funsec mailing list archives

Re: AV is DEAD Concepts Like Windows Shared Computer Toolkit Are The Future


From: Don Kennedy <zoverlords () yahoo com>
Date: Tue, 21 Mar 2006 03:18:35 -0800 (PST)

Yes, that was my point, nothing should modify without explict permission, not the normal logic of today of, if it got 
past my AV then anything it wants to do is OK.
   
  The SCT also has a canned set of restrictions, where VMWare does not, and VMware was never designed for securing 
single systems, lol.

James Kehl <shykta () dione ids pl> wrote:
  

On Mon, 20 Mar 2006, Don Kennedy wrote:

So define the problem, is it "I don't want ANYTHING modifying ANYTHING I don't want modified, or is it "I know there 
is no functional working example of AI but I am brave enough to use this A/V to protect my systems"?

You know, VMware has a 'snapshot' feature...

...but, as anyone who has done too much fiddling with disk imagers knows,
it's not "Nothing should modify my hard drive", it's "Nothing should
modify my hard drive but security patches, software updates, me when I
save documents, me when I change settings..."

James


                
---------------------------------
Brings words and photos together (easily) with
 PhotoMail  - it's free and works with Yahoo! Mail.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Current thread: