full-disclosure - Show me the Virrii!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: Show me the Virrii!

Simon ?stengaard <simon@...engaard.dk> wrote:

> Have a look at the clam a-v scanner http://clamav.elektrapro.com/ . It 

Perhaps better that he doesn't...

Seeing another toy "antivirus" program doing just what he is doing may 
falsely encourage him that he is on the right track!

> is an open source community based scanner, but it still detects quit a 
> few vira.  ...

Clam-AV's "quite a few" is, however, still well short of even all the 
"in the wild" viruses on the WildList which, from a subsequent post to 
the one your response is to, appears to be Richard's ammended target.

> ...  They build their vira db on reports from their user community. 
> May be you can use their a-v database.

And maybe he can't for licensing reasons.

I didn't look too hard, but I could not find a statement suggesting the 
license conditions that cover the Clam-AV "Virus DB" detection data are 
any different from those covering the rest of the project.  Presumably 
that means they are covered by the GPL as part of the code of the 
project as a whole.  If so, I believe Richard's project would also have 
to be GPL-licensed for him to use the Clam-AV data.

-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854