full-disclosure - win2kup2date.exe ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: uberguidoz at gmail.com (Über GuidoZ)
Subject: win2kup2date.exe ?

Hey, the man asked for help, so I offered it. Simple as that... I'm a
helpful guy, it's what makes me tick. Dedicated my life to a
non-profit organization that helps the average consumer FOR FREE with
security consulting, technical support, and personal privacy. Not
because I'm trying to collect anything. Not because I'm trying to get
a foothold on any business. Simply for the fact that I remember how
frustrated and helpless I was when I didn't understand anything. I try
to make sure others don't have to suffer the same fate.

Be cautios with your words. You never know who you may be speaking to,
or how they will take it. General advise; not necessarily relating to
this situation beyond common courtesy.

As for VirusTotal.com, to be honest I have never cared why they
provide the service they do. I also could care less if they are
keeping copies of the viruses that are sent to them... they are
available all over the Internet. (Google it...) When someone has an
unknown malware EXE and they need a quick way to identify it to fix a
problem, why not go with what works? Their business practices isn't
any business of mine. The fact that they answer the question I ask,
however, IS.

A little respect is all I ever ask. =)

-- 
Peace. ~G

On Fri, 03 Sep 2004 11:19:41 +1200, Nick FitzGerald
<nick@...us-l.demon.co.uk> wrote:
> ?ber GuidoZ wrote:
> 
> > ...  If you want to email me a copy of it, I'll
> > rip it apart and see what can be seen.
> 
> And world plus dog should entrust you with such material because???
> 
> > P.S. Send it to [...] - it's my "catch all" for
> > virus/unknown files. Just be sure to ZIP it up or else the web host
> > won't let it through. Otherwise I have disabled all checks/scan.
> > Downloads directly to a secured Linux box.
> 
> That's all very nice, but alone, far from the makings of someone to
> entrust arbitrary, suspected malware samples to.
> 
> I'm also rather suspicious of your promotion of Virus Total.  Hispasec,
> as far as I can tell (Spanish being something I have to have translated
> via online services), has no antivirus or similar product of its own,
> yet it has set up, and some folk seem to be promoting, what is
> effectively a sample collection mechanism.  I've also heard vague
> rumblings that Hispasec/Virus Total does not have suitable licenses for
> at least some of the scanners used in its service (and strongly suspect
> that several of the AV vendors whose products are currently used would
> not allow their products to be licensed for use in a service of the
> kind Virus Total offers anyway because it paints a rather disturbing
> trust picture -- "You can trust me because I can run a virus
> scanner...").
> 
> Regards,
> 
> Nick FitzGerald