Approximately 800 vulnerabilities discovered in antivirus products
|
|
|
Comments (10)
Yet another demonstration
of why Anti Virus Software is a broken fix for the problem.
It's like shooting rubber bands at grizzly bears with one small difference. Keep your rubber band file, I mean signature file up to date. Oh, the difference: grizzly bears can actually be hurt by rubber bands.
hurt, no, annoy, yes.
Thats why you never go hunting with someone in bear country who is only carrying a .22 and is wearing track shoes.
Thats why you never go hunting with someone in bear country who is only carrying a .22 and is wearing track shoes.
> ...never go hunting with someone in bear country who is only carrying a .22...
I once heard of someone (I never met him personally, but we had a common acquaintance) who hunted bear with a bow. He's a braver (or stupider, your choice) man than I am.
I once heard of someone (I never met him personally, but we had a common acquaintance) who hunted bear with a bow. He's a braver (or stupider, your choice) man than I am.
Does anyone know why all the AV vulnerabilities have come out now (or at least in the last year)?
Nobody *ever* used to give out vulnerabilities for AV software. I seem to remember reading the Famed Security Researcher Tom Ptacek publicly envying the AV vendors for their ability to suppress vulnerability reports.
Nobody *ever* used to give out vulnerabilities for AV software. I seem to remember reading the Famed Security Researcher Tom Ptacek publicly envying the AV vendors for their ability to suppress vulnerability reports.
If you shoot them right in the eye you could actually hurt a bear. A computer virus doesn't care if it gets caught 99.99999% of the time. What are you going to do, put it in jail?
Actually my point is the very existence of viable virii is where the problem lies. And AV is like one fly swatter per fly.
Actually my point is the very existence of viable virii is where the problem lies. And AV is like one fly swatter per fly.
Quoting:Does anyone know why all the AV vulnerabilities have come out now (or at least in the last year)?Public pressure. SANS has been all over this for years. It's just one more entry point for malware.
Better to design security (authentication, authorization) into the system, than to tack it on afterwards.
What would really be cool is if an AV product were to catch a virus, track its point of origin, and send it right back where it came from.... mwahahahahahahhaa!
Redmond.
In fairness, the first one I ever saw was on a system designed in Cupertino.
In fairness, the first one I ever saw was on a system designed in Cupertino.
Discovered? How about already known?
I read in an issue of 2600 magazine how one could completely render an AV program useless, and most AV programs wouldn't be able to catch it.
Post a comment
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
Sign up and post (it is free) or Log in and post
