bugtraq - AV == parasites? (was: PocketPC exploitation)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 29 Sep 2005 13:54:53 +0300
From: Michael Shigorin <mike@...n.org.ua>
To: bugtraq@...urityfocus.com
Subject: AV == parasites? (was: PocketPC exploitation)

On Wed, Sep 28, 2005 at 11:16:50AM -0400, Jose Morales wrote:
> As for overhead on PPC placed by better antivirus solutions,
> this will very soon go away

Is it really proactive approach?  I didn't think someone having
M.Sc. in CS (not in Chemistry as I do) would seriously call AV
vendors "saviours" and not "parasites".

> handhelds keep being releases with bigger hard drives (upto 4
> gigabytes last time i hear) more RAM more CPU power and overall
> better performance, clearly the bottlenecks of current embedded
> system security will very soon dissipate and in its current
> state they can handle stronger AV solutions that was is
> currently out there.

I'm not pro in AV software by any margin but from these trenches, 
it seems like it's easier to burst malicious code variations
which consume cycles and bytes than to pump up CPU and RAM,
technoeconomically.

It won't be pleasant world when people will accept their mobile
phones suddenly spreading (and taking) virii and their cars
crashing for no reason until they have really fresh and
definitely the most stron antivirus on the block installed.

Maybe it's time to start pressing vendors and voting for
alternatives with one's pouch before getting that far?

* http://www.cems.uwe.ac.uk/~tdrewry/GM_MS.htm
* http://www.nokia.com/770

-- 
 ---- WBR, Michael Shigorin <mike@...linux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/
 ----       visit our conference (Oct 1):
--          http://conference.osdn.org.ua