lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <088801c40557$eee6e720$112ea8c0@LUFKIN.DPSOL.COM>
From: purdy at tecman.com (Curt Purdy)
Subject: [inbox] Re: Re: E-Mail viruses 

Valdis.Kletnieks wrote:
> It's not 3^36, which is multiple billions, it's only 36^3,
> which is 46,656.
>
> And only one has to get through to an idiot.
>
> Anybody else got a mail server that blocked more than that
> many Netsky's
> this weekend alone?  Draw the obvious conclusion here...
>
> And *that* was why I was dubious as to the real usefulness...

I don't care if it is only 46.  The whole point was I don't care if the
whole world knows our proprietary extension.  No virus writer is going to
waist time pointing her 0-day worm at us.  The whole idea is to spread as
much as possible, so they will pick standard extensions only.  If it is not
a 0-day, our AV server will kill it anyway. This mehtodology has stopped
100% of all virus attachments since institution.  Our AV server is getting
bored, having nothing to do.

In addition I don't get up at 5am anymore to scan the lists for the newest
outbreak. The peaceful sleep alone is proof of it's usefullness.

Curt Purdy CISSP, GSEC, MCSE+I, CNE, CCDA
Information Security Engineer
DP Solutions

----------------------------------------

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- White House cybersecurity adviser Richard Clarke


Powered by blists - more mailing lists