[87128] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Clueless anti-virus products/vendors (was Re: Sober)

daemon@ATHENA.MIT.EDU (Jamie C. Pole)
Sun Dec 4 23:25:44 2005

In-Reply-To: <Pine.LNX.4.62.0512050416430.32648@pop.ict1.everquick.net>
From: "Jamie C. Pole" <jpole@jcpa.com>
Date: Sun, 4 Dec 2005 23:25:12 -0500
To: NANOG Mailing List <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu



An even more cynical way would be to say that most antivirus  
companies aren't in the business of analyzing viruses - they are in  
the business of selling antivirus software.

I believe that is the fundamental problem.

Jamie

--
Jamie C. Pole
jpole@jcpa.com
http://www.jcpa.com

InfoSec / InfoWar / Forensics


On Dec 4, 2005, at 11:18 PM, Edward B. Dreger wrote:

>
> SMB> Date: Sun, 04 Dec 2005 23:04:52 -0500
> SMB> From: Steven M. Bellovin
>
> SMB> A-V companies are in the business of analyzing viruses.  They  
> should
> SMB> *know* how a particular virus behaves.
>
> The cynical would say they _do_ know, and "accidental" backscatter  
> is a
> way to advertise their products. ;-)
>
>
> Eddy
> --
> Everquick Internet - http://www.everquick.net/
> A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/
> Bandwidth, consulting, e-commerce, hosting, and network building
> Phone: +1 785 865 5885 Lawrence and [inter]national
> Phone: +1 316 794 8922 Wichita
> ______________________________________________________________________ 
> __
> DO NOT send mail to the following addresses:
> davidc@brics.com -*- jfconmaapaq@intc.net -*- sam@everquick.net
> Sending mail to spambait addresses is a great way to get blocked.
> Ditto for broken OOO autoresponders and foolish AV software  
> backscatter.


home help back first fref pref prev next nref lref last post