full-disclosure - Re: No anti-virus software? No internet connection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <6C0EC0D11254F5CAC31A7C44@utd65257.utdallas.edu>
Date: Tue, 22 Jun 2010 10:16:12 -0500
From: Paul Schmehl <pschmehl_lists@...rr.com>
To: "Ivan ." <ivanhec@...il.com>,
	full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: No anti-virus software? No internet connection

--On Tuesday, June 22, 2010 12:55:25 +1000 "Ivan ." <ivanhec@...il.com> wrote:

> Security is as easy as that......
>
> http://www.news.com.au/technology/no-anti-virus-software-no-internet-connecti
> on/story-e6frfro0-1225882656490
>

I don't have a problem with cutting off connections for infected machines.  In 
fact I think that's an excellent idea.  However, the suggestion to require 
antivirus and firewall software to access the internet is naive and dangerous. 
Neither of those technologies will guarantee you an infection-free system, and 
promoting the idea that they will promotes a false sense of security.

Yes, you should use antivirus software if you're running windows, and yes, it's 
a good idea to use a firewall.  Neither is a panacea, however, and neither will 
keep you from getting a trojan from the latest attack methodologies.

-- 
Paul Schmehl, Senior Infosec Analyst
As if it wasn't already obvious, my opinions
are my own and not those of my employer.
*******************************************
"It is as useless to argue with those who have
renounced the use of reason as to administer
medication to the dead." Thomas Jefferson

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/