lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <BAY12-F76cJqj0CYixM00001a34@hotmail.com>
From: randnut at hotmail.com (first last)
Subject: MyDoom download info

>Given that its possible for a program to detect that its being run under
>a debugger,
>wouldn't it be possible for a virus to behave differently in the debug
>environment?

Yes. But todays computer viruses are very simple and very weak. Wait a few 
years and they should be a lot more powerful.

[...]
>IE: how do you know that the behavior you see in the lab reflects
>behavior in
>the real world? (I get a kind of 'schrodingers cat' deja vu).

You can always disassemble the virus, which is what people will do if it's a 
real "popular" one such as MyDoom. Then you know for sure what it's going to 
do. Viruses are very easy to understand because they're so small compared to 
the average windows program.

_________________________________________________________________
What are the 5 hot job markets for 2004? Click here to find out. 
http://msn.careerbuilder.com/Custom/MSN/CareerAdvice/WPI_WhereWillWeFindJobsIn2004.htm?siteid=CBMSN3006&sc_extcmp=JS_wi08_dec03_hotmail1


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ