full-disclosure - AV companies better hire good lawyers soon.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <414606AD.6020203@comcast.net>
From: hjtoi at comcast.net (Heikki Toivonen)
Subject: AV companies better hire good lawyers soon.

Micheal Espinola Jr wrote:
> I disagree.  Programmer's should know to submit their code to the
> various AV companies in order to avoid false-positives.

That doesn't seem like a scalable solution. How can a programmer find 
every AV manufacturer out there, and do all of the AV companies even 
have procedures for submitting programs for testing? Even if there was a 
comprehensive list of these AV manufacturers, do they all have the same 
standard procedures, or is the programmer supposed to play by a 
different process with each company? And what guarantees that the AV 
companies will actually do anything? And what about programs that are 
supposed to be secret?

-- 
   Heikki Toivonen