full-disclosure - 45% of the free files collected via KaZaA contained malware

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3FFEC4C7.2000407@dylanic.de>
From: security at dylanic.de (Michael Renzmann)
Subject: 45% of the free files collected via KaZaA contained
 malware

Hi.

Bernardo Quintero wrote:
 >>Impossible .... At least 90% of the files on KaZaA are media files 
... (non
 >>executable files)
 >>I know there's a lot of bad .exe's on kazaa ... But 45% just can't be 
right
 > Obviously.

I'm no native english speaker, but... the way I understood the original 
headline is: 45% of the files that get _downloaded_ contain malware. The 
fact that more than 90% of the hosted files are non-executable media 
files does not mean that these type of files also make up 90% of the 
things that get downloaded. It could well be that the relatively small 
amount of "potentially executable" files are overly proportional often 
downloaded from KaZaA.

Nevertheless, it would be interesting to learn more about the 
methodology that has been used for this report.

Bye, Mike