full-disclosure - Re: keylogger

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <002d01c70792$5b7e1e00$0701a8c0@atlantia>
Date: Tue, 14 Nov 2006 02:12:32 -0000
From: "Colin Copley" <colin.75@...nternet.com>
To: <full-disclosure@...ts.grok.org.uk>
Cc: nick@...us-1.demon.co.uk
Subject: Re: keylogger

>If your users can run arbitrary .EXEs Emailed to them you have much
>bigger problems than the failings in your understanding of the common
>of infelicities of run-of-the-mill, scanning-based antivirus
>software...

Most small businesses, which is most businesses, user's can receive and run
arbitrary .exe's.  They also pay for AV software.  Is it too much to ask
that it picks up keyloggers punted on public forums all the AV vendors read.
Or warn that a file has it's own SMTP engine, networking functions?

Even a home user, a single license can cost £50. Infelicities? I think you
understate the standard £50pa should buy.

Regards
Colin

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/