full-disclosure - 45% of the free files collected via KaZaA c ontained malware

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <B0DF0180764CDC4888BACFD27C84125F08AE5698@stl02mexc11.corp.chartercom.com>
From: RCompton at chartercom.com (Compton, Rich)
Subject: 45% of the free files collected via KaZaA c
	ontained malware

Maybe they are considering all those Britney Spears mp3s are malware.  I
sure do!!

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Michael
Renzmann
Sent: Friday, January 09, 2004 9:12 AM
To: Bernardo Quintero
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] 45% of the free files collected via KaZaA
contained malware

Hi.

Bernardo Quintero wrote:
 >>Impossible .... At least 90% of the files on KaZaA are media files 
... (non
 >>executable files)
 >>I know there's a lot of bad .exe's on kazaa ... But 45% just can't be 
right
 > Obviously.

I'm no native english speaker, but... the way I understood the original 
headline is: 45% of the files that get _downloaded_ contain malware. The 
fact that more than 90% of the hosted files are non-executable media 
files does not mean that these type of files also make up 90% of the 
things that get downloaded. It could well be that the relatively small 
amount of "potentially executable" files are overly proportional often 
downloaded from KaZaA.

Nevertheless, it would be interesting to learn more about the 
methodology that has been used for this report.

Bye, Mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html