nanog mailing list archives

Re: [fyodor () insecure org: C|Net Download.Com is now bundling Nmap with malware!]


From: Owen DeLong <owen () delong com>
Date: Tue, 6 Dec 2011 23:35:06 -0800


On Dec 6, 2011, at 6:20 PM, <Valdis.Kletnieks () vt edu> <Valdis.Kletnieks () vt edu> wrote:

On Tue, 06 Dec 2011 18:10:14 PST, Owen DeLong said:

No, a Trojan is malware. Any software which operates without the
knowledge or consent of the user to engage in operations the user would
not reasonably expect is not being used for good, no matter how well
intentioned.

Strictly speaking, it's "without the knowledge or consent of the *owner*". Especially
in corporate environments, "owner" != "user".

I would argue that the superset applies in a proper definition here.

Software which operates with the knowledge and consent of the owner, but, not the
knowledge or consent of the end-user is still, IMHO, nefarious at best.

Owen



Current thread: