Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Microsoft
[Top] [All Lists]

RE: More along the lines of malware disinfection

Subject: RE: More along the lines of malware disinfection
Date: Tue, 18 Mar 2008 16:55:37 -0700
Mike Moratz-Coppins
Wayne S. Anderson

2) Jon's point about reliability here is very key to the
discussion.  It is COMPLETELY irresponsible to warrant to a
customer that you can certify a system safe after it has been
infected with any manner of control-compromising code that has
gone undetected/untreated for a period of time.

Do you see this as applying in a joe average home user scenario?

Absolutely it does. If you say, "I've fixed it," you've arguably agreed to 
assume liability (as one of the earlier bits of conversation brought out) for 
the further good operation. If you've missed some piece of malware that then 
goes on to capture sensitive personal data...

...not a position I'd want to be in. And most of the clients I had back when I 
was working on home systems understood that, once I explained it to them. After 
all, the name of the game is user education. If they're engaging in risky 
practices, they need both the negative feedback (the inconvenience of having 
the drive wiped) and the positive feedback (okay, here's where you probably 
picked that up, and here's ways to browse more safely) if they're going to 
learn something about using their computer more intelligently.

--
Devin L. Ganger, Exchange MVP      Email: deving@3sharp.com
3Sharp                             Phone: 425.882.1032
14700 NE 95th Suite 210             Cell: 425.239.2575
Redmond, WA  98052                   Fax: 425.558.5710
(e)Mail Insecurity: http://blogs.3sharp.com/blog/deving/

<Prev in Thread] Current Thread [Next in Thread>