Advanced

Approximately 800 vulnerabilities discovered in antivirus products

Posted by tracyanne on · 10 comments
ZDNet; By Ryan Naraine, Dancho Danchev, Nate McFeters
Mail this story
Print this story

Not Linux, but pertinent, I think....In what appears to be either a common scenario of "when the security solution ends up the security problem itself" or a Vulnerabilities Antivirus Software 2005/2007 product launch basing its strategy on outlining the increasing number of critical vulnerabilities found in competing antivirus products.

Full Story

  Nav
» Read more about: Story Type: News Story; Groups: Linux

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (10)

Yet another demonstration

of why Anti Virus Software is a broken fix for the problem.
It's like shooting rubber bands at grizzly bears with one small difference. Keep your rubber band file, I mean signature file up to date. Oh, the difference: grizzly bears can actually be hurt by rubber bands.
hurt, no, annoy, yes.

Thats why you never go hunting with someone in bear country who is only carrying a .22 and is wearing track shoes.
> ...never go hunting with someone in bear country who is only carrying a .22...

I once heard of someone (I never met him personally, but we had a common acquaintance) who hunted bear with a bow. He's a braver (or stupider, your choice) man than I am.
Does anyone know why all the AV vulnerabilities have come out now (or at least in the last year)?

Nobody *ever* used to give out vulnerabilities for AV software. I seem to remember reading the Famed Security Researcher Tom Ptacek publicly envying the AV vendors for their ability to suppress vulnerability reports.
If you shoot them right in the eye you could actually hurt a bear. A computer virus doesn't care if it gets caught 99.99999% of the time. What are you going to do, put it in jail?

Actually my point is the very existence of viable virii is where the problem lies. And AV is like one fly swatter per fly.
Quoting:Does anyone know why all the AV vulnerabilities have come out now (or at least in the last year)?
Public pressure. SANS has been all over this for years. It's just one more entry point for malware.

Better to design security (authentication, authorization) into the system, than to tack it on afterwards.
What would really be cool is if an AV product were to catch a virus, track its point of origin, and send it right back where it came from.... mwahahahahahahhaa!
Redmond.

In fairness, the first one I ever saw was on a system designed in Cupertino.

Discovered? How about already known?

I read in an issue of 2600 magazine how one could completely render an AV program useless, and most AV programs wouldn't be able to catch it.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post