Subj : Ddge 3.99/SR9/SR16 released and avai
To : Nicholas Boel
From : mark lewis
Date : Thu Dec 14 2017 01:50 am
On 2017 Dec 13 17:50:36, you wrote to me:
ml>> honest question: if the files are scanned at the initial distribution
ml>> point, why do they need to be scanned again at every intermediate
ml>> point? do you trust all of them? do you trust all of their chosen
ml>> scanners? some choose to validate against virustotal but it is well
ml>> known that virustotal doesn't use the newest or even all of the
ml>> detection capabilities that are offered by the scanners the scan
ml>> against...
NB> And an honest answer in question form: How do you know every
NB> intermediate point is clean and clear of virus injection of any kind?
really? when is the last time you've seen a virus inject itself into binaries
inside a zip file? are you in the habit of unzipping the files where a virus
can find the binaries and infest them? think about it...
NB> Some people have absolutely no clue what they're doing, let alone know
NB> that their system has ringworm.
true on both accounts... especially with the sneaky bastards out there,
today... eg: the guy that came up with a way to infest a compiler so the
compiler injects the virus during compilation... even when the compiler builds
itself...
NB> I'd rather do it myself and be sure I'm not *that* idiot passing on
NB> infected files to others, thank you very much!
and if you miss then you are *that* one... especially if your chosen tool(s)
don't detect something nefarious... the real ugly is that because you made the
effort and missed, it is your responsibility... this is on the same lines as
those ""legal notices"" posted on some BBSes where they say they will read
every message posted looking for illegal activities... that puts them in legal
hot water if they miss something... better to not do it at all and be safe...
besides, there's no way to find all possible hidden messages within posts...
that's a chase game just like virus scanning is a chase game... you'll never
know you had it until it bites you...
)\/(ark
Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it
wrong...
... One hot pepper short of an enchilada.
---
* Origin: (1:3634/12.73)
