get samples, while bad guys find
GE> it easy as pie, and easier every eyar.

Not sure I follow the logic here: why would it be hard for good guys
to get samples and easy for bad guys?

It should be as easy for both categories unless, of course, the bad
guys exclude the good guys from their exchanges. In other words, if you
need to be a "vetted" bad guy to gain access. But then, if that
vetting system is so tremendously successful for the bad guys, why
shouldn't the good guys use one?

Because it doesn't scale in this case.


No, it scales just fine. Think, for example, about the Ebay trust system. That scaled just fine.

No. It doesn't scale just fine.

You will not allow to start sharing and see who is good and who is bad and let people vote on it.

You need to do.. DO.. vetting on thousands of people.

How do you scale it?
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: