Re: [Full-Disclosure] A suggestion to all AV vendors...

colinm_at_clientsecure.net
Date: 12/07/04

  • Next message: Paul Szabo: "[Full-Disclosure] Re: Online Script Decoder" 
    To: full-disclosure@lists.netsys.com
Date: Tue, 07 Dec 2004 11:29:35 -0600

    Couldn't agree more, their concern isn't security, but
    survival of the business model.
    By providing a what you proposed would be a threat to their
    profitable model as so
    eloquently pointed out by Valdis and many others time and
    time again.

    -cm

    Valdis.Kletnieks@vt.edu wrote:
    > On Mon, 06 Dec 2004 19:29:26 PST, bipin gautam said:
    >
    >
    >> A simple yet effective solution would be, for AV
    >>vendors to (say) add the vulnerable system dll's,
    >>execudables etc... in a threat list (Refering to
    >>Microsoft's KB or something similar) And after
    >>completing the virus scan, suggest the users to
    >>download proper patches accordingly to threat level
    >>and directing the end users towards proper link to do
    >>so?
    >
    >
    > Simple, effective, and Won't Happen In Our Lifetime.
    >
    > Remember - we're talking about a multi-billion dollar market segment
    > devoted to fixing shortcomings in another company's software. And said
    > segment doesn't want to kill the goose that laid the golden eggs.
    >
    > Repeat after me: Most A/V vendors don't actually give a squat about
    > your security. They are there to sell you products and improve their
    > bottom line, not yours. They don't care about your bottom line as long
    > as your bottom line can still pay their invoices.
    >
    > The A/V vendors have known for several years now exactly how not to
    > send "a virus was cleaned from your email by ShinyAV" spam, but they keep
    > doing it anyhow, just to get brainshare for ShinyAV. What business case
    > is there for them to give you a pointer to vendor patches that will close
    > some of the holes that let the malware in?
    >
    > (Also, keep in mind that if they don't point you at IE fixes, then when
    > you get 0wned by an IE hole, they can just say "Hey, that's not a virus,
    > that's an IE hole, Not Our Problem"...)

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Paul Szabo: "[Full-Disclosure] Re: Online Script Decoder"

    Relevant Pages

    • Re: Verify Your Security Provider -- The truth behind manual testing.
      ... manual testing, not just automated scans. ... greater than the cost of the best possible security services. ... should be) asking for and b) to evaluate the proposals from vendors. ... If you want to be protected from the threat, you need to be tested at ...
      (Pen-Test)
    • MI5 Boss hints kiss goodbye to civil rights...
      ... "THE INTERNATIONAL TERRORIST THREAT AND THE DILEMMAS IN COUNTERING IT" ... I am delighted to be here to celebrate the 60th Birthday of the AIVD. ... The friendship between the AIVD and my Service, the British Security ... fascism then, by the time I met him, on countering terrorism. ...
      (soc.culture.scottish)
    • Re: NDC-Al Gore invented being a hypocrite
      ... misuse terror threats to manipulate the public for political purposes. ... It said nothing about this particular instance, and it no way implies ... or suggests that this specific threat or the threat of terrorism in ... time of war or national unrest due to security issues. ...
      (rec.music.gdead)
    • Re: Zonealarm
      ... responsibility to cover their transgressions. ... He wasn't the one who was asking for advice. ... You came here ignorant of the business model, ... You came here ignorant of the security model, ...
      (comp.os.linux.security)
    • Re: U.S. Embassy Warning Of Possible Terror Attack On 4-5 Star Hotels in China
      ... November 9 Threat Message Retracted ... The Chinese Ministry of Public Security informed the U.S. Embassy in Beijing ...
      (rec.travel.asia)