full-disclosure - What is wrong with schools these days?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <444FF68D.8090709@utdallas.edu>
Date: Wed Apr 26 23:39:29 2006
From: pauls at utdallas.edu (Paul Schmehl)
Subject: What is wrong with schools these days?

Pavel Kankovsky wrote:
> On Tue, 25 Apr 2006, Paul Schmehl wrote:
> 
>>   We haven't had a Windows box hacked in a long time.
> 
> Does it include Windoze boxes possesed by malware? Such a box is not
> hacked in a strict sense but the difference is almost irrelevant (esp.
> when backdoors have become a standard feature of malware).
> 
I have no idea how you would put a number on that, because the way the 
AV software reports an "infection" is biased to inflate the numbers. 
If, for example, I go to a webiste, and while I'm there an exploit 
attempts to run but the AV software prevents it from running, it will 
report an "infection".  Yet the box was never infected.  The AV 
prevented the exploit from completing successfully.

If I get a virus through email (extremely unlikely here), and I click on 
the attachment deliberately trying to get it to run, and the AV software 
stops it, but reports an infection, is that an infection?  Or simply a 
detection and prevention?

Does adware count?  If so, which ones?  Which viruses would count as 
"hacks"?  And what actually counts as a hack?  A detection/prevention? 
Or only actual infections?

If you point is to say that Windows is far more susceptible to attack, 
then that's a given.

-- 
Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5007 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060426/e97eb74b/smime.bin