full-disclosure - MS Anti Virus?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: asp at webexc.com (Ben Timby)
Subject: MS Anti Virus?

I think everyone missed Nick's point. Since reversers work for the 
competition, don't you think they would find and use the M$ undocumented 
API? M$ would not be dumb enough to try it, since their competition in 
this market is comprised of reverse engineers, who would simply 
"counter-innovate" by using the M$ API :-).

Nick FitzGerald wrote:

> Valdis.Kletnieks@...edu wrote:
> 
> 
>>Naah.. They'd never use an undocumented API to benefit their product at the
>>expense of the competition, would they? ;)
> 
> 
> In this case, no.
> 
> Given that a lot of AV technical work is reverse engineering and that 
> most of the best AV reversers are not among those MS "acquired" from 
> RAV or who have joined MS from other AV developers subsequently (not 
> that they haven't got some very good reversers, just there are still an 
> awful ot of them elsewhere), I doubt even MS is stupid enough to 
> consider trying something like this.
> 
>