Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

[Full-disclosure] Re: ZoneAlarm phones home

Subject: [Full-disclosure] Re: ZoneAlarm phones home
Date: Thu, 26 Jan 2006 19:41:39 -0000
Ivan . wrote:
http://www.infoworld.com/article/06/01/13/73792_03OPcringley_1.html


  Sadly lacking in any details whatsoever, that article.

  I have once in the past noticed ZA doing a check-for-updates despite 
having configured it off, so I know there is at the very least a bug there, 
but I have no reason to suppose that was anything other than a bug; if it 
was a surreptitious backdoor or spyware, it would be bloody stupid to pop up 
the "There is an update available, do you want to download it?" dialog, but 
that's what it did.

  Without seeing the content of these packets, I don't see how Cringely can 
claim to know whether there's anything spyware or not about it.  There is no 
*evidence* for his claim.  I'm always suspicious of people who claim to have 
observed 'spyware phoning home' but who are then completely unable to give 
any details about the contents or destination of the packets, since it means 
that they are claiming something that they don't actually know at all.

  See also

http://www.theinquirer.net/?article=29254


    cheers,
      DaveK
-- 
Can't think of a witty .sigline today.... 



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

<Prev in Thread] Current Thread [Next in Thread>