lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
From: RCompton at chartercom.com (Compton, Rich)
Subject: 45% of the free files collected via KaZaA c
	ontained malware

Maybe they are considering all those Britney Spears mp3s are malware.  I
sure do!!



-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Michael
Renzmann
Sent: Friday, January 09, 2004 9:12 AM
To: Bernardo Quintero
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] 45% of the free files collected via KaZaA
contained malware


Hi.

Bernardo Quintero wrote:
 >>Impossible .... At least 90% of the files on KaZaA are media files 
... (non
 >>executable files)
 >>I know there's a lot of bad .exe's on kazaa ... But 45% just can't be 
right
 > Obviously.

I'm no native english speaker, but... the way I understood the original 
headline is: 45% of the files that get _downloaded_ contain malware. The 
fact that more than 90% of the hosted files are non-executable media 
files does not mean that these type of files also make up 90% of the 
things that get downloaded. It could well be that the relatively small 
amount of "potentially executable" files are overly proportional often 
downloaded from KaZaA.

Nevertheless, it would be interesting to learn more about the 
methodology that has been used for this report.

Bye, Mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ