full-disclosure - MyDoom.b samples taken down

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: MyDoom.b samples taken down

Valdis.Kletnieks@...edu wrote:

> > You wouldn't want us to be seen to "fuelling the problem" to ensure we 
> > have a job would you??
> 
> You're talking about an industry that sees fit to make the problem 3 to 4
> times worse by sending advertising spam (a.k.a "a virus was detected" notices)
> back to the (almost always during the last 2-3 years) forged From: of the
> mail, ...

That's a separate issue and one some of us are vert passionate about 
fixing -- e.g.

   http://www.f-prot.com/news/gen_news/open_letter_30jan2004.html

_and_ which some of us are working to get fixed.

> ... and that inflate their penis-extender "number of different viruses
> detected" claims with things not prevalent enough in the wild to be a threat.

That's a red herring -- it is many, many, MANY years since claimed 
detection numbers mattered much to anyone and that was a case of the 
technologists prevailing over the marketeers.

> If anything, *not* fueling the problem to ensure you have a job would be
> so out-of-character for the A/V industry that you'd probably be shunned
> as a complete and total loon.

And you know I'm not, how??   8-)

Regards,

Nick FitzGerald