bugtraq - Re: PocketPC exploitation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <433D39CD.6040301@syneticon.de>
Date: Fri, 30 Sep 2005 15:12:45 +0200
From: Denis Jedig <seclists@...eticon.de>
To: jose@...stopearth.com
Cc: vuln-dev@...urityfocus.com, bugtraq@...urityfocus.com
Subject: Re: PocketPC exploitation

Jose Morales wrote:

> proactive defense is better than reactive defense that is the best real 
> life experience we have learned from the past to help prepare for the 
> future.

Although it is a Good Idea (tm) to uncover design deficiencies in 
current AV products, we never should forget that "antivirus" is *by 
definition* a reactive thing and thus cannot protect from unknown 
threats. If we wanted to have a *really* proactive approach, we would 
have to either ask for OS capabilities to efficiently compart 
(malicious) code or for the software manufacturers to take damn care 
when using low-level languages and introduce efficient patching 
mechanisms at last.

Regards,

Denis Jedig
syneticon networks GbR