Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Virus
[Top] [All Lists]

RE: Consumer Reports AV and their 5,500 new variants

Subject: RE: Consumer Reports AV and their 5,500 new variants
Date: Tue, 22 Aug 2006 12:00:32 -0700
I'm surprised at the silence on the lists.  Only news articles mention
the controversy caused by the creation of 5,500 new virus variants by
Consumer Reports under the guidance of ISE and Dr. Avi Rubin.  I've seen
no comments by Avi, and Consumer Reports declined to comment.

One more article applauding Consumer Reports:

"Whether they create their own viruses or use existing ones they need to
be careful in the handling of those viruses. There's no ethical slippery
slope here, there's just an attempt to test products aggressively, and
that's something to applaud." - 
http://www.eweek.com/article2/0,1759,2005814,00.asp? 

Bill Stout

-----Original Message-----
From: Bill Stout [mailto:bill.stout@greenborder.com] 
Sent: Monday, August 21, 2006 8:49 PM
To: focus-virus@securityfocus.com
Subject: Consumer Reports AV and their 5,500 new variants


Now that consumer reports has generated 5,500 new virus variants, what's
the repercussion?  Will anything at all happen to CR, other than they
bump up their magazine sales?

I understand some companies may be interested in contacting CR to get
the test samples.  Even Paller at SANs says AV companies should thank
CR.

http://www.sans.org/newsletters/newsbites/newsbites.php?vol=8&issue=65&r
ss=Y#sID320 
"[Editor's Note (Paller): This controversy is especially problematic for
the leading AV companies because they have traditionally not done well
in finding and blocking new viruses quickly. But for goodness sakes, if
they don't do well at finding and blocking new viruses, why ae we buying
them? They should stop complaining and instead thank Jeff Fox and the
editors at Consumer Reports for helping to do important product
improvement research for them. ]"

http://www.computerworld.com/action/article.do?command=viewArticleBasic&;
articleId=9002499&source=rss_topic17 

http://cbs4boston.com/consumer/local_story_226152410.html

________
Bill Stout
GreenBorder, Director of Information Technology
bill.stout@greenborder.com | office 650.625.0601 x341 | cell
408.966.9804


----------------------------------------------------------------------------
ALERT: "How a Hacker Launches a SQL Injection Attack!" - White Paper
It's as simple as placing additional SQL commands into a Web Form input box 
giving hackers complete access to all your backend systems!

https://download.spidynamics.com/1/ad/sql.asp?Campaign_ID=70160000000CZWl
----------------------------------------------------------------------------



<Prev in Thread] Current Thread [Next in Thread>